Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3230302e35392e3232342e302f32302d3234203d3e203237373531.roa
File:                     3230302e35392e3232342e302f32302d3234203d3e203237373531.roa (raw, json)
Hash identifier:          T/1lF5gZWQKEHMZvDCAy8ebCYVtx9bN1sNbvWJuZeJk=
Subject key identifier:   10:BE:2B:EC:23:4B:96:71:BE:95:3E:FF:B3:6C:DA:C2:DA:15:E6:3F
Certificate issuer:       /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial:       4B4F97592197938F0B148777A7B8C964C8C43F03
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3230302e35392e3232342e302f32302d3234203d3e203237373531.roa
Signing time:             Wed 15 Apr 2026 18:50:00 +0000
ROA not before:           Wed 15 Apr 2026 18:45:00 +0000
ROA not after:            Wed 14 Apr 2027 18:50:00 +0000
asID:                     27751
IP address blocks:        200.59.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 15:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4f:97:59:21:97:93:8f:0b:14:87:77:a7:b8:c9:64:c8:c4:3f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
        Validity
            Not Before: Apr 15 18:45:00 2026 GMT
            Not After : Apr 14 18:50:00 2027 GMT
        Subject: CN=10BE2BEC234B9671BE953EFFB36CDAC2DA15E63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:5e:51:84:ed:d9:a5:3d:72:4c:db:eb:49:
                    ea:d1:76:9e:80:98:36:77:ce:d1:a6:ae:af:cf:e6:
                    bb:a1:ff:f4:c1:c4:47:e8:cf:e6:01:50:fd:50:bc:
                    4a:17:c1:e5:2f:07:14:6a:e6:5c:59:e5:91:ff:01:
                    d5:46:6a:64:59:c6:13:4e:a8:8c:f2:b9:e2:6a:77:
                    66:fb:53:34:6e:2e:3c:68:bd:51:23:0d:d7:70:8b:
                    60:1e:66:c4:11:8c:fd:4c:67:bf:da:92:bd:22:bc:
                    36:2d:36:f8:04:f7:5b:ac:50:89:b5:6b:f3:5b:b1:
                    f9:0e:24:ad:7e:4b:71:e0:8f:51:b7:ef:4b:d6:19:
                    b5:31:27:6a:71:97:e7:b7:44:5e:d3:60:f6:0c:bf:
                    a2:a2:f0:b8:91:b5:d5:84:8b:bc:22:09:69:35:d2:
                    c6:77:e9:ee:57:36:32:1f:03:2f:63:16:03:6f:0f:
                    01:32:9e:a4:93:4f:a5:88:f5:a7:e0:6d:8c:cd:32:
                    df:9d:5a:c4:08:90:42:b2:62:a6:ce:e1:ed:d9:eb:
                    6b:2b:9d:0e:88:de:e4:91:97:9b:e2:45:98:9f:87:
                    ff:3f:32:da:91:2f:e1:0c:f9:04:7e:d2:ea:ac:58:
                    6d:25:4a:52:e3:bc:12:43:21:e6:3a:b4:8c:73:0b:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:2B:EC:23:4B:96:71:BE:95:3E:FF:B3:6C:DA:C2:DA:15:E6:3F
            X509v3 Authority Key Identifier:
                keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3230302e35392e3232342e302f32302d3234203d3e203237373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:62:93:f8:68:ad:06:3f:e4:59:cc:4c:96:f8:ba:f0:b3:06:
         db:5e:06:d3:3c:fc:d8:1d:a3:ab:f6:9c:a8:34:0a:fe:36:aa:
         c1:6e:60:3c:63:bc:d7:78:31:5b:e8:ce:30:e2:f2:5b:aa:b7:
         7c:a4:88:af:d8:2e:9b:66:2d:83:be:bb:c3:f0:6f:1d:35:36:
         58:b9:8f:61:cb:a4:3f:93:e9:9a:06:ba:13:fb:74:15:2c:83:
         b8:b0:c5:8b:32:5f:87:51:7c:8e:24:dc:c5:79:0f:13:68:9b:
         38:22:d2:58:3f:58:1b:7d:3e:fb:1f:95:98:9f:fc:85:c2:ee:
         80:2b:09:83:5a:ef:98:e2:cc:81:42:cc:fb:ce:da:1a:12:36:
         0f:60:a5:f7:10:8d:fa:c2:5c:9d:26:99:d2:cb:cb:8a:b5:ca:
         a1:3f:1b:4c:71:86:fd:fd:44:bf:72:9a:d2:7a:d4:b1:dc:49:
         6e:c1:7d:a8:87:91:e8:8b:d1:59:ac:13:a9:9b:9b:b8:70:97:
         37:0d:78:1e:8a:1e:fe:b0:5e:29:94:dc:73:27:13:ea:c6:ba:
         33:84:8f:41:87:41:54:81:db:56:5e:dd:18:0d:09:74:3d:cb:
         c5:d6:48:22:5d:43:56:98:a7:2b:38:0e:e3:95:21:3a:20:4f:
         75:12:40:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:42:43 2026 by rpki-client