Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3135382e302f32332d3234203d3e203130363137.roa
File:                     3230302e3131322e3135382e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          QjzLg5rsS/R0sola6Cj1ZnT0BtjeYvr2o4DlLDaKN2k=
Subject key identifier:   24:1E:4D:2C:F7:49:12:4E:20:22:F3:1F:A4:E8:BA:C3:72:33:5E:60
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       01A087AF38208D3F6F6E65A5B23DC4096C8E1737
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3135382e302f32332d3234203d3e203130363137.roa
Signing time:             Mon 06 Apr 2026 18:35:01 +0000
ROA not before:           Mon 06 Apr 2026 18:30:01 +0000
ROA not after:            Mon 05 Apr 2027 18:35:01 +0000
asID:                     10617
IP address blocks:        200.112.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:87:af:38:20:8d:3f:6f:6e:65:a5:b2:3d:c4:09:6c:8e:17:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Apr  6 18:30:01 2026 GMT
            Not After : Apr  5 18:35:01 2027 GMT
        Subject: CN=241E4D2CF749124E2022F31FA4E8BAC372335E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:13:99:6a:b6:80:23:13:88:5c:1c:05:4e:
                    e3:19:73:9c:92:de:b5:1d:92:7b:a3:86:fe:05:01:
                    73:77:d9:1a:ad:06:c0:94:fc:3f:32:13:0a:a6:78:
                    34:45:d1:82:5a:4c:6d:71:6f:77:d8:3d:e8:96:f1:
                    1d:34:58:96:e4:d4:78:07:aa:81:df:b8:16:f8:99:
                    f7:da:b9:3a:21:31:d7:43:8b:6b:5a:6d:6c:15:db:
                    b0:1f:c2:6a:ca:ba:8d:69:49:07:04:e2:fb:25:c7:
                    36:53:c1:e7:54:37:2f:8e:6e:1c:0e:7a:70:0b:59:
                    97:f8:f3:b2:69:0c:23:f3:ea:6b:f7:ea:e8:0a:43:
                    f8:fb:7c:8d:11:8e:41:09:c9:df:89:93:34:de:73:
                    54:3e:d7:d5:78:ca:9a:98:85:05:d7:c3:f8:8a:7a:
                    d6:56:5a:72:39:8f:0d:5e:02:a4:71:59:71:37:ba:
                    d7:0e:e2:4f:15:8d:a7:de:b0:80:8d:35:ff:97:45:
                    0a:a5:77:c7:93:37:59:38:cd:e4:32:a6:3c:7b:25:
                    ec:a2:97:8b:84:1c:ef:27:53:5f:e8:6c:34:4f:de:
                    bb:10:14:17:ad:3e:a7:63:7e:9e:85:f5:e7:94:97:
                    e2:f2:86:27:d1:84:5d:ec:0f:bb:c6:c8:74:ce:19:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1E:4D:2C:F7:49:12:4E:20:22:F3:1F:A4:E8:BA:C3:72:33:5E:60
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3135382e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:72:f1:af:e7:05:95:b3:4d:dc:ab:d3:87:16:4d:a7:00:e5:
         9d:d6:e8:c8:5a:d4:8e:43:8c:f5:15:0c:07:bf:fa:44:da:d5:
         7f:bc:b3:67:91:5a:41:c3:8b:cb:20:77:df:fb:c0:22:66:20:
         c6:9c:15:0c:ca:f8:5b:72:05:b7:56:eb:bf:23:fd:eb:0a:34:
         8c:b8:98:13:c1:42:b1:8f:58:f2:6c:9f:8e:b7:10:0d:a6:32:
         15:31:a5:4d:09:21:7f:fd:82:cd:e1:ad:3f:a5:79:14:25:63:
         ad:7a:97:c6:c7:41:8b:90:5d:1c:46:7d:2c:69:97:ee:c4:72:
         2d:24:83:83:0e:8c:2b:f7:84:4d:c0:f3:f9:c8:e4:35:2b:5a:
         2d:87:df:d0:01:81:fc:87:15:37:30:0a:46:e4:e6:e0:ee:f1:
         45:c6:92:e5:8c:be:1d:84:e9:da:6b:ac:1a:18:81:b7:8f:6d:
         58:9b:60:50:c5:12:77:78:4c:d2:c6:17:7f:46:b4:6f:e2:8d:
         57:96:b6:05:61:8f:7f:e9:77:01:aa:66:01:7b:21:1c:4f:64:
         cb:63:55:d6:83:02:df:d4:b7:d4:73:94:39:1c:df:5a:1d:14:
         60:44:3c:b7:c9:59:e4:79:79:43:c9:76:50:09:15:e2:7b:56:
         3b:e3:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:13 2026 by rpki-client