Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3132392e302f32342d3234203d3e203130363137.roa
File:                     3230302e3131322e3132392e302f32342d3234203d3e203130363137.roa (raw, json)
Hash identifier:          go5j3o9EGZpUGtzxi8gFjGB5T4GIgldlUZRC+n38Hm0=
Subject key identifier:   8E:93:2C:33:DA:21:E6:9A:48:13:38:98:FE:F8:4F:CA:81:AD:14:C5
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       192E348E3DED40E8F9E284D690C8A016D1D7BD71
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3132392e302f32342d3234203d3e203130363137.roa
Signing time:             Thu 02 Apr 2026 14:45:00 +0000
ROA not before:           Thu 02 Apr 2026 14:40:00 +0000
ROA not after:            Thu 01 Apr 2027 14:45:00 +0000
asID:                     10617
IP address blocks:        200.112.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2e:34:8e:3d:ed:40:e8:f9:e2:84:d6:90:c8:a0:16:d1:d7:bd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Apr  2 14:40:00 2026 GMT
            Not After : Apr  1 14:45:00 2027 GMT
        Subject: CN=8E932C33DA21E69A48133898FEF84FCA81AD14C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:81:1f:59:84:ee:9f:e6:91:a2:02:b1:ec:
                    32:57:ef:c7:34:2d:f6:5c:c0:43:c1:76:66:b2:fd:
                    c9:19:b8:f8:b4:b0:59:af:22:92:7c:4d:93:ee:e1:
                    f7:2e:b5:b9:ec:2f:c4:91:5c:1c:b7:aa:bc:7b:64:
                    5f:03:98:87:14:b6:ec:14:a6:f9:5f:10:eb:33:a1:
                    e1:93:6e:1f:6e:e8:6e:df:4a:ca:e1:88:85:7b:6c:
                    d8:9d:23:1b:23:aa:49:4f:30:c7:ac:5e:0d:ab:37:
                    48:ae:68:5d:f1:75:be:87:1f:0c:8d:75:b7:de:0a:
                    97:73:af:dd:35:89:41:50:0b:64:c9:26:ef:40:9c:
                    74:fb:6b:6b:f2:6d:57:71:1d:e6:f4:49:26:4e:e3:
                    38:3c:55:61:44:93:5c:bf:db:43:de:64:91:35:4e:
                    63:08:06:80:d0:e4:54:47:06:8f:b3:96:de:80:81:
                    be:a7:1b:e3:ec:a9:d6:db:e9:79:a7:93:c2:e6:21:
                    be:4b:2b:c4:77:bd:6a:7e:80:82:ed:ac:4f:dc:c9:
                    88:83:59:19:3d:63:72:69:f3:aa:1c:2e:04:05:df:
                    c6:6e:62:d9:80:0d:85:d6:ff:2e:52:78:4d:bd:f9:
                    51:cc:10:d0:56:4e:53:bf:a4:7c:7c:c1:bf:b5:e6:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:93:2C:33:DA:21:E6:9A:48:13:38:98:FE:F8:4F:CA:81:AD:14:C5
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3132392e302f32342d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c1:ef:e0:ad:e1:3c:6d:7e:c1:6a:d8:96:aa:83:6b:f9:b8:
         42:82:b4:60:71:cc:51:92:a1:f7:3f:0e:d6:d2:03:f7:71:3f:
         70:70:92:9f:cc:c5:91:8e:ef:2b:53:a4:c6:d8:7d:13:89:8b:
         67:8b:70:ef:27:74:c9:09:89:73:85:d8:e2:fe:4f:4e:66:85:
         5b:d4:24:de:d8:9f:b7:21:25:7f:8d:5d:0b:3e:39:b1:3b:c8:
         37:99:70:39:6a:7f:22:61:ed:f3:d0:45:dd:df:a8:6e:08:84:
         87:57:d4:1e:4c:cd:9e:53:89:59:d8:6d:78:c9:59:e4:4b:83:
         cf:a5:ae:21:33:0f:4d:a7:cd:65:10:93:9e:13:40:2a:49:45:
         61:1b:9f:ab:6f:d8:b5:05:7a:cf:7b:80:1a:d0:4e:45:26:7e:
         89:1f:7d:f1:02:3e:f5:0b:15:15:74:30:a8:19:9b:17:bf:96:
         ce:db:ae:e6:35:7b:ea:f2:b6:b4:ec:74:de:93:90:d8:50:6d:
         de:eb:a7:3b:73:8e:c8:4e:e9:30:5f:3e:84:e7:23:ae:a4:d6:
         c3:1e:0e:97:f0:eb:35:e4:db:e9:f3:da:9b:0d:bc:78:e6:c6:
         09:4e:0b:92:f2:35:d1:62:2c:51:95:fe:fd:71:55:0d:59:77:
         c9:3c:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:34 2026 by rpki-client