Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235342e302f32342d3234203d3e20323730303439.roa
File:                     3230302e35352e3235342e302f32342d3234203d3e20323730303439.roa (raw, json)
Hash identifier:          Pvgl2aCNsrpGHy6S7qj3U0ojF33QZ9qq9l8H/khyeAw=
Subject key identifier:   9F:B4:FE:8D:60:09:39:A0:4F:79:D0:88:77:DF:FD:9C:E1:1F:77:25
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       47811757CCF578652958E5706ED8DDC22E8CB9FC
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235342e302f32342d3234203d3e20323730303439.roa
Signing time:             Mon 30 Mar 2026 21:36:52 +0000
ROA not before:           Mon 30 Mar 2026 21:31:52 +0000
ROA not after:            Mon 29 Mar 2027 21:36:52 +0000
asID:                     270049
IP address blocks:        200.55.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:81:17:57:cc:f5:78:65:29:58:e5:70:6e:d8:dd:c2:2e:8c:b9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: Mar 30 21:31:52 2026 GMT
            Not After : Mar 29 21:36:52 2027 GMT
        Subject: CN=9FB4FE8D600939A04F79D08877DFFD9CE11F7725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:09:4f:58:37:c4:d0:40:c2:42:e1:fd:4b:
                    2f:1f:89:f5:ce:ad:e7:0d:24:99:ec:82:c8:b2:7d:
                    8d:46:45:d6:21:28:7a:07:56:a8:82:23:f2:35:df:
                    4c:34:84:57:67:be:44:98:30:87:0f:82:7d:04:6d:
                    16:10:ae:b3:77:7b:3a:b1:9d:7d:3b:fb:24:ac:5c:
                    49:52:13:34:e9:59:e8:c2:59:68:1f:58:d0:67:34:
                    7a:e4:e7:8f:83:56:d3:6c:b7:36:4f:d5:79:c3:40:
                    0c:37:18:22:16:47:1d:24:2d:2d:28:17:f4:42:cf:
                    05:1c:81:d3:55:4e:55:73:68:64:ac:8a:e3:3c:75:
                    c4:af:40:ab:57:81:e6:74:5b:e0:b7:34:79:89:37:
                    f7:d5:51:72:09:85:24:f0:fc:b4:91:d5:df:dc:61:
                    26:00:7e:ba:1d:24:1e:78:f4:ee:be:25:6a:40:de:
                    6b:32:6b:f6:b7:20:f7:76:f8:0f:68:2e:dc:41:a5:
                    82:a4:d9:c5:81:f5:5d:12:84:f4:41:73:be:2b:95:
                    70:12:18:90:53:ef:33:74:74:82:8c:eb:39:96:ed:
                    cb:34:ce:05:22:7a:00:d4:7e:fa:8e:a7:08:5b:5b:
                    af:87:41:4c:8b:a7:15:f9:b4:69:52:ba:8b:56:6d:
                    e3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:FE:8D:60:09:39:A0:4F:79:D0:88:77:DF:FD:9C:E1:1F:77:25
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235342e302f32342d3234203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:53:c0:d6:4b:35:0e:e4:9e:ae:47:f1:04:5a:ee:0c:f5:
         ab:1a:85:51:ca:84:1e:ed:0e:9b:88:f0:d6:ae:bd:48:12:bc:
         ca:63:6e:25:64:04:49:5f:29:ac:d4:00:d8:d7:67:f0:64:40:
         1a:8b:b2:06:c5:4d:4d:1f:78:90:a8:c7:0a:a0:7a:96:9f:e9:
         fb:05:c9:61:fa:16:9e:60:15:84:72:cc:c4:30:47:ca:3a:1d:
         36:8b:a9:d2:f2:a9:61:d3:2e:48:3d:0a:3d:2d:c2:12:85:05:
         1e:26:63:18:54:f8:43:17:7a:88:17:63:2b:f3:e9:27:f2:f2:
         a2:e7:e6:b0:39:5e:b1:7c:e5:6e:cf:e0:5a:c6:69:38:a8:e0:
         ce:6b:c6:5b:98:ec:9d:e7:7f:df:91:04:5f:f7:5a:9b:2e:b6:
         ca:8a:23:dc:e0:7e:ef:07:e1:db:b1:13:5e:63:74:39:3e:bf:
         3f:cb:b9:f9:b3:d6:ca:81:38:0a:8a:b4:b9:5f:6f:d7:d7:da:
         27:ab:1c:4a:ae:9b:66:58:ed:e7:1f:be:5d:3c:a3:fe:38:a1:
         88:aa:96:3c:48:20:53:75:47:a7:e4:1a:21:76:09:fc:c7:24:
         94:a7:3d:c5:22:17:c7:1e:d1:10:e4:d8:e4:d1:a3:ec:17:bc:
         2a:4b:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:20:06 2026 by rpki-client