Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/3230302e332e3139352e302f32342d3234203d3e2033333536.roa
File:                     3230302e332e3139352e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          EaD9oAuKxaw+avbsaOzOvBQ8WMLwOOGOuuPQHRokM6g=
Subject key identifier:   2D:44:B4:D1:0E:59:1D:E5:C4:75:C6:5F:CE:55:3E:5E:20:36:D3:DD
Certificate issuer:       /CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
Certificate serial:       0376C276A7D1AF310D424104393A8C72335930AE
Authority key identifier: 2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/3230302e332e3139352e302f32342d3234203d3e2033333536.roa
Signing time:             Mon 30 Mar 2026 20:36:41 +0000
ROA not before:           Mon 30 Mar 2026 20:31:41 +0000
ROA not after:            Mon 29 Mar 2027 20:36:41 +0000
asID:                     3356
IP address blocks:        200.3.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:76:c2:76:a7:d1:af:31:0d:42:41:04:39:3a:8c:72:33:59:30:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
        Validity
            Not Before: Mar 30 20:31:41 2026 GMT
            Not After : Mar 29 20:36:41 2027 GMT
        Subject: CN=2D44B4D10E591DE5C475C65FCE553E5E2036D3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:75:89:ff:ed:58:55:07:1d:80:2e:0a:66:
                    ff:f1:ec:aa:ed:73:4d:e3:f6:ca:fe:69:81:d3:a0:
                    4d:70:be:3d:b5:48:f2:07:fa:de:16:3c:59:cc:de:
                    ad:a6:b1:46:86:73:3a:3d:2d:a8:02:76:43:4c:89:
                    56:e7:52:0d:1d:8b:9f:94:d9:d9:89:6f:f2:bc:dc:
                    77:a7:c1:6b:23:a4:54:58:18:54:0f:70:af:d8:7d:
                    ca:88:f8:40:e5:d5:76:a2:a0:16:7c:19:2b:28:fe:
                    c4:2d:bc:db:78:85:dc:ff:6d:70:84:e3:d5:47:dc:
                    4f:11:6d:f7:e3:51:04:ab:e4:03:8e:4a:dc:12:60:
                    f0:a5:8f:d8:ee:f6:15:6f:36:58:40:35:8f:99:54:
                    87:a1:62:ba:a2:78:2a:4f:b6:a9:d4:f6:ec:1c:c6:
                    40:d3:e9:b6:54:6f:52:37:d7:a7:2a:51:c4:9b:be:
                    4b:7b:8a:19:23:df:a0:46:04:fb:37:89:24:50:45:
                    da:d5:e5:8e:ed:87:8f:d2:3c:83:f8:ea:71:eb:ce:
                    d9:bd:21:b3:b2:da:e5:2f:3d:9f:be:2e:03:33:ba:
                    ca:49:ea:68:1a:a8:cf:ec:cc:b4:8b:44:a9:3a:d0:
                    96:f3:1f:00:06:46:95:4b:ca:dd:a4:36:af:0a:24:
                    ea:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:44:B4:D1:0E:59:1D:E5:C4:75:C6:5F:CE:55:3E:5E:20:36:D3:DD
            X509v3 Authority Key Identifier:
                keyid:2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/3230302e332e3139352e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:53:9f:3e:05:4a:23:2d:41:58:f5:5f:83:77:4d:5d:66:
         8c:6c:eb:aa:4d:c5:a6:26:47:87:33:9a:99:27:b1:a9:7f:7d:
         a6:06:b3:f9:a5:9a:65:09:84:56:fb:51:7b:92:bc:d0:c9:c5:
         21:c9:c5:a7:f5:43:04:31:58:1c:10:9e:3f:d4:34:a1:ef:ab:
         84:a6:79:01:3d:b2:77:89:54:e7:86:4e:67:41:7e:cc:83:12:
         aa:b0:76:87:5b:ae:1a:4d:d8:49:f1:a8:cd:99:19:72:cd:9d:
         83:ee:2e:e4:0f:41:91:00:58:1d:d4:9b:9f:a0:41:82:12:af:
         20:e7:3e:42:7b:a6:05:d5:be:c0:95:fe:82:51:90:0f:83:15:
         db:ea:37:f3:10:81:96:40:dc:6c:bd:38:1a:bd:60:b6:92:8d:
         9e:bc:e8:88:f9:e0:2f:4a:a6:25:04:2b:d7:62:c8:b8:61:38:
         c1:bc:0b:82:0d:c4:14:4c:d8:67:8d:88:ff:c5:6a:75:a7:61:
         ae:59:3d:86:38:d6:34:1e:86:69:c6:3b:bf:5a:2d:db:df:88:
         26:ca:1f:e7:81:2c:d1:70:b6:9c:87:4f:6c:e3:b7:66:a1:86:
         de:59:76:c6:0b:21:1d:af:53:41:e3:50:c6:2c:0c:90:cd:a9:
         77:5f:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:24:38 2026 by rpki-client