Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139342e302f32342d3234203d3e20323632313931.roa
File:                     3230302e3131322e3139342e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          MZNVXS8Ikxg5lYwym0lyBtDbXI7t059tYJiKgsd+smc=
Subject key identifier:   52:B0:75:C9:74:A3:8D:67:DB:34:49:D8:00:9B:99:C3:8B:9B:E1:7D
Certificate issuer:       /CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
Certificate serial:       09BFE3CDEE40FAE170B882FBA726A3CD8814CA25
Authority key identifier: 85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139342e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 02 Jun 2026 22:46:18 +0000
ROA not before:           Tue 02 Jun 2026 22:41:18 +0000
ROA not after:            Tue 01 Jun 2027 22:46:18 +0000
asID:                     262191
IP address blocks:        200.112.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl
                          rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bf:e3:cd:ee:40:fa:e1:70:b8:82:fb:a7:26:a3:cd:88:14:ca:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
        Validity
            Not Before: Jun  2 22:41:18 2026 GMT
            Not After : Jun  1 22:46:18 2027 GMT
        Subject: CN=52B075C974A38D67DB3449D8009B99C38B9BE17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:12:3e:7e:09:cd:24:f4:49:57:dc:7f:d6:
                    a4:96:ee:e0:33:7a:56:1a:f8:57:ee:27:38:ab:3d:
                    40:b3:18:75:fe:ae:36:24:7d:ee:7e:ba:27:c8:9e:
                    38:06:56:37:6f:b3:3e:f1:55:2d:07:e9:9f:c1:96:
                    82:2e:a9:68:e2:37:f2:f9:1c:33:0e:26:10:32:c0:
                    9a:5b:40:81:e1:ad:38:74:ee:d6:f9:71:c0:f7:1e:
                    be:fe:fd:f2:c8:5c:26:cc:2e:5c:a3:fe:02:13:c7:
                    35:f0:54:19:0b:20:b0:cb:b0:50:02:fa:85:80:79:
                    8a:e2:33:b6:db:4a:b4:40:18:4f:5e:1e:c9:10:e7:
                    a9:86:d9:40:12:9c:f8:60:a3:38:ba:17:56:2e:1f:
                    68:68:6a:7f:ed:93:f8:7e:35:4f:74:ee:be:b9:5f:
                    45:a9:36:74:6c:7d:4d:0b:57:c6:47:92:8e:ef:69:
                    fb:0e:19:9d:18:34:04:d6:7d:e3:a9:36:0e:df:15:
                    47:47:e5:2f:b0:6a:2f:b4:7e:1e:56:0d:88:2e:dc:
                    84:23:8a:47:94:7a:4f:d2:71:f3:51:5e:cc:3b:a5:
                    a8:4f:ac:20:67:bb:e9:31:a0:3b:46:c6:40:77:be:
                    51:5b:b1:dd:3f:37:0c:19:ac:a4:b7:6a:89:5c:d3:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B0:75:C9:74:A3:8D:67:DB:34:49:D8:00:9B:99:C3:8B:9B:E1:7D
            X509v3 Authority Key Identifier:
                keyid:85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139342e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f4:16:b7:54:5c:1c:5e:de:a8:0e:05:c2:59:a1:b8:3d:99:
