Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e38312e3132382e302f32302d3234203d3e203232393237.roa
File:                     3230302e38312e3132382e302f32302d3234203d3e203232393237.roa (raw, json)
Hash identifier:          YVcqRSll5aiTP5aIOvpNOszeMWzP6cGIUuJzwXV8Y8M=
Subject key identifier:   5A:6C:B3:7B:8F:FC:EC:F0:AB:47:0D:0A:F3:DA:2E:2C:16:F8:B1:75
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       5B5276F4D579C92D538FC428CCC09264EDEED01E
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e38312e3132382e302f32302d3234203d3e203232393237.roa
Signing time:             Mon 01 Jun 2026 13:44:49 +0000
ROA not before:           Mon 01 Jun 2026 13:39:49 +0000
ROA not after:            Mon 31 May 2027 13:44:49 +0000
asID:                     22927
IP address blocks:        200.81.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 11:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:52:76:f4:d5:79:c9:2d:53:8f:c4:28:cc:c0:92:64:ed:ee:d0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jun  1 13:39:49 2026 GMT
            Not After : May 31 13:44:49 2027 GMT
        Subject: CN=5A6CB37B8FFCECF0AB470D0AF3DA2E2C16F8B175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b4:b0:ce:b0:f3:b7:d0:42:dc:13:58:c0:8f:
                    2a:b6:b2:dc:69:fb:2d:18:63:e8:47:c1:6d:58:5c:
                    23:34:59:94:8b:f2:1c:d6:32:ca:f8:5d:c9:bc:c8:
                    69:3e:df:93:35:10:19:7d:92:b5:6b:d4:60:44:99:
                    20:ef:ba:84:4d:78:36:92:5a:08:71:fb:6a:5f:10:
                    c0:99:02:9e:8a:71:53:0e:f8:5b:2b:f7:48:28:39:
                    85:66:22:71:7c:f9:ba:b9:ce:99:3b:21:0a:54:d0:
                    c8:67:14:2a:71:2f:4d:bb:26:96:fb:21:2b:80:04:
                    c4:ec:49:18:1b:ad:28:ec:44:a1:f0:ad:6b:87:32:
                    08:57:2e:4f:e7:a3:86:c2:e0:4a:7d:83:21:aa:c9:
                    52:bc:b1:a4:96:15:a6:e7:d6:df:02:d1:65:fd:75:
                    d6:51:c4:58:c3:52:94:32:35:d8:11:c8:c6:ca:95:
                    4e:4c:31:2c:dd:97:33:b2:48:1a:e8:7a:c0:1b:f5:
                    c2:af:99:bd:b2:eb:4a:dd:aa:eb:62:fd:cf:d8:27:
                    d6:2a:54:d6:75:20:36:49:d0:08:0d:01:9e:7f:e1:
                    de:b1:a6:1d:99:9d:7c:9f:72:b4:40:9c:01:f8:23:
                    c9:fe:a9:91:10:a7:4c:ca:dc:28:33:6a:8c:12:5d:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6C:B3:7B:8F:FC:EC:F0:AB:47:0D:0A:F3:DA:2E:2C:16:F8:B1:75
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e38312e3132382e302f32302d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:fd:f8:07:cc:05:bb:c8:3f:96:8e:36:f1:4d:4f:6c:ca:
         6d:b1:e0:b2:d3:51:da:13:c0:a8:93:75:58:38:ae:e1:c7:dc:
         2b:51:f7:60:dc:f3:f0:0d:5e:71:f4:13:82:3a:be:50:e3:5e:
         fc:f3:f8:27:7e:fd:db:b1:47:11:2d:29:24:ec:39:b2:ef:f4:
         79:ae:60:b9:ca:db:53:a0:ea:04:f3:bc:e4:18:49:a6:6c:e5:
         48:fe:ff:a5:79:af:1a:50:90:f6:b3:04:46:04:40:23:5c:61:
         d2:e8:18:6e:cf:d2:ae:7b:cf:1d:34:46:ac:4f:a2:40:e3:7f:
         71:f2:7e:e5:a0:33:8a:06:14:7c:23:3f:21:82:27:cc:0a:fa:
         b4:9e:9b:4c:5a:02:38:92:27:d5:82:74:05:94:23:db:52:b8:
         f7:b0:ac:69:3a:9c:1e:7a:b0:e4:6b:b2:5d:d0:82:f4:6c:e9:
         43:d7:39:d0:c9:1d:55:3f:af:a3:02:40:17:12:c7:d2:d2:74:
         f0:fb:5d:94:f7:08:f3:da:21:c1:4f:b4:d0:36:0f:33:3f:4a:
         be:e5:10:c9:17:7c:05:8e:61:d1:d2:c4:38:ec:2f:11:1f:86:
         66:4d:4c:47:dc:b1:c8:c4:1c:bc:58:44:ef:0d:f0:90:f6:39:
         c8:4e:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:33:44 2026 by rpki-client