Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38362e302f32332d3234203d3e203238303032.roa
File:                     3230302e302e38362e302f32332d3234203d3e203238303032.roa (raw, json)
Hash identifier:          AsXEcX2izHX1clkoBQfomV9iifgMIovdz4mpelaU7go=
Subject key identifier:   04:7F:93:56:16:D3:F9:BD:5E:5C:A9:08:C8:9F:28:81:87:15:EE:17
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       7AF6E1111975BDC66015743BA8C9A427A2CC1B24
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38362e302f32332d3234203d3e203238303032.roa
Signing time:             Fri 16 Oct 2026 23:15:00 +0000
ROA not before:           Fri 16 Oct 2026 23:10:00 +0000
ROA not after:            Fri 15 Oct 2027 23:15:00 +0000
asID:                     28002
IP address blocks:        200.0.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f6:e1:11:19:75:bd:c6:60:15:74:3b:a8:c9:a4:27:a2:cc:1b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Oct 16 23:10:00 2026 GMT
            Not After : Oct 15 23:15:00 2027 GMT
        Subject: CN=047F935616D3F9BD5E5CA908C89F28818715EE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:0b:1b:5e:2c:fe:33:16:c3:cb:9e:46:20:
                    2e:c9:b9:58:fb:82:b7:c4:e9:0c:a1:2a:fc:2d:97:
                    a9:f0:d7:56:1e:c9:34:99:36:fc:f1:f3:ef:33:84:
                    c1:b5:32:72:66:21:d1:48:6b:1f:aa:d7:78:48:fe:
                    4e:cc:bf:0a:f8:84:8f:b5:e7:07:e3:e0:7c:2f:8d:
                    98:90:7e:ac:24:50:d7:a5:c5:8e:33:33:57:90:a7:
                    ee:b9:f3:f7:29:f4:b7:6e:39:18:b9:41:af:4e:00:
                    3b:fe:b6:17:92:e9:d0:35:97:c1:4a:5d:05:a9:9d:
                    00:7b:e4:59:5f:f9:61:8a:0e:a9:e9:36:8b:bd:a2:
                    88:b5:86:b5:36:27:f5:a9:57:89:ea:d6:5e:52:32:
                    93:98:13:2f:4a:a8:50:33:6c:25:0b:18:16:fe:cd:
                    f2:cd:aa:c3:7b:a8:56:4c:53:d9:e3:9b:b7:d7:4c:
                    4c:60:20:93:4d:f6:3f:d7:e7:56:20:c5:b1:6b:d0:
                    ac:35:62:12:ff:dd:d6:26:9d:70:7c:27:72:74:60:
                    21:70:1b:37:56:94:45:e8:f0:f9:fd:3b:2f:6b:b3:
                    0d:41:18:77:69:4e:49:2e:f1:6f:94:11:09:8b:2a:
                    ed:9e:f0:35:2f:17:dc:ad:da:c4:cd:94:ab:7d:d7:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7F:93:56:16:D3:F9:BD:5E:5C:A9:08:C8:9F:28:81:87:15:EE:17
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e302e38362e302f32332d3234203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:b5:d6:e2:20:b8:0e:ab:31:52:eb:78:2b:7f:8c:40:e5:
         81:0e:40:ae:b7:57:fd:62:d1:84:ea:0e:57:85:9b:a2:c5:ac:
         32:1d:90:c0:3f:27:22:17:52:cf:63:42:ea:ee:08:f7:06:9d:
         2c:ca:0e:d5:c0:35:b8:cf:34:e0:8f:d4:ea:8d:d3:ec:16:12:
         80:74:23:40:ac:91:ae:d1:7d:cb:16:01:da:f0:3e:bc:03:b9:
         bb:bd:96:00:6e:44:9d:57:ed:fa:5d:4e:44:c3:9d:91:36:3d:
         1b:31:39:8b:22:16:76:75:fd:6d:86:8c:0b:38:7f:44:87:c9:
         cd:89:8b:2d:f2:ba:4d:51:f0:ef:ce:15:5e:ab:a6:c1:55:13:
         0c:0c:d0:a0:7d:9c:e4:fd:f6:0d:fb:be:f0:75:52:f0:c9:8e:
         2b:9f:af:32:b6:b5:d1:11:9f:cc:05:4e:51:79:20:35:48:6c:
         cd:83:94:89:c5:b4:be:5a:d7:78:ec:69:67:3f:a4:81:e5:6b:
         5d:f2:39:20:9d:6c:1a:92:3a:38:19:5f:0e:90:cc:1c:d5:06:
         31:1a:b3:f6:fb:ca:78:81:d0:4e:31:3f:fc:52:b5:8a:b4:15:
         ed:d9:20:ac:1e:0c:e9:12:3c:38:44:09:ff:52:c7:c5:6e:1f:
         8a:0b:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:21:11 2026 by rpki-client