Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e3130342e302f32322d3234203d3e203130363137.roa
File:                     3230302e3132342e3130342e302f32322d3234203d3e203130363137.roa (raw, json)
Hash identifier:          QsDpjREFJzNXEol8F02O/5HyyfbR9p1O30BmNAJvs3I=
Subject key identifier:   B2:2A:31:11:3F:30:0C:25:53:E1:D4:7A:EE:1B:A1:27:7D:72:A7:8B
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       03FCB2E83A68DA12EDD73200D1884A49BE4E709C
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e3130342e302f32322d3234203d3e203130363137.roa
Signing time:             Mon 06 Apr 2026 18:35:01 +0000
ROA not before:           Mon 06 Apr 2026 18:30:01 +0000
ROA not after:            Mon 05 Apr 2027 18:35:01 +0000
asID:                     10617
IP address blocks:        200.124.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Apr 2026 21:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fc:b2:e8:3a:68:da:12:ed:d7:32:00:d1:88:4a:49:be:4e:70:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Apr  6 18:30:01 2026 GMT
            Not After : Apr  5 18:35:01 2027 GMT
        Subject: CN=B22A31113F300C2553E1D47AEE1BA1277D72A78B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:6d:2c:53:02:9e:77:ee:38:d8:89:f9:4a:
                    f2:5d:30:51:06:39:19:41:bb:2e:56:74:35:6c:f5:
                    77:0a:7f:62:9f:bc:6f:22:7e:7a:74:29:ac:c3:00:
                    a0:4f:e9:eb:03:5b:50:61:ba:15:97:e6:48:2f:7a:
                    53:f6:ed:53:a6:5b:72:91:fa:8e:d0:78:ba:ca:52:
                    7a:2e:f5:de:a8:ba:57:61:41:81:35:15:43:c5:5b:
                    55:fb:a7:22:b1:03:31:de:a2:a6:c6:49:c2:27:81:
                    54:9e:5f:f7:29:43:76:19:c4:e7:81:1e:48:1a:86:
                    dc:4d:4c:f0:dd:70:8d:e5:39:5f:b2:30:be:15:84:
                    14:6d:39:15:88:a6:d3:9d:45:48:25:cd:33:98:fc:
                    4a:60:b9:6e:98:6d:16:fd:a2:dd:d0:d4:91:cc:be:
                    fe:95:b6:1f:f4:b3:69:8f:93:2a:93:3a:3b:5d:18:
                    a2:08:42:6d:bc:0d:0e:7b:04:7c:ca:c4:1b:ab:87:
                    78:8e:68:cd:19:a4:73:3a:aa:50:68:47:8a:23:bd:
                    18:f8:9e:ee:d7:7a:05:4f:74:b9:e5:d8:4f:49:be:
                    08:bd:04:87:14:c1:75:e1:e9:16:85:09:aa:07:ac:
                    3f:17:d4:5c:e5:26:2a:c4:43:8e:44:d5:73:97:04:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2A:31:11:3F:30:0C:25:53:E1:D4:7A:EE:1B:A1:27:7D:72:A7:8B
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e3130342e302f32322d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:a1:c8:27:44:2d:73:59:9f:f0:ba:45:37:61:74:d9:b1:
         6b:41:81:2f:ca:ec:74:a9:6f:3a:7d:75:6c:0b:e5:05:2a:42:
         7e:db:35:8c:87:81:29:b2:b3:02:50:23:c4:5a:04:bf:1c:07:
         32:b7:3b:f3:4d:87:16:b9:f7:e4:82:5f:8b:82:82:73:4e:83:
         f4:c3:cb:3d:e3:d5:5c:49:3d:f4:e3:37:36:6c:3d:d6:98:47:
         78:14:cb:e6:7f:2c:4d:9b:7c:96:e0:ff:11:f3:be:ee:8f:f2:
         aa:74:3b:ee:5f:71:cb:c2:39:49:95:11:83:bd:3d:7a:e9:f3:
         ab:5c:54:8a:3e:b4:ed:a5:57:48:24:e1:4c:32:d9:48:9c:cd:
         f0:ec:3f:b1:ec:c7:c3:d2:26:36:ea:6f:31:31:8e:e5:0f:54:
         f8:7d:3d:2b:b5:2d:98:48:6d:08:7d:b4:19:a3:f5:c0:01:3d:
         67:7e:1f:02:f4:66:23:5d:5e:b4:77:f7:ed:ed:c5:b8:82:9d:
         95:ae:3e:99:b0:50:bd:44:a6:ab:16:b0:58:ab:49:3d:8a:78:
         9b:c4:6e:f1:9d:bf:66:08:d2:78:46:a6:6e:df:30:4a:b0:52:
         53:ff:ee:60:21:c8:43:05:66:03:cd:b1:9b:66:67:71:d0:fe:
         f7:4f:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:22 2026 by rpki-client