Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e39362e302f32312d3234203d3e203130363137.roa
File:                     3230302e3132342e39362e302f32312d3234203d3e203130363137.roa (raw, json)
Hash identifier:          ThMkG24PgNk+4fGSq00U28YLX8mO/A42piOk/oBOmP8=
Subject key identifier:   45:62:DB:A2:91:2A:7C:0D:B0:17:EA:87:81:31:3B:68:2B:63:B5:1C
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       58406830DCFF22CEE7081D5A6C91944F9B3D2E1E
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e39362e302f32312d3234203d3e203130363137.roa
Signing time:             Mon 06 Apr 2026 18:35:01 +0000
ROA not before:           Mon 06 Apr 2026 18:30:01 +0000
ROA not after:            Mon 05 Apr 2027 18:35:01 +0000
asID:                     10617
IP address blocks:        200.124.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Apr 2026 21:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:40:68:30:dc:ff:22:ce:e7:08:1d:5a:6c:91:94:4f:9b:3d:2e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Apr  6 18:30:01 2026 GMT
            Not After : Apr  5 18:35:01 2027 GMT
        Subject: CN=4562DBA2912A7C0DB017EA8781313B682B63B51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:3e:05:34:0a:d7:b6:c2:0e:87:f3:b1:ed:
                    e8:9d:5a:dd:40:2f:f1:02:22:de:4b:64:b5:7e:12:
                    f1:e0:ee:33:a3:fa:10:8c:78:9f:80:84:e5:ff:8b:
                    19:9d:05:8f:53:fb:f6:fc:54:72:f5:b9:0f:85:b5:
                    e0:19:69:b9:ba:32:f2:a0:5c:fc:93:f0:94:be:95:
                    eb:fe:59:db:8a:05:98:cd:94:2f:e7:d6:13:d3:9b:
                    02:27:da:b6:50:87:9b:30:33:52:9c:97:25:18:25:
                    4d:06:b8:27:ea:b4:30:13:58:e7:e3:58:06:73:a7:
                    c6:10:dc:77:00:4d:9e:40:17:5b:45:c6:21:b1:b6:
                    60:8c:c6:fa:7e:60:51:9b:cc:cf:3f:c6:e0:5f:1b:
                    91:43:68:75:ce:de:1b:36:3a:21:7b:99:7c:bb:7e:
                    aa:7c:55:a3:0d:10:98:fb:ab:9f:73:19:8a:5d:95:
                    66:55:76:b9:6c:96:8a:76:48:14:e1:54:c7:2a:24:
                    e0:5d:cf:19:8c:8b:a5:71:d0:39:fa:6c:43:57:b8:
                    a9:af:eb:b2:b0:f2:b9:4d:32:6e:b0:4f:81:1c:74:
                    4f:63:17:57:c2:9e:cc:53:7d:73:56:91:88:ce:e1:
                    e5:55:63:61:87:43:d8:28:cf:23:6f:2f:40:15:8a:
                    35:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:62:DB:A2:91:2A:7C:0D:B0:17:EA:87:81:31:3B:68:2B:63:B5:1C
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3132342e39362e302f32312d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:27:09:8b:3e:59:39:5b:a9:eb:7a:42:78:bf:36:bb:08:e3:
         c3:97:77:5c:eb:64:88:57:02:8f:9b:db:7f:8a:89:6a:17:83:
         37:3e:a8:d3:ce:aa:40:7a:72:8d:6d:cb:a2:eb:c5:7a:b2:25:
         7e:04:b6:c9:25:ad:e5:c0:b6:78:00:b7:d2:59:b3:db:49:0c:
         09:cf:16:23:22:e6:1c:47:5e:78:69:6b:5f:3b:99:a1:24:ba:
         44:a0:3c:36:59:90:06:f8:10:79:6b:e5:0d:8e:66:7e:4a:53:
         76:74:b1:12:be:6b:c1:c4:c3:28:5b:21:ef:ee:48:dc:81:30:
         a8:7e:2b:af:c6:71:91:84:b3:52:c5:ac:77:80:97:6d:3b:55:
         af:ab:c1:3d:12:01:00:26:98:fa:34:43:4f:7a:30:61:a4:26:
         d7:0e:00:64:70:25:33:fc:b7:d4:35:15:85:9d:9a:5d:26:e9:
         50:8f:0c:ff:f7:63:7a:aa:93:90:21:04:d6:55:35:fb:32:06:
         36:a0:97:c6:59:25:40:22:e7:aa:35:8c:0c:64:79:fe:e4:ac:
         ae:08:fe:e6:cc:b7:1e:1c:78:f6:14:cb:28:0f:a4:88:95:cb:
         fb:09:37:a0:16:e4:b1:9d:76:1e:f6:4f:dd:a9:be:15:9b:8a:
         22:63:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:26 2026 by rpki-client