Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230302e302f32342d3234203d3e20323632313931.roa
File:                     3230302e3131322e3230302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          HAfYY8/2OsNwkJSE7Nr44G9uWNlbqmq8RUa5cq8vnFI=
Subject key identifier:   56:3B:48:FC:72:EC:83:52:12:69:F0:EE:4D:B1:8B:68:DD:B3:24:1F
Certificate issuer:       /CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
Certificate serial:       6B0C8713ADC65A1B396DE450A35168F5FD4F1848
Authority key identifier: 85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230302e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 02 Jun 2026 22:46:17 +0000
ROA not before:           Tue 02 Jun 2026 22:41:17 +0000
ROA not after:            Tue 01 Jun 2027 22:46:17 +0000
asID:                     262191
IP address blocks:        200.112.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl
                          rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0c:87:13:ad:c6:5a:1b:39:6d:e4:50:a3:51:68:f5:fd:4f:18:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
        Validity
            Not Before: Jun  2 22:41:17 2026 GMT
            Not After : Jun  1 22:46:17 2027 GMT
        Subject: CN=563B48FC72EC83521269F0EE4DB18B68DDB3241F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:cf:c3:67:39:8d:1b:83:5f:80:fd:d1:d9:
                    fa:94:f5:33:50:b7:68:36:e5:dc:90:e2:e3:8f:06:
                    ad:d4:23:d5:d5:2b:b2:81:2d:d9:ba:3d:53:b7:67:
                    c7:a6:83:a3:ea:da:c1:7c:f1:86:ee:d5:9f:66:b3:
                    e7:12:cd:94:7b:ff:81:ff:81:95:7c:eb:43:f1:9e:
                    0a:45:89:c7:29:a8:56:02:10:33:ad:3f:13:34:a3:
                    bc:15:62:ee:68:14:db:81:58:10:7d:0c:50:4b:6b:
                    0d:04:6d:1e:27:94:15:ef:bf:74:15:37:2b:82:9e:
                    d4:8d:40:c9:20:f8:79:c9:f9:17:9e:35:96:0b:8e:
                    db:7b:b7:70:3b:7e:d0:36:8f:af:42:f2:6f:dd:0f:
                    f5:61:5e:80:ac:68:09:49:54:bd:3b:f4:57:75:ec:
                    d1:20:cc:a0:0b:0b:bc:b9:6d:5f:9e:b9:6c:a1:97:
                    dc:58:0d:b9:88:16:9b:4d:09:d3:6d:50:09:14:0c:
                    19:31:7b:2c:b8:5a:29:49:f2:c4:d5:80:3f:86:6f:
                    b3:3d:21:0b:8c:bb:99:3d:82:5a:da:4e:0f:fd:b8:
                    97:aa:07:44:66:11:28:9c:6f:b4:86:0f:0c:46:ca:
                    23:1e:96:08:f0:55:14:32:19:56:6a:07:03:19:c2:
                    65:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3B:48:FC:72:EC:83:52:12:69:F0:EE:4D:B1:8B:68:DD:B3:24:1F
            X509v3 Authority Key Identifier:
                keyid:85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:aa:1d:0b:23:50:47:67:23:3a:b4:d9:8d:3c:c5:23:b7:45:
         52:2a:8e:e7:49:d2:85:98:1d:5a:73:f5:39:2a:39:d4:af:01:
         1e:20:2d:08:74:49:aa:3e:0e:b2:87:ba:8e:ba:66:83:f4:01:
         38:46:b9:14:44:1c:31:e7:ec:02:df:9d:86:19:53:1d:af:bc:
         60:76:58:a7:a8:29:ad:5f:49:e0:ca:a6:8f:fe:59:9c:bc:3f:
         94:ea:b7:28:5b:8d:8a:5d:6b:e9:4a:41:8d:fd:4b:ba:33:57:
         04:e0:9b:68:6e:be:f6:44:df:95:8f:c3:c2:15:28:b1:54:0f:
         71:ca:06:73:56:d5:38:a0:c0:b6:92:7d:c8:45:5d:fb:86:91:
         d7:d6:40:94:ec:70:a9:ad:56:6e:c3:4e:d0:ea:36:92:95:c5:
         2e:4f:8a:75:49:e7:c4:9b:90:ac:71:92:77:43:be:82:9e:61:
         52:fd:6f:80:60:bb:86:23:a0:03:2e:0f:60:61:91:99:a5:67:
         db:f2:a1:6d:d9:32:2c:7a:55:c9:bd:84:7e:f8:db:84:00:c3:
         97:6b:b9:b1:e5:00:43:e5:e6:cc:e9:0e:8d:7a:dc:08:29:8f:
         2c:6d:08:31:0a:7c:2e:e7:a6:24:ec:03:bf:45:7c:20:0e:f9:
         1d:67:00:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:52:53 2026 by rpki-client