Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/3230302e33392e3135322e302f32322d3232203d3e20323730303130.roa
File:                     3230302e33392e3135322e302f32322d3232203d3e20323730303130.roa (raw, json)
Hash identifier:          JIcKxRRivbaA2zsK6483cKZVIIKSdVvRDxgbo+Wuyo0=
Subject key identifier:   FA:31:04:2D:9F:C9:16:20:5F:D6:04:A7:6A:4D:13:7F:77:8A:F8:ED
Certificate issuer:       /CN=795B9A9A078937864D9116132A81F55AF7A4D72A
Certificate serial:       5A888C309D435E345D5C466B5D6AB3395FEDCD83
Authority key identifier: 79:5B:9A:9A:07:89:37:86:4D:91:16:13:2A:81:F5:5A:F7:A4:D7:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/795B9A9A078937864D9116132A81F55AF7A4D72A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/3230302e33392e3135322e302f32322d3232203d3e20323730303130.roa
Signing time:             Wed 27 May 2026 13:15:00 +0000
ROA not before:           Wed 27 May 2026 13:10:00 +0000
ROA not after:            Wed 26 May 2027 13:15:00 +0000
asID:                     270010
IP address blocks:        200.39.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/795B9A9A078937864D9116132A81F55AF7A4D72A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/795B9A9A078937864D9116132A81F55AF7A4D72A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/795B9A9A078937864D9116132A81F55AF7A4D72A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:88:8c:30:9d:43:5e:34:5d:5c:46:6b:5d:6a:b3:39:5f:ed:cd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795B9A9A078937864D9116132A81F55AF7A4D72A
        Validity
            Not Before: May 27 13:10:00 2026 GMT
            Not After : May 26 13:15:00 2027 GMT
        Subject: CN=FA31042D9FC916205FD604A76A4D137F778AF8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:bd:9c:70:7b:db:f8:6d:ba:69:b2:1a:70:
                    9f:55:52:ed:f0:48:e3:41:15:2b:04:5e:3c:d2:13:
                    f5:92:b8:01:01:81:04:ef:15:6f:9d:60:47:d2:04:
                    0d:f6:c1:8e:99:f2:39:a2:1a:a0:9c:c9:3b:7d:4c:
                    c1:e4:62:cf:f1:36:ea:b4:06:a5:f0:c6:9d:3e:fd:
                    3e:a5:81:87:8e:1c:2f:5e:8d:1d:85:a9:34:34:ba:
                    a1:6c:77:4b:19:24:67:ba:e4:a9:6f:0c:be:aa:fb:
                    2f:1a:45:36:c1:40:53:e1:ab:ec:86:97:f9:b6:73:
                    f7:d9:4e:f1:83:92:24:3e:e8:ec:a7:af:00:19:7c:
                    66:a9:ae:b0:7f:40:9d:30:49:b4:f7:b0:82:8d:24:
                    22:36:80:e9:4c:dd:f8:67:b7:88:d4:98:43:0c:1f:
                    ae:54:76:85:6e:70:80:4a:d3:cf:78:41:0f:24:2b:
                    88:4b:fe:57:66:98:a8:d6:da:71:fe:1b:13:e7:64:
                    44:04:bd:aa:86:d7:5d:32:b0:07:5a:8c:be:83:06:
                    e4:0d:c6:54:f8:0f:b7:57:69:0b:44:f5:05:ec:69:
                    47:90:b6:67:76:2e:81:6a:da:44:88:82:2b:ef:37:
                    48:6d:95:68:77:c7:62:e7:17:9a:7e:b1:b0:2b:ff:
                    7d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:31:04:2D:9F:C9:16:20:5F:D6:04:A7:6A:4D:13:7F:77:8A:F8:ED
            X509v3 Authority Key Identifier:
                keyid:79:5B:9A:9A:07:89:37:86:4D:91:16:13:2A:81:F5:5A:F7:A4:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/795B9A9A078937864D9116132A81F55AF7A4D72A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/795B9A9A078937864D9116132A81F55AF7A4D72A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/991C723F3A8383AA8BCC0DAD8F508E5E0153EFECAF4F4EAB4024DDF5A130025D/0/3230302e33392e3135322e302f32322d3232203d3e20323730303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:b8:c7:a5:f0:fb:cf:18:c1:80:e7:d9:f8:fa:86:84:69:ac:
         78:5a:af:ff:70:5b:70:61:58:82:a3:04:d7:01:b5:22:2d:50:
         5c:5e:fc:a5:90:83:47:d9:98:94:33:1e:e3:4b:e9:ca:49:a0:
         12:6a:ff:af:24:47:72:56:0c:b1:5c:57:29:83:c6:40:64:54:
         75:ac:37:5b:cd:3b:08:00:4c:66:6a:88:76:dd:1b:65:2b:75:
         b1:46:31:77:aa:68:14:d8:0f:b5:d5:a2:41:3f:67:bf:12:b7:
         e8:48:3f:57:54:c5:28:5f:93:25:20:b3:4d:d5:0f:ac:2c:e0:
         51:38:c4:52:01:79:ad:dc:0b:5d:b0:50:55:fa:dd:5a:6f:1c:
         fa:13:49:57:70:48:92:92:5a:31:f0:0e:23:2c:a0:67:df:be:
         88:92:8f:1e:0c:a6:43:5e:65:f0:e6:3c:7d:ba:6c:b7:9d:38:
         62:3d:a3:1b:6b:d9:c9:7b:3d:70:33:70:97:71:ea:ea:63:cb:
         e0:2b:8d:8f:7b:d7:42:82:c1:b1:9e:c4:a8:21:f5:c0:78:b9:
         6b:c1:05:aa:44:de:f5:44:45:d3:aa:04:2d:97:c0:4b:ee:fa:
         43:c8:47:89:00:f2:50:03:27:84:93:1f:63:6d:c7:3c:aa:ba:
         88:ea:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:57:55 2026 by rpki-client