Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C201007B6EAAA27BD8C20184D2CDC613F7857C57C42FAFE3795A879DE94B098/0/3230302e31312e34382e302f32302d3234203d3e2036313437.roa
File:                     3230302e31312e34382e302f32302d3234203d3e2036313437.roa (raw, json)
Hash identifier:          HEfOxzgeFKcxGAaAPw64g3ExQJaCRFeNeAzmVwM+IdQ=
Subject key identifier:   25:E8:30:70:82:9E:87:A8:EE:29:18:52:12:A5:E2:5E:BB:BA:CC:59
Certificate issuer:       /CN=559996B18871875C9F0497269B20EDBE97501A7A
Certificate serial:       3BA2FA35C0AD5DFC531E6F08CDFB2821A1470302
Authority key identifier: 55:99:96:B1:88:71:87:5C:9F:04:97:26:9B:20:ED:BE:97:50:1A:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/559996B18871875C9F0497269B20EDBE97501A7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C201007B6EAAA27BD8C20184D2CDC613F7857C57C42FAFE3795A879DE94B098/0/3230302e31312e34382e302f32302d3234203d3e2036313437.roa
Signing time:             Tue 24 Feb 2026 20:31:42 +0000
ROA not before:           Tue 24 Feb 2026 20:26:42 +0000
ROA not after:            Tue 23 Feb 2027 20:31:42 +0000
asID:                     6147
IP address blocks:        200.11.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C201007B6EAAA27BD8C20184D2CDC613F7857C57C42FAFE3795A879DE94B098/0/559996B18871875C9F0497269B20EDBE97501A7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C201007B6EAAA27BD8C20184D2CDC613F7857C57C42FAFE3795A879DE94B098/0/559996B18871875C9F0497269B20EDBE97501A7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/559996B18871875C9F0497269B20EDBE97501A7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 05:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a2:fa:35:c0:ad:5d:fc:53:1e:6f:08:cd:fb:28:21:a1:47:03:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559996B18871875C9F0497269B20EDBE97501A7A
        Validity
            Not Before: Feb 24 20:26:42 2026 GMT
            Not After : Feb 23 20:31:42 2027 GMT
        Subject: CN=25E83070829E87A8EE29185212A5E25EBBBACC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:6c:ff:91:3c:43:16:cf:65:6c:a8:38:92:
                    88:5a:5e:c4:40:23:ac:2f:5b:a8:19:34:86:37:28:
                    81:96:ff:45:4c:e1:12:96:88:1a:0e:9a:cd:e8:fe:
                    a4:42:5a:49:1f:89:76:02:f1:bf:59:c4:d9:6d:d6:
                    f0:46:12:09:db:cb:53:cb:52:5f:7d:71:26:81:2e:
                    15:91:08:22:17:6f:2f:37:72:bc:31:52:d3:39:f9:
                    93:28:eb:eb:eb:a1:2f:9b:24:b2:e0:d7:ee:c0:c7:
                    67:7c:50:af:86:38:bb:ce:99:57:b3:a3:22:39:54:
                    f7:ae:0d:d3:d5:cc:08:b6:94:50:ab:d6:41:7e:1a:
                    4f:d8:5f:40:96:9a:8a:c1:dc:44:59:9f:ab:72:2c:
                    44:09:df:0f:b5:9f:f6:de:d3:5a:5a:be:43:38:34:
                    52:1e:50:89:5e:38:22:42:53:fd:eb:d7:d1:3b:70:
                    24:ea:40:af:a2:3a:7a:5f:f8:6d:06:91:fd:18:10:
                    c3:14:61:95:00:50:5a:96:e8:ef:95:db:f7:5e:b0:
                    7b:b8:c0:c0:df:8d:22:30:31:9a:6c:e1:d4:96:49:
                    e3:0c:d2:fb:35:8a:a3:48:dc:2f:d2:b7:26:b8:b9:
                    61:79:52:a9:50:90:6a:1d:c1:36:93:b4:9a:97:c9:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E8:30:70:82:9E:87:A8:EE:29:18:52:12:A5:E2:5E:BB:BA:CC:59
            X509v3 Authority Key Identifier:
                keyid:55:99:96:B1:88:71:87:5C:9F:04:97:26:9B:20:ED:BE:97:50:1A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C201007B6EAAA27BD8C20184D2CDC613F7857C57C42FAFE3795A879DE94B098/0/559996B18871875C9F0497269B20EDBE97501A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/559996B18871875C9F0497269B20EDBE97501A7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C201007B6EAAA27BD8C20184D2CDC613F7857C57C42FAFE3795A879DE94B098/0/3230302e31312e34382e302f32302d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:cc:1e:00:34:0b:8b:63:15:40:02:02:7e:52:d8:b6:6f:5e:
         0d:31:48:74:1a:0e:68:c4:71:7c:8c:5b:dc:71:d2:e1:f1:12:
         9c:62:e0:f8:c9:33:b1:82:6a:0b:e2:1b:5f:17:3c:84:4f:fc:
         02:5a:e5:dc:f7:f1:c8:e1:75:35:70:62:12:ba:9c:0e:f1:42:
         53:86:2a:d9:7f:48:81:66:e1:af:fa:ba:81:e2:9c:24:89:24:
         5c:d3:2f:d1:7f:ef:13:93:45:ff:9d:d6:8e:16:9c:db:a6:6b:
         e5:3a:80:9f:e5:1c:23:82:2e:3b:ab:c8:62:32:84:5d:6f:b2:
         05:eb:c1:0b:2e:5b:13:64:ac:a0:68:31:65:23:e9:a4:54:a8:
         b4:25:f7:4b:88:36:69:a4:7c:fd:33:25:26:39:6a:bf:39:23:
         c9:ae:48:fb:1e:c3:27:f9:72:18:8e:98:9d:98:e2:d2:fb:ea:
         ff:41:6c:5e:bb:a8:1a:7f:c3:6d:bf:5a:62:68:5c:e6:9e:19:
         eb:2b:96:69:d3:29:6d:6c:17:53:e0:16:ca:dc:be:ed:aa:13:
         e4:1c:bc:99:f2:53:1b:02:a1:28:d2:c2:8a:55:05:5b:7f:ba:
         ae:b7:b7:cc:64:2d:bf:95:7a:31:3a:42:a4:94:b4:a5:28:68:
         74:5a:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:38:00 2026 by rpki-client