Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3136362e302f32332d3234203d3e203130363137.roa
File:                     3230302e3131322e3136362e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          1vUltzV3oNVSBdLPrL47UOUhoEe3Yt6hm7LOsmk1eL4=
Subject key identifier:   08:9B:13:ED:A8:1C:DC:D1:92:7F:FE:96:55:0E:8C:34:0C:09:A7:34
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       184ABAF3CC2A78D7CD240797E69EDF0150A78A42
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3136362e302f32332d3234203d3e203130363137.roa
Signing time:             Mon 06 Apr 2026 18:35:00 +0000
ROA not before:           Mon 06 Apr 2026 18:30:00 +0000
ROA not after:            Mon 05 Apr 2027 18:35:00 +0000
asID:                     10617
IP address blocks:        200.112.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4a:ba:f3:cc:2a:78:d7:cd:24:07:97:e6:9e:df:01:50:a7:8a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Apr  6 18:30:00 2026 GMT
            Not After : Apr  5 18:35:00 2027 GMT
        Subject: CN=089B13EDA81CDCD1927FFE96550E8C340C09A734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:18:b5:3b:b7:8b:18:fc:78:1b:d4:b4:bb:
                    71:16:6f:26:21:ca:f7:d0:70:91:9c:cf:6d:37:00:
                    b3:6b:0b:4e:6d:29:59:60:17:68:a3:e9:c0:0d:cc:
                    6a:d7:2c:fb:0f:a3:e6:05:c0:20:02:66:fb:7e:3d:
                    6d:cc:bc:7d:3a:8d:c7:42:d0:8c:97:64:53:19:63:
                    6d:d7:ac:d1:cc:fb:fc:2e:81:59:22:36:ee:2c:4c:
                    29:da:e1:78:11:96:aa:f1:05:93:df:15:1f:70:8a:
                    60:d5:f0:3e:79:e9:92:8d:a1:c8:63:0d:e9:e7:5d:
                    a6:02:b6:72:a0:c2:01:94:46:de:e4:7f:a7:a5:2b:
                    8b:2e:59:b3:e1:38:7a:08:e1:37:63:e9:34:d7:16:
                    0d:e6:2b:dd:4f:3a:44:da:dd:55:e0:d7:8b:e1:f5:
                    cd:38:14:6e:97:74:f0:c3:b2:66:45:bc:6a:83:ec:
                    fe:53:68:0c:6a:4d:6e:15:03:69:9f:74:dc:fb:82:
                    ca:b6:8f:77:88:16:f2:0c:de:2d:52:91:62:74:4b:
                    b0:0e:0c:4c:35:b0:4d:24:45:2f:25:fb:04:fd:cf:
                    0a:e4:2c:52:18:fb:79:19:87:43:a3:f4:1f:60:c9:
                    27:4b:ad:cc:6c:ba:ca:85:b7:6b:7b:1f:f2:72:6c:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9B:13:ED:A8:1C:DC:D1:92:7F:FE:96:55:0E:8C:34:0C:09:A7:34
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3136362e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:97:3a:96:7b:a5:58:14:c6:48:76:bd:95:5f:6f:9b:5f:12:
         34:3d:15:cd:f6:42:7c:b1:00:86:b3:01:8e:20:3a:5b:95:ba:
         be:a6:09:c7:27:91:5b:33:07:f5:8e:e0:55:35:f6:c1:c9:7a:
         aa:5d:7e:29:00:88:3d:d4:2e:11:ab:4a:28:24:a3:3c:a0:86:
         09:17:80:5f:ce:d5:a6:e5:91:c6:be:34:69:d3:96:8b:16:7b:
         db:7e:c0:4d:f9:24:68:d1:62:03:2a:a2:7a:81:4f:03:f9:59:
         31:b4:3c:ce:66:61:0c:5d:68:1e:2e:9f:a1:ca:85:c2:ad:b9:
         82:1c:77:b7:09:df:3f:bc:d4:a9:71:3e:a9:6a:ce:21:5d:fe:
         49:41:50:23:eb:a5:38:d7:51:6d:65:be:17:23:96:a2:63:33:
         57:25:68:a0:36:eb:18:0a:33:e6:b1:12:5d:f7:b7:fd:2c:d6:
         73:47:68:51:de:04:78:fd:da:5a:3d:a0:4a:81:e4:b2:0c:2a:
         90:51:c9:47:5c:bf:8a:b0:76:0d:7a:17:8c:85:bd:87:51:41:
         ea:5f:19:0c:14:20:a7:a4:cc:49:58:b7:9b:e5:80:87:ac:10:
         87:ad:93:3c:0c:03:4a:7f:29:64:fd:d7:ee:c1:11:6a:66:df:
         1c:4d:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:20 2026 by rpki-client