Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e33302e302f32352d3235203d3e20323730303735.roa
File:                     3230302e31302e33302e302f32352d3235203d3e20323730303735.roa (raw, json)
Hash identifier:          muXqzDbsKYqQQLkOXA7F7bwe+ymu9dkzG0jTRPx+/H0=
Subject key identifier:   76:46:C0:F4:5B:BA:1A:EC:E5:9A:9C:FB:53:9B:FC:F0:37:8C:D7:0A
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       7243CAF397045DDCE77A93BFF53456D7D692991B
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e33302e302f32352d3235203d3e20323730303735.roa
Signing time:             Fri 27 Feb 2026 16:55:00 +0000
ROA not before:           Fri 27 Feb 2026 16:50:00 +0000
ROA not after:            Fri 26 Feb 2027 16:55:00 +0000
asID:                     270075
IP address blocks:        200.10.30.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 11:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:43:ca:f3:97:04:5d:dc:e7:7a:93:bf:f5:34:56:d7:d6:92:99:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: Feb 27 16:50:00 2026 GMT
            Not After : Feb 26 16:55:00 2027 GMT
        Subject: CN=7646C0F45BBA1AECE59A9CFB539BFCF0378CD70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:87:50:63:ab:eb:5d:3c:c1:9c:99:3e:13:
                    18:c2:57:9d:f9:2f:c0:06:8a:05:ed:58:7a:dd:ec:
                    5e:38:a9:53:44:c2:44:57:17:95:5c:2e:2c:bb:e4:
                    b1:be:52:c6:09:ad:22:ea:6a:42:10:85:b2:f0:36:
                    f3:06:2f:32:c5:3c:8f:fd:d5:47:3d:70:cc:67:59:
                    2c:44:de:13:86:20:df:c4:85:27:b2:3e:39:41:33:
                    69:98:0d:8b:f9:bc:41:8c:c1:53:34:44:d9:a6:5b:
                    d0:64:72:97:73:83:7d:77:ad:d3:4d:d7:21:f2:cf:
                    44:1d:8a:e9:2d:20:b2:f7:ca:bf:2b:22:35:ad:0b:
                    3e:d6:e4:36:c5:c6:ac:d0:02:13:37:5b:20:8e:e5:
                    20:cd:49:5d:45:d3:a2:85:68:84:3e:9e:b5:df:37:
                    9b:24:a3:63:53:be:fd:d8:eb:49:7a:bc:66:88:fb:
                    ac:f0:bc:66:62:22:6a:7f:ac:5b:11:a0:f3:ae:81:
                    5d:2b:e6:91:d3:81:10:95:73:40:f4:6a:3a:76:a1:
                    58:ec:5e:87:2e:d2:7e:1d:3c:d8:d0:f9:b2:2c:13:
                    a5:36:40:37:07:8e:94:86:59:3e:0a:dd:5b:5c:72:
                    6a:c3:94:18:c9:de:64:eb:8f:d3:d0:1a:cf:12:4b:
                    ad:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:46:C0:F4:5B:BA:1A:EC:E5:9A:9C:FB:53:9B:FC:F0:37:8C:D7:0A
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e33302e302f32352d3235203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.30.0/25

    Signature Algorithm: sha256WithRSAEncryption
         93:12:a5:dd:ab:67:ac:6b:ff:4b:22:63:d6:c1:49:74:26:f6:
         ab:8e:84:cc:c5:9b:4c:51:de:a3:0b:74:4f:34:de:38:f1:0f:
         c8:6f:46:24:7d:a9:ee:af:3b:be:3d:f5:47:27:87:a7:f2:c8:
         e2:eb:0f:24:12:19:94:a1:6d:c6:fe:23:e3:6b:6b:ee:6c:ba:
         18:d8:82:de:c6:c4:52:86:03:4e:aa:bb:62:ea:69:1c:8b:85:
         3d:c1:0d:0a:2b:b3:b8:7d:5c:51:57:4b:f9:10:39:44:96:b1:
         86:92:cf:21:56:76:f5:64:48:47:c3:f8:6c:74:9a:fc:e7:46:
         3c:e9:03:0f:5b:05:97:30:b9:d4:79:b5:23:c2:df:4b:75:69:
         61:13:9a:c5:69:ff:42:e8:65:83:00:de:9c:ed:7e:07:98:2f:
         86:68:36:32:97:bd:3a:78:33:43:cf:38:50:b9:50:09:fc:aa:
         b6:78:95:c9:4e:cd:a3:c4:68:35:7f:b0:a1:c4:b7:3a:c7:1c:
         e5:31:8e:05:4d:b0:17:f8:37:d7:a7:0c:8a:06:8f:d0:97:30:
         c6:44:14:9c:4c:89:70:6d:84:0a:20:86:45:2b:92:3a:2c:76:
         6a:a6:ad:5e:47:9f:93:37:df:3c:e1:07:cc:cc:99:c8:c4:6d:
         7a:5d:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:17 2026 by rpki-client