Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/3230302e36332e34382e302f32312d3232203d3e203237393639.roa
File:                     3230302e36332e34382e302f32312d3232203d3e203237393639.roa (raw, json)
Hash identifier:          DIGiKmXtrM+NLKaIUd/ViJUok27SclWmlEOiFK9NN2g=
Subject key identifier:   D3:F4:DA:E2:D7:4A:E6:C4:48:8C:52:EF:37:A4:3D:99:7F:53:8A:5B
Certificate issuer:       /CN=346CA526892F0D074D2B9816B2769025CFE97FF5
Certificate serial:       26DA3B7CD3083056FBC88E19EF9ED0D523C0728B
Authority key identifier: 34:6C:A5:26:89:2F:0D:07:4D:2B:98:16:B2:76:90:25:CF:E9:7F:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/346CA526892F0D074D2B9816B2769025CFE97FF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/3230302e36332e34382e302f32312d3232203d3e203237393639.roa
Signing time:             Tue 06 Jan 2026 19:24:19 +0000
ROA not before:           Tue 06 Jan 2026 19:19:19 +0000
ROA not after:            Tue 05 Jan 2027 19:24:19 +0000
asID:                     27969
IP address blocks:        200.63.48.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/346CA526892F0D074D2B9816B2769025CFE97FF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/346CA526892F0D074D2B9816B2769025CFE97FF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/346CA526892F0D074D2B9816B2769025CFE97FF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 02:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:da:3b:7c:d3:08:30:56:fb:c8:8e:19:ef:9e:d0:d5:23:c0:72:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346CA526892F0D074D2B9816B2769025CFE97FF5
        Validity
            Not Before: Jan  6 19:19:19 2026 GMT
            Not After : Jan  5 19:24:19 2027 GMT
        Subject: CN=D3F4DAE2D74AE6C4488C52EF37A43D997F538A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:59:c0:20:7a:1a:72:06:89:14:a6:52:cc:
                    2f:60:f4:18:d7:2d:72:b1:39:7c:6c:41:58:93:10:
                    8f:fb:cc:0d:bf:0f:c1:17:98:f0:7e:b6:a4:5e:7e:
                    2d:3c:d1:83:12:4a:47:00:a6:12:ff:86:29:f4:5c:
                    94:9f:f6:2c:c8:7e:d8:86:df:69:20:46:77:b1:29:
                    eb:37:75:33:3a:5b:c1:4b:19:1d:bc:d4:af:35:51:
                    c1:ae:b6:62:8b:07:40:87:e1:fd:fe:59:82:08:c1:
                    3f:75:e4:a9:f9:16:e3:b4:21:85:c2:ab:ad:b8:50:
                    03:3b:7c:5e:ca:5a:8f:2f:e4:9b:b6:8a:21:34:c7:
                    0c:4a:fb:5b:c5:ea:bc:55:c1:c6:80:d5:3f:5a:46:
                    1d:e2:45:ab:31:20:16:ad:67:64:a9:a9:31:04:40:
                    de:c5:e5:6f:a2:1e:75:12:7d:f0:a1:ef:38:7c:4d:
                    3f:43:c8:0e:78:3e:79:7d:e8:e4:ab:09:70:2d:85:
                    46:9b:d6:cb:65:9e:8d:b1:26:99:b3:1e:e0:6a:ba:
                    56:20:c6:2a:1b:55:c1:40:50:58:54:c6:49:f4:f8:
                    83:df:7f:d3:73:df:0c:fa:84:8f:6f:db:8f:76:81:
                    91:2d:ca:61:0f:fc:ed:f6:39:46:b9:51:b6:1a:e0:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F4:DA:E2:D7:4A:E6:C4:48:8C:52:EF:37:A4:3D:99:7F:53:8A:5B
            X509v3 Authority Key Identifier:
                keyid:34:6C:A5:26:89:2F:0D:07:4D:2B:98:16:B2:76:90:25:CF:E9:7F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/346CA526892F0D074D2B9816B2769025CFE97FF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/346CA526892F0D074D2B9816B2769025CFE97FF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3AFA8110500BB8EC0C91399CAF9D4C04060B943465FB1F27F28B5B30DBFE0E2E/0/3230302e36332e34382e302f32312d3232203d3e203237393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:82:10:da:b5:7b:e7:3d:0b:e3:25:62:58:3c:94:4a:f1:ee:
         b8:05:39:83:22:13:49:84:0f:fd:5c:4e:99:88:68:4e:44:b6:
         a4:a4:d9:8a:4b:fd:aa:d6:0d:e2:7b:a1:18:8b:22:79:23:25:
         1c:05:6d:d9:11:b0:57:01:d5:f7:4d:2e:3f:73:04:b4:67:9b:
         f4:ee:7d:ac:78:47:52:08:c8:97:82:bc:b2:1c:14:98:09:af:
         1e:d7:80:8f:91:c4:36:d3:27:ae:f8:51:98:36:cf:5a:6f:3c:
         c1:03:57:d6:5f:e1:fa:29:32:8d:ee:c1:6e:ed:ce:fd:d8:a5:
         23:7d:4c:c6:9c:4b:c5:0d:11:82:67:45:df:cc:ce:fc:3b:63:
         44:df:d1:73:ec:92:6c:0c:ad:9c:5f:84:f7:e6:5f:8e:09:d0:
         75:c9:a0:c2:4e:58:87:ca:f5:ba:82:db:38:68:2f:a7:a3:31:
         d7:0b:bc:66:a6:d2:63:9c:32:2b:d1:0c:02:82:c0:30:0c:74:
         09:06:68:fc:8e:00:e3:de:a7:22:92:5d:d3:2c:97:be:91:90:
         f4:82:e3:73:da:62:8f:6d:0b:70:29:7c:91:eb:70:ca:37:93:
         b0:44:66:cf:70:47:69:08:19:e3:e7:c4:24:48:63:e8:9e:c6:
         99:14:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:22:01 2026 by rpki-client