Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139392e302f32342d3234203d3e20323632313931.roa
File:                     3230302e3131322e3139392e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          6XRtrSWeBkmwyJpdLSq1+wfnvm/+T4McWVvNn2yGwIE=
Subject key identifier:   8C:A3:F9:72:95:6B:96:D1:78:E5:10:C8:77:27:16:80:37:03:E3:B4
Certificate issuer:       /CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
Certificate serial:       09E3B3463FD5EA5484D1B7913DED8943C902A4E1
Authority key identifier: 85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139392e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 02 Jun 2026 22:46:18 +0000
ROA not before:           Tue 02 Jun 2026 22:41:18 +0000
ROA not after:            Tue 01 Jun 2027 22:46:18 +0000
asID:                     262191
IP address blocks:        200.112.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl
                          rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e3:b3:46:3f:d5:ea:54:84:d1:b7:91:3d:ed:89:43:c9:02:a4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
        Validity
            Not Before: Jun  2 22:41:18 2026 GMT
            Not After : Jun  1 22:46:18 2027 GMT
        Subject: CN=8CA3F972956B96D178E510C8772716803703E3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:c4:ba:cf:03:5a:3f:71:a4:72:29:df:8c:
                    cd:8d:f3:97:3b:57:8a:d2:72:36:de:cb:c2:88:0c:
                    5d:4c:7f:d4:da:82:81:15:d4:f1:b3:7f:cd:4e:6f:
                    34:07:b4:7f:82:4e:cf:26:26:8f:b9:ae:60:59:e4:
                    6c:dd:b7:7a:a8:db:73:28:f8:07:86:d1:61:25:0a:
                    bc:58:60:c8:0a:f9:b0:a1:35:76:74:19:d6:f6:25:
                    95:45:96:79:6f:de:ce:c4:2a:01:9e:0f:d5:70:c3:
                    41:7e:ba:8a:64:69:3c:f0:b7:29:05:0b:99:1b:48:
                    de:c7:01:7b:37:7b:a6:92:68:d6:9c:30:48:5d:55:
                    c9:73:ed:fe:10:c5:69:6a:3a:a2:e0:eb:cb:62:75:
                    94:9d:92:c8:a0:b6:cd:55:ab:40:8e:15:ca:e5:d4:
                    e2:84:b8:ee:3d:53:cf:d9:d4:e0:36:d7:41:ef:13:
                    87:49:88:53:11:73:da:cd:67:25:bb:e9:e3:53:36:
                    5d:18:b8:e2:ea:bc:45:73:27:29:14:9c:52:76:da:
                    af:e1:55:3b:5f:4e:fa:03:e1:c2:37:df:3e:3a:f3:
                    1f:3b:42:87:3e:ab:17:de:5d:26:ad:0e:56:da:62:
                    9f:25:06:88:08:83:78:87:8b:1d:34:81:fc:47:9e:
                    15:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A3:F9:72:95:6B:96:D1:78:E5:10:C8:77:27:16:80:37:03:E3:B4
            X509v3 Authority Key Identifier:
                keyid:85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139392e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ff:a1:bd:4c:19:94:17:eb:9f:0a:86:af:14:ed:eb:19:4c:
         6f:4a:f9:69:75:ca:0c:0c:52:e4:c1:95:26:6f:18:c4:23:af:
         51:fc:14:d9:28:32:3f:8b:b0:b2:ac:86:28:03:76:bc:07:52:
         46:25:68:93:6d:ef:74:44:d6:ca:31:82:0d:01:42:de:d7:ae:
         f4:4e:f6:1d:b4:87:6a:b0:8f:47:f6:c6:30:ea:fe:3c:f8:09:
         9f:3e:78:da:c7:18:8e:6a:a3:9e:72:25:2e:8a:63:73:47:ab:
         a1:63:1d:0d:c3:5b:e8:51:5b:79:42:67:21:4e:d8:c4:05:36:
         6f:1b:15:1c:25:a5:de:58:8f:47:2a:29:d1:0c:aa:fd:49:8f:
         f5:cb:20:51:da:a7:da:14:94:da:45:02:83:96:ec:f8:03:69:
         1b:d1:52:28:6c:ad:aa:3c:36:ed:f2:6c:a4:d3:3f:45:17:74:
         55:41:05:b6:54:86:c4:4e:31:ff:9b:0f:ce:7d:3b:b8:30:f5:
         ac:20:f9:7f:25:c8:99:38:c9:1b:9c:e0:97:d1:d5:bb:d8:b7:
         08:b6:c7:76:5d:89:47:36:d8:cd:c7:4f:ea:09:f7:68:b7:54:
         06:f7:a5:dd:5b:04:1e:72:fb:ba:72:9c:b4:6b:e9:cb:7f:38:
         e4:3f:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:16:57 2026 by rpki-client