Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e33302e302f32332d3233203d3e20323730303735.roa
File:                     3230302e31302e33302e302f32332d3233203d3e20323730303735.roa (raw, json)
Hash identifier:          HHdn50v5n2mhkkYZ546VLXjlwNhQ/LtmNdkpdTaMeuc=
Subject key identifier:   3E:73:CA:47:21:F3:26:02:61:78:77:21:3B:92:99:7F:75:5B:E5:0B
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       3BB762E204535C3B56629838535832EDEDC97D83
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e33302e302f32332d3233203d3e20323730303735.roa
Signing time:             Wed 25 Feb 2026 20:00:00 +0000
ROA not before:           Wed 25 Feb 2026 19:55:00 +0000
ROA not after:            Wed 24 Feb 2027 20:00:00 +0000
asID:                     270075
IP address blocks:        200.10.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 11:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b7:62:e2:04:53:5c:3b:56:62:98:38:53:58:32:ed:ed:c9:7d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Feb 25 19:55:00 2026 GMT
            Not After : Feb 24 20:00:00 2027 GMT
        Subject: CN=3E73CA4721F32602617877213B92997F755BE50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:74:57:ed:17:0c:70:ec:67:cc:cb:f3:3c:
                    cc:9f:e5:9d:1c:9e:b0:35:62:b3:9b:59:08:b5:03:
                    b8:ce:b3:35:e8:bd:d3:eb:a7:b6:3d:7a:52:de:45:
                    35:19:1e:1b:38:21:d0:84:b6:b2:39:c9:fc:12:3a:
                    df:e9:74:99:3c:98:34:7d:45:1f:ca:52:2c:86:26:
                    77:76:02:79:bb:8c:4c:85:c9:76:fb:26:11:3b:c9:
                    d5:1d:22:7b:37:f6:71:bf:ba:e9:f7:4c:d9:0c:98:
                    f1:3e:01:da:af:61:8b:75:cb:1b:25:fd:21:ed:20:
                    e4:b8:5a:03:e9:bc:11:f9:71:cc:ca:d2:ca:d7:a1:
                    0f:45:b8:6b:7f:60:53:53:7b:0b:a2:50:2e:d0:bf:
                    3e:94:84:7f:9f:2d:a1:5a:df:4e:cc:69:b8:24:31:
                    69:ec:1d:09:e3:05:6b:7f:56:73:29:2f:a4:d1:a1:
                    36:1f:44:e2:23:34:b0:5d:31:f0:82:47:36:b9:85:
                    35:a1:32:97:e8:29:dc:63:03:cc:e6:2b:27:28:e9:
                    63:f8:a6:35:7d:54:db:82:c8:08:83:c7:ee:15:12:
                    a0:1f:96:6a:8b:0b:4a:fc:50:78:cf:e3:fe:43:01:
                    f0:41:0d:3e:9d:a6:82:f0:bb:aa:00:48:40:36:e5:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:73:CA:47:21:F3:26:02:61:78:77:21:3B:92:99:7F:75:5B:E5:0B
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e33302e302f32332d3233203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:1c:8d:38:df:b4:a6:af:41:14:4f:d4:21:d6:b5:20:1c:3d:
         ba:10:bd:d2:f6:54:de:6b:85:98:4e:b9:76:a0:70:52:b2:84:
         96:fa:a2:72:9b:67:a6:e6:b4:d5:ec:01:80:a4:12:13:c0:9c:
         87:d3:1f:e9:f9:19:f3:94:32:93:be:19:5c:43:01:aa:f2:3f:
         2c:5b:8e:a7:f0:45:d7:25:5a:2d:90:62:28:11:c9:7b:95:91:
         c7:e2:a8:b1:6e:62:a9:95:df:79:cd:d5:b8:12:e2:e3:3e:41:
         7d:25:22:e4:cf:7e:4f:a4:ba:87:e2:33:93:eb:d9:a9:45:dc:
         9d:5f:ba:73:31:7d:5d:e2:3f:42:07:90:65:57:d4:cb:dd:7f:
         10:49:7a:2d:52:64:be:8f:e3:9e:70:31:2a:37:0e:db:66:dd:
         7e:21:35:30:f8:30:e6:b1:d0:b5:bd:41:83:f2:a3:36:1c:54:
         8a:7b:e6:49:25:06:e9:c9:19:c9:1b:f1:3a:30:74:07:50:ce:
         e7:af:63:67:a3:7a:b1:2a:7b:73:0d:be:f5:1e:12:27:7e:5f:
         30:b1:e2:09:b5:10:6f:3b:fa:08:7f:e8:79:57:10:85:5c:ff:
         f5:df:9f:20:3c:d1:01:db:56:3d:17:f2:8f:b5:47:96:31:6d:
         96:87:36:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:56:31 2026 by rpki-client