         33:53:8b:1c:8d:a5:e2:81:f2:36:c2:93:56:50:d0:3e:e3:ac:
         81:91:c4:6e:40:34:25:91:e9:75:2b:20:35:7b:fb:a6:d5:f0:
         f2:95:ff:ad:7b:7d:5c:a8:e0:98:4b:8c:b1:3f:ae:cf:65:2e:
         7e:ce:50:5b:98:55:41:98:96:e9:5d:a0:7e:26:e4:a6:1d:7c:
         b8:95:e3:59:a6:17:b2:d8:7a:06:6c:de:bb:18:12:0a:38:8e:
         5e:b9:d1:b5:ec:6c:a4:fe:47:7b:93:f0:27:03:99:2c:1f:5e:
         8e:76:d5:4e:d5:1c:bf:4a:e4:6d:3c:e2:33:89:24:6a:ed:44:
         89:05:8e:51:30:71:4d:69:f9:90:67:fc:92:77:7b:8a:7e:d1:
         77:86:cd:a9:10:71:a8:2f:0c:31:46:f4:18:6e:5a:78:7e:33:
         55:cf:28:ac:d1:42:95:8f:24:b1:0c:08:7a:8c:04:a9:f4:e7:
         64:83:a2:3e:2a:79:17:d7:3b:c7:1c:f5:25:51:e9:d7:47:17:
         5c:af:2c:fb:a6:c1:ef:3c:5c:00:24:2f:fd:6d:e0:1a:b6:8c:
         a0:fa:77:1b:30:c5:b2:59:f6:51:c3:25:28:cc:e6:a6:f3:d1:
         9a:1b:26:31
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUCb/jze5A+uFwuIL7pyajzYgUyiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVCN0Q5Njg1QkE4REEyRDZGNDgxQzMyMzYxMUVENjQ5
NDRGNjI3MzAeFw0yNjA2MDIyMjQxMThaFw0yNzA2MDEyMjQ2MThaMDMxMTAvBgNV
BAMTKDUyQjA3NUM5NzRBMzhENjdEQjM0NDlEODAwOUI5OUMzOEI5QkUxN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTxI+fgnNJPRJV9x/1qSW7uAz
elYa+FfuJzirPUCzGHX+rjYkfe5+uifInjgGVjdvsz7xVS0H6Z/BloIuqWjiN/L5
HDMOJhAywJpbQIHhrTh07tb5ccD3Hr7+/fLIXCbMLlyj/gITxzXwVBkLILDLsFAC
+oWAeYriM7bbSrRAGE9eHskQ56mG2UASnPhgozi6F1YuH2hoan/tk/h+NU907r65
X0WpNnRsfU0LV8ZHko7vafsOGZ0YNATWfeOpNg7fFUdH5S+wai+0fh5WDYgu3IQj
ikeUek/ScfNRXsw7pahPrCBnu+kxoDtGxkB3vlFbsd0/NwwZrKS3aolc09J5AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUUrB1yXSjjWfbNEnYAJuZw4ub4X0wHwYDVR0j
BBgwFoAUhbfZaFuo2i1vSBwyNhHtZJRPYnMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMTdFOTRFM0VDRkVBNzRCRUQ0MUZCQjMwNkE3MUIzQ0E4
RTcxN0ZGN0JBQjg2RjRDQjRCM0E1Q0Y3MDk5NjRDLzAvODVCN0Q5Njg1QkE4REEy
RDZGNDgxQzMyMzYxMUVENjQ5NDRGNjI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUI3RDk2ODVCQThEQTJENkY0
ODFDMzIzNjExRUQ2NDk0NEY2MjczLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzE3RTk0RTNFQ0ZFQTc0QkVENDFGQkIzMDZBNzFCM0NBOEU3MTdGRjdC
QUI4NkY0Q0I0QjNBNUNGNzA5OTY0Qy8wLzMyMzAzMDJlMzEzMTMyMmUzMTM5MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADI
cMIwDQYJKoZIhvcNAQELBQADggEBACb0FrdUXBxe3qgOBcJZobg9mTNTixyNpeKB
8jbCk1ZQ0D7jrIGRxG5ANCWR6XUrIDV7+6bV8PKV/617fVyo4JhLjLE/rs9lLn7O
UFuYVUGYluldoH4m5KYdfLiV41mmF7LYegZs3rsYEgo4jl650bXsbKT+R3uT8CcD
mSwfXo521U7VHL9K5G084jOJJGrtRIkFjlEwcU1p+ZBn/JJ3e4p+0XeGzakQcagv
DDFG9BhuWnh+M1XPKKzRQpWPJLEMCHqMBKn052SDoj4qeRfXO8cc9SVR6ddHF1yv
LPumwe88XAAkL/1t4Bq2jKD6dxswxbJZ9lHDJSjM5qbz0ZobJjE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:00:50 2026 by rpki-client