Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20426826CA5248325565D29490A21E2BC6BEC6508D3A7FD587E8FF6B56BA4460/0/3230302e3130362e3232302e302f32332d3234203d3e20323731383836.roa
File:                     3230302e3130362e3232302e302f32332d3234203d3e20323731383836.roa (raw, json)
Hash identifier:          xaOEnXrbKXJdEc86AYNLL6pJER987yDSpWIQcIzARnQ=
Subject key identifier:   D3:15:15:25:2A:64:50:EC:F2:05:9A:D1:6F:AF:9A:1D:6A:D2:CD:BE
Certificate issuer:       /CN=77D9FCB0FDFB516C8287AE23202A7148E6028984
Certificate serial:       01F1AE29674A9E9F6E95D445BE7C8737B247C189
Authority key identifier: 77:D9:FC:B0:FD:FB:51:6C:82:87:AE:23:20:2A:71:48:E6:02:89:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77D9FCB0FDFB516C8287AE23202A7148E6028984.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20426826CA5248325565D29490A21E2BC6BEC6508D3A7FD587E8FF6B56BA4460/0/3230302e3130362e3232302e302f32332d3234203d3e20323731383836.roa
Signing time:             Mon 25 May 2026 12:44:02 +0000
ROA not before:           Mon 25 May 2026 12:39:02 +0000
ROA not after:            Mon 24 May 2027 12:44:02 +0000
asID:                     271886
IP address blocks:        200.106.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20426826CA5248325565D29490A21E2BC6BEC6508D3A7FD587E8FF6B56BA4460/0/77D9FCB0FDFB516C8287AE23202A7148E6028984.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20426826CA5248325565D29490A21E2BC6BEC6508D3A7FD587E8FF6B56BA4460/0/77D9FCB0FDFB516C8287AE23202A7148E6028984.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77D9FCB0FDFB516C8287AE23202A7148E6028984.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f1:ae:29:67:4a:9e:9f:6e:95:d4:45:be:7c:87:37:b2:47:c1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77D9FCB0FDFB516C8287AE23202A7148E6028984
        Validity
            Not Before: May 25 12:39:02 2026 GMT
            Not After : May 24 12:44:02 2027 GMT
        Subject: CN=D31515252A6450ECF2059AD16FAF9A1D6AD2CDBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:49:7c:4d:66:68:66:77:13:8e:3d:be:16:
                    cc:84:66:68:1f:e7:bf:fd:f6:bf:89:b6:87:f5:a1:
                    4f:3b:8a:6e:60:b8:a9:2f:93:fe:c5:fb:67:ee:c7:
                    63:b2:47:1f:af:55:62:ae:e7:3f:9c:ab:03:c5:ca:
                    93:84:fe:d4:e6:59:62:b1:20:c9:0a:d1:9f:83:2e:
                    55:2e:bb:c4:4d:e9:ab:f3:da:97:4c:8c:17:bb:2d:
                    09:3b:02:2d:74:4c:6c:4e:63:10:40:23:1b:02:9e:
                    ee:46:be:f3:bc:69:9b:87:7e:d2:1e:57:5f:f1:63:
                    9a:d3:d3:22:c8:fd:ba:93:32:58:ce:aa:bc:a6:de:
                    46:c0:f3:c0:89:d2:6d:1b:97:fb:f2:b4:49:9a:e4:
                    e7:61:e3:7a:ce:ef:1f:90:d3:4a:e3:a8:2b:bb:40:
                    0f:81:ee:af:28:86:0e:35:2d:44:b5:a8:a0:c9:f6:
                    f5:5d:2c:d5:83:60:50:28:d7:a8:c4:90:ff:c7:cf:
                    e0:f0:d7:75:ba:ff:3d:b6:19:1a:f5:69:68:94:90:
                    90:f3:18:43:e3:c2:fa:1c:ce:e9:c4:6a:a5:27:a6:
                    03:2b:f4:f1:df:c3:40:35:58:b7:95:ba:78:72:af:
                    8b:02:39:0c:48:ad:d2:68:88:9a:cd:c1:a7:7c:84:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:15:15:25:2A:64:50:EC:F2:05:9A:D1:6F:AF:9A:1D:6A:D2:CD:BE
            X509v3 Authority Key Identifier:
