Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35362e302f32332d3234203d3e20323633313939.roa
File:                     3230302e38312e35362e302f32332d3234203d3e20323633313939.roa (raw, json)
Hash identifier:          FI/E1+1K9lw87s/H1Nb1Chn3I1+Cyhr6sDa2VBYbnlc=
Subject key identifier:   40:4F:10:53:05:EA:1D:45:60:39:9B:2A:D1:D4:5F:1C:65:B5:26:72
Certificate issuer:       /CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
Certificate serial:       01FE76A544D5B8A3D05E163F6D3749500032678D
Authority key identifier: 80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35362e302f32332d3234203d3e20323633313939.roa
Signing time:             Fri 15 May 2026 07:42:39 +0000
ROA not before:           Fri 15 May 2026 07:37:39 +0000
ROA not after:            Fri 14 May 2027 07:42:39 +0000
asID:                     263199
IP address blocks:        200.81.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fe:76:a5:44:d5:b8:a3:d0:5e:16:3f:6d:37:49:50:00:32:67:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A53E67144E880301B97ABC088CC16DBB2D67EA
        Validity
            Not Before: May 15 07:37:39 2026 GMT
            Not After : May 14 07:42:39 2027 GMT
        Subject: CN=404F105305EA1D4560399B2AD1D45F1C65B52672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:86:c7:cb:65:b7:a9:3a:b7:f2:68:5c:5d:
                    5a:ab:26:51:87:29:9f:26:bb:a8:a7:7f:88:d3:ba:
                    ec:32:29:d1:45:ce:82:57:89:c0:78:d1:81:9b:d3:
                    ad:0c:a9:87:94:59:24:33:45:a7:74:c2:6f:10:91:
                    9e:8f:44:0d:03:fd:a1:06:7f:f8:5f:67:0d:93:ee:
                    f9:ef:37:58:ff:66:31:90:01:52:e1:16:85:9a:c1:
                    bf:a5:0c:fd:98:6c:d7:6d:cb:e9:04:3b:dc:df:c7:
                    bc:09:c7:74:aa:45:59:b7:2f:14:87:de:85:20:d7:
                    24:ed:00:c7:63:0e:21:75:f5:f5:35:d2:6e:c2:3a:
                    c9:fc:d0:65:51:0d:38:13:1c:17:6c:62:14:98:6d:
                    09:29:97:a4:39:0e:79:24:b7:74:04:6e:01:1a:3c:
                    99:14:90:0f:49:1d:e7:bf:3c:cd:25:55:a4:03:4a:
                    1a:b3:85:cb:96:bd:ad:af:a8:f1:75:92:4f:56:a8:
                    d8:64:00:cb:f5:40:30:92:e0:b2:dd:41:ee:0b:d5:
                    6b:e8:61:39:fd:c2:ee:4b:8c:c4:a6:97:0b:10:bc:
                    d3:e1:4b:38:6e:e6:4b:69:cc:3d:c5:97:e1:84:56:
                    3d:fa:17:2d:24:4d:31:ea:4c:66:ef:87:1a:45:bc:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4F:10:53:05:EA:1D:45:60:39:9B:2A:D1:D4:5F:1C:65:B5:26:72
            X509v3 Authority Key Identifier:
                keyid:80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/3230302e38312e35362e302f32332d3234203d3e20323633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:89:b9:e1:fe:a9:bb:d8:73:78:54:f2:c5:85:2b:be:32:e4:
         fd:7b:a2:d6:22:19:06:eb:9c:b6:c8:bb:86:03:72:d7:22:0c:
         68:83:7a:d0:b9:1d:df:4f:87:9e:f7:14:2e:a0:3a:a0:10:ba:
         29:61:65:82:08:cb:5c:32:10:2a:75:d1:b8:d4:de:f3:2b:02:
         9d:2d:47:f5:3f:76:bb:ba:f6:a8:67:63:38:f0:f1:76:da:13:
         9a:d6:62:bf:62:b1:05:d0:da:e3:69:d3:85:70:44:df:d4:ad:
         e0:af:1a:ff:f6:3c:d9:6f:6d:3e:0a:63:4b:3e:b6:9d:04:47:
         09:ce:e9:c6:c7:a1:e5:24:da:38:83:26:ab:ac:24:a7:30:e3:
         25:07:b9:be:cb:31:7c:cf:52:e8:0b:45:33:6a:ca:bd:35:76:
         98:c1:4f:8f:3b:4a:c3:e0:8f:9a:a6:a1:24:d4:e1:ab:86:02:
         5b:63:b1:81:99:6f:26:c9:3f:5d:7f:d1:fb:d6:0c:b7:4f:4f:
         c3:46:48:ab:b4:1d:3b:62:5a:f3:a9:99:e8:c2:4e:66:68:7d:
         8a:c4:55:2f:9d:99:03:37:28:ad:85:92:03:bb:e8:2a:b2:ab:
         61:45:a0:2f:5f:88:76:e8:ef:8f:d4:17:b8:c6:e8:a0:b5:bb:
         32:4c:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:59:56 2026 by rpki-client