Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134352e302f32342d3234203d3e203130363137.roa
File:                     3230302e3131322e3134352e302f32342d3234203d3e203130363137.roa (raw, json)
Hash identifier:          i4Tc399PFW/jjFveFg30igBjZamC+eNq19C63cen33A=
Subject key identifier:   A8:D5:81:7E:62:11:0F:81:18:6E:DD:20:86:59:2E:D7:47:0C:AD:40
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       790A30DB5A6CEDB57375E5021077D48C838E5F99
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134352e302f32342d3234203d3e203130363137.roa
Signing time:             Mon 06 Apr 2026 18:35:01 +0000
ROA not before:           Mon 06 Apr 2026 18:30:01 +0000
ROA not after:            Mon 05 Apr 2027 18:35:01 +0000
asID:                     10617
IP address blocks:        200.112.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Apr 2026 21:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0a:30:db:5a:6c:ed:b5:73:75:e5:02:10:77:d4:8c:83:8e:5f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Apr  6 18:30:01 2026 GMT
            Not After : Apr  5 18:35:01 2027 GMT
        Subject: CN=A8D5817E62110F81186EDD2086592ED7470CAD40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:98:d5:aa:0f:39:8b:c3:e9:81:d0:8e:31:
                    eb:eb:c4:ca:f8:28:e3:73:5e:a2:b1:d3:e0:71:69:
                    98:52:4d:30:d3:09:45:36:2d:1f:99:84:dd:2c:63:
                    4d:6c:0d:d6:9c:dd:d8:7a:aa:06:d4:81:0e:64:b4:
                    34:27:61:0e:5f:95:76:d8:43:46:cc:d1:d9:a9:7d:
                    fa:d2:98:d2:29:25:d8:f1:6d:d8:c8:81:30:de:48:
                    41:30:67:eb:d6:82:de:86:06:da:6f:ad:d3:ed:97:
                    6a:30:40:dc:06:0b:7d:b3:8d:51:de:b3:96:0e:b3:
                    ba:a8:6a:75:cd:75:2c:8a:80:41:5d:4c:a9:97:d8:
                    1f:49:ea:b8:75:44:28:67:78:ab:17:b5:bd:f0:d6:
                    75:41:c4:e5:43:c0:25:59:fc:98:b0:c9:cc:2b:a9:
                    b7:2c:25:e3:e0:7a:eb:34:48:12:fd:d0:43:77:85:
                    1f:4d:44:57:50:a0:c1:24:24:79:ca:f0:cd:27:54:
                    be:c6:24:b5:84:ea:b3:2e:57:2c:df:3b:38:bd:4b:
                    2d:2e:e6:71:d6:6d:77:0f:5e:53:fa:ed:48:e2:50:
                    ea:8e:dd:bc:51:eb:69:be:d3:bf:0d:3c:9b:4c:89:
                    2a:7c:93:b7:31:a5:56:26:42:ff:b5:e0:df:d9:56:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D5:81:7E:62:11:0F:81:18:6E:DD:20:86:59:2E:D7:47:0C:AD:40
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134352e302f32342d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:91:da:99:8d:03:68:0e:cd:e1:3b:32:01:e6:9d:ba:28:06:
         ba:3a:91:f4:ab:8e:4c:6d:fd:25:2b:ef:d2:c1:bb:8e:56:6d:
         e0:68:ac:7a:3f:87:cf:d9:7c:06:41:b8:55:d3:b9:fe:8b:1f:
         19:54:6f:12:96:47:3a:a7:9f:1f:02:40:fb:12:a3:8f:93:13:
         d6:c5:b0:03:36:d7:36:c4:50:84:29:35:83:64:19:cd:0f:57:
         8c:51:ee:01:1f:d4:4c:3b:a6:19:3c:d8:17:c2:8b:98:1d:08:
         03:28:cf:bf:ff:1a:69:99:fe:b7:69:b5:26:f0:cc:64:dd:59:
         92:23:e2:fa:38:14:37:aa:04:86:f5:bf:a3:6f:b8:cd:5f:52:
         30:1f:8b:f2:c9:69:71:ce:25:e0:35:a1:04:c5:71:fc:e1:8e:
         f7:b1:e8:68:35:f7:33:93:c6:53:e5:1c:7c:84:80:a3:ae:73:
         fc:a8:ea:7a:16:ea:73:52:d2:e9:50:1b:e2:c6:ee:f2:3c:bd:
         35:20:71:8c:fb:f7:b5:b7:e1:4d:cc:11:44:d5:f4:4d:b5:72:
         84:11:3a:22:08:e6:f6:a9:be:30:d7:5d:94:38:3f:dc:28:2a:
         7c:48:16:d9:0a:11:5b:fd:70:60:06:29:eb:e4:a1:a2:d0:1a:
         f9:fa:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:51 2026 by rpki-client