                keyid:77:D9:FC:B0:FD:FB:51:6C:82:87:AE:23:20:2A:71:48:E6:02:89:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20426826CA5248325565D29490A21E2BC6BEC6508D3A7FD587E8FF6B56BA4460/0/77D9FCB0FDFB516C8287AE23202A7148E6028984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77D9FCB0FDFB516C8287AE23202A7148E6028984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20426826CA5248325565D29490A21E2BC6BEC6508D3A7FD587E8FF6B56BA4460/0/3230302e3130362e3232302e302f32332d3234203d3e20323731383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:81:71:d3:78:4c:4d:00:7c:88:8e:eb:2c:f6:f1:f1:39:f5:
         0a:1b:5b:8b:31:a1:46:b5:01:0d:ea:a3:30:f5:80:67:8a:75:
         28:9d:3f:ff:30:63:9a:21:00:19:0a:b5:cf:94:78:1a:14:6c:
         56:04:b4:13:00:61:9a:b0:43:eb:15:dd:5a:e1:bd:24:64:9c:
         87:70:a1:f8:09:7b:96:47:a4:d1:17:5e:9e:b5:e4:2c:f8:4c:
         d8:c1:ba:90:b7:e2:5c:8c:8b:16:61:01:fe:04:90:c8:c3:1d:
         18:c4:36:67:4d:67:2d:d6:93:15:0d:47:d6:14:78:d6:c2:c1:
         be:d7:e3:93:17:ba:2e:cd:bc:9e:79:96:12:93:81:36:4b:f6:
         31:20:83:b6:77:04:3b:1d:6d:fe:1a:ed:27:9f:78:e6:d0:6a:
         b4:08:eb:86:fb:5d:ea:04:ef:b0:e9:4f:96:d9:7a:88:54:37:
         7c:44:72:2c:49:ab:95:1e:ea:aa:4f:3e:9a:04:86:ed:3b:18:
         d6:b5:57:ae:51:84:19:21:6d:5c:a0:f7:18:4f:ab:0d:85:f9:
         76:4b:9b:19:00:17:e9:ad:1e:8c:cb:36:4d:70:45:8f:80:fc:
         1b:ed:4a:db:99:e5:06:68:9c:b9:87:b2:a1:6d:f7:c6:e9:93:
         17:88:dd:2b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUAfGuKWdKnp9uldRFvnyHN7JHwYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdEOUZDQjBGREZCNTE2QzgyODdBRTIzMjAyQTcxNDhF
NjAyODk4NDAeFw0yNjA1MjUxMjM5MDJaFw0yNzA1MjQxMjQ0MDJaMDMxMTAvBgNV
BAMTKEQzMTUxNTI1MkE2NDUwRUNGMjA1OUFEMTZGQUY5QTFENkFEMkNEQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClpEl8TWZoZncTjj2+FsyEZmgf
57/99r+Jtof1oU87im5guKkvk/7F+2fux2OyRx+vVWKu5z+cqwPFypOE/tTmWWKx
IMkK0Z+DLlUuu8RN6avz2pdMjBe7LQk7Ai10TGxOYxBAIxsCnu5GvvO8aZuHftIe
V1/xY5rT0yLI/bqTMljOqrym3kbA88CJ0m0bl/vytEma5Odh43rO7x+Q00rjqCu7
QA+B7q8ohg41LUS1qKDJ9vVdLNWDYFAo16jEkP/Hz+Dw13W6/z22GRr1aWiUkJDz
GEPjwvoczunEaqUnpgMr9PHfw0A1WLeVunhyr4sCOQxIrdJoiJrNwad8hPBnAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU0xUVJSpkUOzyBZrRb6+aHWrSzb4wHwYDVR0j
BBgwFoAUd9n8sP37UWyCh64jICpxSOYCiYQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMDQyNjgyNkNBNTI0ODMyNTU2NUQyOTQ5MEEyMUUyQkM2
QkVDNjUwOEQzQTdGRDU4N0U4RkY2QjU2QkE0NDYwLzAvNzdEOUZDQjBGREZCNTE2
QzgyODdBRTIzMjAyQTcxNDhFNjAyODk4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83N0Q5RkNCMEZERkI1MTZDODI4
N0FFMjMyMDJBNzE0OEU2MDI4OTg0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjA0MjY4MjZDQTUyNDgzMjU1NjVEMjk0OTBBMjFFMkJDNkJFQzY1MDhE
M0E3RkQ1ODdFOEZGNkI1NkJBNDQ2MC8wLzMyMzAzMDJlMzEzMDM2MmUzMjMyMzAy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3MzEzODM4MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHI
atwwDQYJKoZIhvcNAQELBQADggEBAAOBcdN4TE0AfIiO6yz28fE59QobW4sxoUa1
AQ3qozD1gGeKdSidP/8wY5ohABkKtc+UeBoUbFYEtBMAYZqwQ+sV3VrhvSRknIdw
ofgJe5ZHpNEXXp615Cz4TNjBupC34lyMixZhAf4EkMjDHRjENmdNZy3WkxUNR9YU
eNbCwb7X45MXui7NvJ55lhKTgTZL9jEgg7Z3BDsdbf4a7SefeObQarQI64b7XeoE
77DpT5bZeohUN3xEcixJq5Ue6qpPPpoEhu07GNa1V65RhBkhbVyg9xhPqw2F+XZL
mxkAF+mtHozLNk1wRY+A/BvtStuZ5QZonLmHsqFt98bpkxeI3Ss=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:33:44 2026 by rpki-client