Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e3130382e302f32332d3234203d3e203130363137.roa
File:                     3230302e3132342e3130382e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          Heok6f64grhON5+hBDhdfWd+Yk74ngURFH2Pw3zbnc0=
Subject key identifier:   1E:93:B8:6D:B3:F2:A1:7A:59:33:6A:DC:A4:FF:EC:B5:E0:F5:7D:85
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       5DE60072335731659CA38FFEB17C66AB8296907E
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e3130382e302f32332d3234203d3e203130363137.roa
Signing time:             Mon 06 Apr 2026 18:35:03 +0000
ROA not before:           Mon 06 Apr 2026 18:30:03 +0000
ROA not after:            Mon 05 Apr 2027 18:35:03 +0000
asID:                     10617
IP address blocks:        200.124.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Apr 2026 21:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e6:00:72:33:57:31:65:9c:a3:8f:fe:b1:7c:66:ab:82:96:90:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Apr  6 18:30:03 2026 GMT
            Not After : Apr  5 18:35:03 2027 GMT
        Subject: CN=1E93B86DB3F2A17A59336ADCA4FFECB5E0F57D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:03:52:ba:cb:16:e6:a3:5c:58:37:e2:b7:04:
                    0f:c4:9a:e7:9b:1a:a0:2b:25:26:1f:c7:56:a1:56:
                    22:10:3a:36:fd:47:69:eb:7d:4a:2a:9e:45:b3:9a:
                    35:95:9b:40:40:6b:04:c4:04:d6:2a:81:7c:ed:93:
                    29:29:8f:75:62:c0:78:a9:4e:20:56:f2:79:54:f9:
                    38:f7:82:0b:d8:50:bc:4b:bb:80:7c:67:90:dd:ee:
                    a8:09:5b:87:7e:0d:52:10:70:82:3d:78:4c:77:ba:
                    f0:67:7d:07:d2:81:42:f8:ed:04:55:de:34:58:cd:
                    cb:b6:d8:c3:2a:8d:c2:b1:a8:22:e4:0b:78:eb:ba:
                    21:0b:ab:d5:c1:9d:f5:a0:ad:45:79:d8:9a:33:f1:
                    3c:a0:a2:8e:db:4a:c5:2a:cf:d4:2d:d4:58:99:a0:
                    5d:77:f7:01:f8:10:da:13:8d:75:a1:ac:ab:9f:45:
                    3f:36:f3:e6:1e:23:43:ef:75:82:76:5d:bf:ee:9b:
                    4c:fe:78:80:81:fa:1d:05:38:97:47:ce:6f:1f:bf:
                    68:fc:6b:4a:89:60:eb:8f:55:2a:1f:ed:1f:97:e6:
                    e0:b0:18:72:df:b2:81:04:67:45:81:b2:34:ee:80:
                    2c:79:45:09:f3:a9:4f:45:6b:3f:82:52:f6:7a:2b:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:93:B8:6D:B3:F2:A1:7A:59:33:6A:DC:A4:FF:EC:B5:E0:F5:7D:85
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e3130382e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:f8:de:fc:cd:d4:98:39:de:94:4d:73:49:db:43:e6:10:29:
         d4:2a:14:ba:f8:6d:34:25:87:99:1e:f4:5e:82:eb:eb:15:69:
         4b:e9:17:08:d0:80:67:9a:6d:10:ec:bf:67:19:a6:65:fa:d8:
         98:03:53:a3:3a:3c:80:05:af:1a:55:3d:b4:47:7b:2a:bb:3d:
         e8:24:39:fd:44:91:ab:7b:76:72:0a:dd:c8:7d:0e:81:ed:9c:
         63:0b:a0:4c:cd:28:28:db:b0:cb:15:97:d5:fc:97:ed:16:a5:
         ae:cf:c8:fb:ce:4a:95:51:39:62:cd:85:b6:56:32:50:84:0b:
         d6:b2:f2:ff:1d:ee:a5:80:e2:dc:8b:5e:2c:6d:02:8d:76:ff:
         f7:ac:7f:26:f0:1b:95:0e:51:17:8f:f3:88:fc:d8:69:4f:ec:
         d2:8d:23:7e:b6:a4:29:08:25:cb:23:ca:c6:62:07:51:81:d7:
         85:97:cb:f8:5f:f3:41:c3:3f:03:ff:8c:52:48:d2:26:a6:a7:
         9c:59:4e:1a:e7:67:f7:42:6d:f6:d4:4b:81:29:a7:1e:5c:20:
         d1:eb:30:7b:d3:24:cd:97:33:42:27:ee:9a:32:7c:0a:c2:28:
         8b:58:8c:d8:cb:ea:43:4f:48:c2:a0:ac:25:1d:1e:19:9f:96:
         f9:9d:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:23 2026 by rpki-client