Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3137302e302f32332d3234203d3e203130363137.roa
File:                     3230302e3131322e3137302e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          31otZs7ehODyZAqJc/WLkydGB6P6gBC46ruNcRsYnjs=
Subject key identifier:   69:56:5F:9C:AD:EA:BF:98:25:2F:51:C7:56:1F:3E:3E:A9:7A:A2:B6
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       4D4071E6CC986D939446EC685BE7766F4973711A
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3137302e302f32332d3234203d3e203130363137.roa
Signing time:             Mon 06 Apr 2026 18:35:00 +0000
ROA not before:           Mon 06 Apr 2026 18:30:00 +0000
ROA not after:            Mon 05 Apr 2027 18:35:00 +0000
asID:                     10617
IP address blocks:        200.112.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Apr 2026 21:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:40:71:e6:cc:98:6d:93:94:46:ec:68:5b:e7:76:6f:49:73:71:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Apr  6 18:30:00 2026 GMT
            Not After : Apr  5 18:35:00 2027 GMT
        Subject: CN=69565F9CADEABF98252F51C7561F3E3EA97AA2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:96:d6:ed:5f:15:f3:6a:d0:f3:ee:29:e4:b6:
                    b3:1a:1a:53:13:b6:6b:e5:b0:d6:01:64:8c:e5:66:
                    2d:59:c7:62:4c:06:56:ba:ee:f9:8c:21:31:8f:88:
                    12:09:3d:f0:8d:ab:00:35:31:8f:57:8f:a3:1a:c4:
                    d1:98:7e:76:58:07:5c:c3:ac:19:7b:5a:b0:5e:b9:
                    86:71:a2:bd:d0:62:55:23:cd:5d:57:2e:6b:b1:d1:
                    53:9d:1a:b6:1a:d3:b3:bd:1f:5b:c4:85:0f:05:51:
                    c7:4d:0f:68:99:24:03:96:31:67:62:8d:b5:35:d8:
                    6f:fc:53:c6:88:28:57:45:b3:fd:2a:b7:59:89:c0:
                    00:04:fa:63:18:48:7f:9c:c1:46:6f:3c:c5:11:f0:
                    7f:a9:25:28:77:40:f0:df:9d:c7:7f:d5:71:5e:4f:
                    89:0c:d8:6d:4d:88:71:20:4c:32:d0:d9:1c:d2:74:
                    b6:37:c2:64:e6:b5:5e:59:fe:fe:4d:91:cf:c3:53:
                    b0:a0:71:13:c4:60:10:8c:b6:dc:c0:b2:7e:79:c1:
                    cd:ab:d8:80:88:89:f0:91:45:9f:12:2e:9b:d7:01:
                    81:be:d8:dc:36:5f:66:b8:c9:7a:eb:b8:e7:ce:65:
                    f3:29:a2:f8:ea:10:d3:69:30:10:e0:8f:f8:6e:e1:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:56:5F:9C:AD:EA:BF:98:25:2F:51:C7:56:1F:3E:3E:A9:7A:A2:B6
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3137302e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:ed:b1:4c:b7:60:99:87:77:2e:1b:55:6a:8a:7f:64:d3:ab:
         ba:ef:1f:9c:98:ec:cf:24:97:af:58:2f:82:be:52:bd:13:6c:
         3b:78:63:04:a4:6b:e9:54:dd:11:4b:39:b3:ae:52:a1:4f:6c:
         d3:ac:e4:46:22:14:6c:ac:f6:0a:17:fc:d0:9d:92:f1:40:02:
         4d:23:c1:8a:7f:5f:b0:84:8b:c4:e5:26:3f:6f:32:c9:f0:d7:
         f6:20:55:01:0e:1c:03:af:fb:18:8c:ca:f3:8e:20:fe:59:19:
         d1:78:00:f6:14:d8:79:2f:8e:70:a9:af:af:6e:e0:1a:c2:4a:
         14:06:dc:29:4e:73:6e:ea:d1:f4:3c:6b:a2:56:4c:af:e1:fe:
         40:16:5b:60:af:62:15:9a:35:ff:83:b6:93:34:42:c3:bb:29:
         11:5d:d7:83:29:b9:a5:9d:54:b6:27:c1:43:80:d7:3a:79:d3:
         bb:c8:92:91:cb:9b:4b:3e:d1:7b:92:a9:8e:ee:6d:f9:ad:0b:
         23:eb:c9:73:38:39:8f:4f:31:c1:3f:1d:86:d5:18:ce:c6:83:
         00:74:03:d0:89:65:7b:64:7c:07:5f:14:a7:53:19:c6:09:a2:
         4b:68:94:63:5b:80:10:a1:22:1a:d3:19:ea:2a:50:c5:f9:e7:
         03:78:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:51 2026 by rpki-client