Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32332d3233203d3e20323730303735.roa
File:                     3230302e31302e32382e302f32332d3233203d3e20323730303735.roa (raw, json)
Hash identifier:          ZxxlYUiYYQVuHxh8ZeavXR+2e3jgQEwAejK3Z2t6ews=
Subject key identifier:   43:F5:71:4A:C9:D9:81:4D:A6:77:2A:47:22:23:EB:47:38:89:FF:DD
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       4B4E7EAE7BEABA44D849D9C59A10570C1A5541F5
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32332d3233203d3e20323730303735.roa
Signing time:             Wed 25 Feb 2026 20:00:00 +0000
ROA not before:           Wed 25 Feb 2026 19:55:00 +0000
ROA not after:            Wed 24 Feb 2027 20:00:00 +0000
asID:                     270075
IP address blocks:        200.10.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 11:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4e:7e:ae:7b:ea:ba:44:d8:49:d9:c5:9a:10:57:0c:1a:55:41:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Feb 25 19:55:00 2026 GMT
            Not After : Feb 24 20:00:00 2027 GMT
        Subject: CN=43F5714AC9D9814DA6772A472223EB473889FFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:90:50:ef:79:f0:0e:7b:bb:0d:a5:23:78:
                    83:29:c2:f6:b2:0b:c8:09:90:3e:48:12:7c:cd:e3:
                    4e:42:86:78:2d:7d:4a:8b:7c:a4:b0:fa:27:2f:40:
                    45:5d:ec:ba:fd:34:1a:51:d5:a2:fd:ca:cf:69:a8:
                    1f:32:07:6b:79:f6:3a:cd:90:37:24:32:d6:71:57:
                    00:16:ee:48:9a:a7:4a:9b:86:95:1e:49:de:ed:32:
                    e8:6b:03:81:3c:17:c7:dd:a0:59:56:7a:f9:38:e3:
                    ab:e9:98:1d:02:28:fe:5b:da:86:61:12:57:f0:89:
                    db:71:3a:e5:23:0a:dd:1b:39:9c:92:6a:f0:be:b0:
                    81:b8:cc:d7:33:87:03:19:72:b3:83:fb:c3:7c:e0:
                    72:d1:1c:74:0a:d9:3b:d7:31:d2:6a:d9:19:4f:e8:
                    cc:83:6e:56:fb:44:d1:94:ee:57:4e:06:be:9c:67:
                    58:e3:bb:5f:98:19:7b:3e:6d:81:4a:8e:0e:bb:6b:
                    18:c2:7b:53:56:c6:6e:bf:34:74:05:31:a7:da:e5:
                    df:3d:b1:4b:70:c2:ab:22:b5:eb:95:f9:a9:59:af:
                    c2:4d:a7:a2:81:b3:dc:25:c6:c6:2d:25:65:5e:21:
                    7b:11:ca:b8:8d:80:e8:de:ad:6a:aa:b8:fb:a1:e4:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F5:71:4A:C9:D9:81:4D:A6:77:2A:47:22:23:EB:47:38:89:FF:DD
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32332d3233203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:c4:75:53:8d:f5:a3:25:f5:57:89:55:82:e7:90:24:5d:2f:
         7b:b0:2d:77:0d:81:16:c2:8c:97:8a:c9:ed:6c:a5:b2:27:e1:
         ed:9c:29:36:0e:8f:65:54:75:ee:a7:94:d2:3e:b7:da:cd:d2:
         65:25:de:8d:ec:92:cd:4c:a4:b0:e3:b1:b1:71:8f:0f:6d:86:
         b6:b1:ef:1f:26:c8:9e:45:21:fb:e7:36:6c:6e:d8:f1:fc:6a:
         6c:97:22:4c:14:73:28:81:4b:4e:db:10:56:c6:85:ad:20:c3:
         7e:c4:29:03:a0:19:7d:96:d8:18:22:5a:ef:16:e7:f1:9a:ac:
         16:48:91:85:ee:57:62:d4:aa:42:bf:42:c9:e2:a5:8e:28:99:
         f0:77:a5:52:96:d7:c7:51:9f:35:9e:75:2c:5a:6c:24:c0:48:
         4a:d6:e4:54:90:2a:92:db:5b:4b:51:15:50:fa:9e:96:ca:e1:
         b2:25:b9:9f:ee:45:cd:4d:05:86:a4:36:3d:9f:91:33:b2:4f:
         77:23:35:1f:6e:2d:2f:35:cd:54:77:5a:5b:0b:ef:d1:ad:d3:
         98:96:6d:a9:15:9c:cb:b4:76:d1:02:95:78:12:e9:f1:93:5a:
         fe:8e:07:4d:a3:5e:fd:40:82:a9:df:b1:ac:4e:a1:be:ee:c7:
         b2:46:ff:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:43:21 2026 by rpki-client