Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134322e302f32342d3234203d3e203130363137.roa
File:                     3230302e3131322e3134322e302f32342d3234203d3e203130363137.roa (raw, json)
Hash identifier:          3ywaGghd65YkxqvAAAISmZ83Y+U/iuoxEMjZ0ElvdfQ=
Subject key identifier:   3C:61:21:3B:36:42:17:87:50:AC:22:A5:13:3A:2A:70:DE:1C:29:D6
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       7D873D981E8D7064E92F19AE7C72B35EEBBF3D4A
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134322e302f32342d3234203d3e203130363137.roa
Signing time:             Mon 06 Apr 2026 18:35:00 +0000
ROA not before:           Mon 06 Apr 2026 18:30:00 +0000
ROA not after:            Mon 05 Apr 2027 18:35:00 +0000
asID:                     10617
IP address blocks:        200.112.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:87:3d:98:1e:8d:70:64:e9:2f:19:ae:7c:72:b3:5e:eb:bf:3d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Apr  6 18:30:00 2026 GMT
            Not After : Apr  5 18:35:00 2027 GMT
        Subject: CN=3C61213B3642178750AC22A5133A2A70DE1C29D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:1a:52:21:93:de:25:78:8d:c2:6c:d8:c7:
                    d4:20:30:95:29:44:78:5a:ea:6b:bf:1c:e8:e2:e0:
                    f5:53:1e:d2:d9:3b:75:57:ed:61:21:63:0e:c4:67:
                    be:c4:4f:09:ee:49:2a:49:e0:fe:d8:03:23:c1:88:
                    44:75:4b:4f:22:ef:c2:2c:c4:d6:73:a7:1b:6d:76:
                    28:0c:34:a5:5a:23:47:e3:8a:eb:02:bf:64:30:a0:
                    83:61:5e:cf:af:ae:ac:72:db:25:37:a0:c0:d4:70:
                    bc:c1:9d:83:c2:88:e1:76:31:b9:51:87:46:3e:95:
                    98:78:06:7a:36:cc:af:60:c6:c9:3c:b2:ef:75:f2:
                    72:74:1b:fb:14:d8:1b:a0:a2:74:af:9f:31:3e:90:
                    13:82:fc:98:5b:68:09:5d:27:f4:73:27:4c:fd:bc:
                    8a:33:92:c0:4b:1a:e2:7a:09:17:ba:44:3d:bd:ba:
                    62:e0:bf:a8:a2:1e:02:1a:bf:86:ed:19:32:fc:2c:
                    bb:af:50:a6:b7:d2:36:f1:43:46:93:c4:55:c4:e5:
                    f8:60:ba:e8:86:c8:a9:22:72:94:95:5e:ba:6a:16:
                    ef:19:c4:71:3f:57:85:4c:d1:ea:f5:5c:40:5d:1a:
                    5e:aa:55:3c:01:2b:1e:79:40:0a:2b:04:36:c6:06:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:61:21:3B:36:42:17:87:50:AC:22:A5:13:3A:2A:70:DE:1C:29:D6
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134322e302f32342d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2a:0e:28:7d:ba:f4:6d:7c:4e:9b:82:ed:9a:20:f8:a9:38:
         f7:1a:2d:dc:b1:f5:a0:22:f2:8f:43:93:ec:c6:28:0f:38:31:
         a8:a3:97:0a:cf:09:c7:7c:4e:5a:8f:f8:30:36:19:ba:2d:56:
         7c:43:bf:dd:a2:b8:f8:dc:4f:36:cb:00:81:8a:93:5b:11:cb:
         2a:6b:7a:3f:df:68:9b:8b:22:2e:92:1f:fb:8c:b6:f3:68:4c:
         bf:55:52:cc:8c:90:ae:cd:f5:f9:17:13:af:15:ef:4e:0e:2c:
         e8:bd:6e:4c:d9:37:a8:37:df:62:2e:25:4c:5d:16:78:75:28:
         8d:e7:8d:d0:80:18:ab:43:14:1e:8b:0f:a5:fd:19:ef:f6:49:
         36:00:1b:71:a6:f4:b1:54:e8:4d:70:fb:7c:68:fd:5d:96:a0:
         c0:13:a6:11:c7:a8:a5:e5:0d:80:81:39:85:ab:93:1d:25:9e:
         1e:c7:f4:76:cc:78:35:1c:f1:39:b1:a5:a6:be:5b:6e:19:fd:
         0c:cf:88:dc:86:1e:21:a8:da:9c:22:6f:81:6f:b5:de:ea:2c:
         70:58:0d:80:d3:b0:36:d6:23:10:19:a0:27:96:2b:f6:b0:b2:
         b9:a1:0c:20:3b:02:a7:e2:a2:a0:59:4b:85:57:6a:48:5d:3d:
         b2:53:df:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:27 2026 by rpki-client