Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203532343638.roa
File:                     3230302e3131322e3232382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          uwbvKX/W6zkaiEpz5vW5xfuvN43qTlDVA2tcfJn70Rw=
Subject key identifier:   D2:57:28:CC:9E:0A:DC:2B:26:B1:88:B4:8E:29:B0:B9:84:5B:6F:D3
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       6AEAA0A35432B2A23AE7FCA228FF6B3FE7B73BD1
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203532343638.roa
Signing time:             Thu 29 Oct 2026 22:06:10 +0000
ROA not before:           Thu 29 Oct 2026 22:01:10 +0000
ROA not after:            Thu 28 Oct 2027 22:06:10 +0000
asID:                     52468
IP address blocks:        200.112.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ea:a0:a3:54:32:b2:a2:3a:e7:fc:a2:28:ff:6b:3f:e7:b7:3b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Oct 29 22:01:10 2026 GMT
            Not After : Oct 28 22:06:10 2027 GMT
        Subject: CN=D25728CC9E0ADC2B26B188B48E29B0B9845B6FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:51:e6:ca:da:a8:ee:91:bb:76:5d:e7:ca:
                    9b:41:d2:a8:11:fa:b9:9c:dd:28:66:80:bb:a7:a4:
                    9f:d7:4e:45:2c:5d:5b:01:1a:18:71:0f:0e:8c:e3:
                    b9:ba:21:20:c3:81:92:d1:12:6d:4b:fe:d5:b4:db:
                    2a:66:4a:92:c4:dd:dd:90:ba:50:c0:20:2f:d2:23:
                    fc:db:c9:a7:46:3e:6d:78:7b:b8:5e:c6:02:0a:97:
                    85:52:be:af:7b:8e:04:37:9e:40:41:ed:06:87:38:
                    08:fc:8f:0d:cb:5f:19:31:ca:25:8b:1c:73:af:c5:
                    d3:75:dc:66:9f:10:86:9b:ff:5f:76:8e:22:d1:5d:
                    33:4b:b7:c8:f4:30:d9:e9:fd:de:1c:37:d4:52:f2:
                    97:96:13:e2:2f:d6:00:70:7c:b7:95:9c:57:38:21:
                    dd:20:83:a5:d3:64:24:0c:66:c7:30:1f:5e:c5:a3:
                    82:72:aa:b9:52:1a:d0:12:cb:82:e1:d9:75:5d:30:
                    58:9b:5f:de:3f:87:bf:03:6c:5a:5b:a8:94:37:38:
                    e3:c2:a6:81:ba:6d:03:97:e5:7b:c8:28:9c:06:54:
                    d3:1d:d7:73:1e:dc:48:16:a9:94:ee:20:0b:c7:fb:
                    02:3d:a9:20:16:8d:04:e0:5e:e4:01:ab:10:32:c8:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:57:28:CC:9E:0A:DC:2B:26:B1:88:B4:8E:29:B0:B9:84:5B:6F:D3
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:99:f1:5e:fb:6e:2d:ff:26:9f:76:c6:45:72:26:06:ad:75:
         2d:0e:39:3b:77:25:e0:4c:b4:4f:7f:26:0e:d3:b2:9f:6c:f0:
         f4:be:56:0b:f8:87:56:f4:de:71:9b:61:37:1b:2f:0e:dc:e5:
         d7:b1:89:a6:d0:35:22:8a:7a:89:0b:10:e2:41:bc:6b:cf:f4:
         fc:55:83:8b:17:d4:f4:6e:e5:4b:29:7e:c5:be:f5:ca:5c:71:
         c5:21:eb:fb:e9:43:12:9f:ae:7e:f1:1e:23:79:46:fe:44:2f:
         8f:9e:41:3d:8f:3e:e7:e2:13:1f:da:0d:ab:33:fa:a5:a6:ff:
         38:1e:89:ee:90:77:f2:f9:d7:7f:fd:fc:5e:5c:37:1d:bd:57:
         17:79:47:11:a9:b2:98:13:81:ad:96:ae:71:53:6e:5a:5a:fd:
         8a:45:85:ff:6d:6d:80:2c:af:6b:09:eb:62:f6:d3:5a:b6:07:
         1e:9c:39:05:a7:21:49:da:aa:f2:1e:2c:3b:a0:dd:87:cd:5f:
         70:10:86:eb:75:48:45:3b:94:60:d3:2a:ba:a4:6f:91:a6:49:
         f7:b7:be:86:66:9a:02:9b:43:7c:b3:1f:5a:05:19:03:55:eb:
         d0:d6:a9:48:e4:0b:5e:67:6e:84:05:eb:b6:d8:eb:2c:70:87:
         1f:75:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:52:30 2026 by rpki-client