Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134382e302f32322d3234203d3e203130363137.roa
File:                     3230302e3131322e3134382e302f32322d3234203d3e203130363137.roa (raw, json)
Hash identifier:          th9RzCi91XCCO5xuC9RrbSABDyDVO4kzbKqo+Cp7S68=
Subject key identifier:   88:D9:9A:27:DA:9D:89:E7:2D:17:F5:CA:3C:F9:F2:8F:1F:3D:4D:F4
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       06CAD7E66D610EDE878AC74C303E37F1917C20D0
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134382e302f32322d3234203d3e203130363137.roa
Signing time:             Mon 06 Apr 2026 18:35:02 +0000
ROA not before:           Mon 06 Apr 2026 18:30:02 +0000
ROA not after:            Mon 05 Apr 2027 18:35:02 +0000
asID:                     10617
IP address blocks:        200.112.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ca:d7:e6:6d:61:0e:de:87:8a:c7:4c:30:3e:37:f1:91:7c:20:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Apr  6 18:30:02 2026 GMT
            Not After : Apr  5 18:35:02 2027 GMT
        Subject: CN=88D99A27DA9D89E72D17F5CA3CF9F28F1F3D4DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2e:ae:55:7a:b9:2d:c5:cc:2d:23:dc:6f:98:
                    43:af:cd:c8:88:c5:55:a3:85:c6:f0:5c:a0:bf:43:
                    58:fd:cd:f4:67:3c:75:2e:f8:18:24:b0:14:70:2c:
                    bd:3e:a6:cf:f8:ba:43:97:95:e2:78:5d:9e:75:93:
                    b8:86:29:56:88:32:22:29:9f:9e:1b:bb:99:fa:50:
                    45:d5:48:e1:47:3a:52:ed:9e:7b:b6:3c:b3:2a:e6:
                    d6:b0:bc:3f:47:be:96:bd:48:c3:fa:ff:fe:d8:29:
                    74:47:a0:cf:ff:49:f6:a2:88:25:30:ae:62:ac:ee:
                    8a:63:24:97:c3:69:44:05:5d:99:53:c8:4c:4d:16:
                    a9:36:ce:85:3c:59:8f:48:c1:e3:a0:da:23:69:b3:
                    17:f0:53:79:6a:d7:0d:e7:8f:dd:f4:08:cd:5f:c5:
                    50:9a:7c:2d:9d:6f:52:8a:9f:ec:aa:69:22:29:fc:
                    4d:41:50:e8:e5:5b:77:72:94:3e:0c:43:ba:46:94:
                    a0:e9:36:a4:c1:14:a2:22:b5:4b:b0:bd:26:46:67:
                    2d:f2:29:3e:4e:ac:b0:ce:b3:5c:19:6d:c5:63:6f:
                    08:a8:06:ef:c4:d3:5b:3e:63:8e:41:a0:a5:fa:d6:
                    5e:52:e3:d2:a7:a8:83:d9:df:ae:77:8a:c9:c9:c4:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D9:9A:27:DA:9D:89:E7:2D:17:F5:CA:3C:F9:F2:8F:1F:3D:4D:F4
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134382e302f32322d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:e2:36:c9:cd:0e:71:3b:9f:cc:98:23:54:94:ac:8d:d6:d9:
         ee:43:c0:7a:12:6e:7e:c4:44:97:46:4a:09:ce:b8:38:c1:a0:
         19:19:99:12:ad:dd:b9:19:e4:98:39:69:85:b6:87:06:be:0c:
         6d:06:2b:27:cf:9a:74:49:fc:d9:37:c7:6f:68:90:9e:c0:5b:
         68:4d:db:6a:6f:82:f8:7e:4f:bd:a9:0d:33:71:67:ec:58:e9:
         b7:b7:46:11:95:ba:ac:a1:84:17:fa:d8:93:c5:09:17:e0:b8:
         2d:b1:39:40:10:a8:b1:31:0b:a5:d9:c1:e1:41:40:1d:5a:20:
         c9:d9:35:16:fd:d2:90:ef:35:79:f8:71:19:85:04:b5:db:7a:
         c2:81:af:d0:98:5c:81:22:15:9c:82:70:53:26:84:41:21:25:
         7b:50:f2:f9:af:87:57:3a:0b:c6:7b:1c:d8:e1:ac:50:87:b1:
         9b:58:a4:b6:7f:ec:db:7c:05:b2:e9:5d:72:c9:fd:da:18:01:
         37:f7:5a:fc:9c:cc:9c:7a:00:7f:0f:25:4d:cb:d1:15:9d:1f:
         e5:94:ca:ee:49:6b:bb:02:e5:c9:36:09:6c:a8:df:8a:d2:f4:
         b7:6f:68:e7:60:ce:b3:6c:c1:7f:39:1d:b8:d5:b2:f5:74:68:
         f6:4f:0f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:27:54 2026 by rpki-client