Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e3139322e302f31382d3234203d3e2038303438.roa
File:                     3230302e38342e3139322e302f31382d3234203d3e2038303438.roa (raw, json)
Hash identifier:          LZEaMDptBC3S2k9xQCiXk9vteLzUbaG7h0BFaJ6nA/A=
Subject key identifier:   83:40:6F:A8:DC:F6:FA:33:EA:DD:AE:A2:AF:5D:35:3F:1F:4C:23:D8
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       7A1D9B1A8EC428C7E62724A84C3D823C422CC804
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e3139322e302f31382d3234203d3e2038303438.roa
Signing time:             Tue 14 Apr 2026 14:38:48 +0000
ROA not before:           Tue 14 Apr 2026 14:33:48 +0000
ROA not after:            Tue 13 Apr 2027 14:38:48 +0000
asID:                     8048
IP address blocks:        200.84.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 08:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1d:9b:1a:8e:c4:28:c7:e6:27:24:a8:4c:3d:82:3c:42:2c:c8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Apr 14 14:33:48 2026 GMT
            Not After : Apr 13 14:38:48 2027 GMT
        Subject: CN=83406FA8DCF6FA33EADDAEA2AF5D353F1F4C23D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:8d:7f:c8:c5:8f:63:68:22:5e:05:0e:99:
                    aa:8a:65:28:aa:e4:40:50:44:4d:1c:c5:6e:d2:f5:
                    db:cf:0f:99:91:e6:d7:ee:aa:f7:02:b2:ee:6b:6c:
                    fd:00:40:15:51:fb:e6:e7:bb:35:88:ff:91:fa:b4:
                    75:c3:dc:9f:75:69:d7:03:ff:dc:35:96:8b:90:29:
                    10:85:29:d0:40:5f:32:06:ab:4a:1a:1d:e3:73:3b:
                    e8:ec:a0:74:af:36:26:84:b9:99:d3:fe:10:bd:be:
                    5b:79:67:90:c8:75:3a:df:d5:3b:ce:09:82:7d:94:
                    2e:6c:74:c8:bd:73:1e:8b:75:85:59:fc:b8:07:5a:
                    74:72:a5:31:40:54:6b:d8:81:3c:57:b1:83:89:7c:
                    82:11:b8:7a:04:18:5b:b2:28:df:c0:a8:1f:1d:98:
                    5b:75:c5:4e:d8:ba:a7:da:68:ae:71:f6:74:4b:c7:
                    62:d7:aa:b7:ba:5a:87:ba:d8:86:ca:8d:71:53:5f:
                    0f:90:58:57:a9:a2:69:52:4e:d6:32:79:c1:04:37:
                    4f:50:96:54:ba:0c:e7:2b:92:22:da:b9:a5:b9:1c:
                    57:c1:1e:1e:4d:01:10:6f:cd:92:d7:a3:33:38:4f:
                    18:c2:97:9f:1e:96:24:8a:84:cd:78:59:97:9f:ce:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:40:6F:A8:DC:F6:FA:33:EA:DD:AE:A2:AF:5D:35:3F:1F:4C:23:D8
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230302e38342e3139322e302f31382d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.84.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:4e:6b:5b:df:58:52:1b:14:cc:21:bf:85:fb:75:d9:bc:
         e0:d3:3e:98:48:b4:f3:2e:ef:96:3a:6c:91:ac:81:5d:b0:f0:
         aa:31:5b:0e:fc:91:af:36:6e:34:e2:ce:88:25:df:f3:2c:7d:
         54:a3:b4:58:30:dd:d9:9e:46:f0:2b:2b:d7:7f:63:61:e3:a2:
         05:51:1e:e6:4b:95:3f:77:95:99:37:ea:f9:4f:f6:96:dd:ee:
         45:62:91:8d:87:18:17:9c:0c:7a:0a:8c:58:56:20:5c:09:d4:
         d6:e2:67:cd:b0:a0:e6:cb:d0:8b:fd:7a:b0:97:4c:09:ce:ac:
         73:10:ff:a6:28:b5:dd:88:26:f5:0c:ce:28:01:af:25:30:bd:
         e0:ac:40:03:1c:8d:17:c6:fa:45:27:db:64:02:f2:91:e2:76:
         ba:15:4d:9c:80:93:3c:a4:58:f4:79:ca:a8:e5:72:2b:d4:dc:
         72:4f:78:15:85:65:5c:73:dd:dc:e2:77:36:a3:74:ce:6d:ee:
         18:32:04:c1:c2:f0:5b:35:be:09:e6:28:e7:6d:45:73:83:d5:
         ad:c0:d1:db:97:c4:30:bf:f4:35:6e:cf:4c:72:21:a3:ca:5e:
         d8:70:ba:1a:72:a1:98:a2:9f:f0:cd:69:51:a4:0c:3c:d8:fa:
         7a:a2:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:15:27 2026 by rpki-client