Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3230302e31322e3230302e302f32312d3231203d3e203237363931.roa
File:                     3230302e31322e3230302e302f32312d3231203d3e203237363931.roa (raw, json)
Hash identifier:          54V4UiimPgUQu3t6jWGWKUeOkbcQw629mkBgoWTvHpQ=
Subject key identifier:   C1:D2:08:04:C9:70:DC:D9:5D:B7:9F:A8:98:B4:BC:AA:1C:94:52:68
Certificate issuer:       /CN=53B392C71D73A953C0321875651DEFD6AC96AE92
Certificate serial:       42259A0BD3178806BC24A3BF610F8EABA91E6B5E
Authority key identifier: 53:B3:92:C7:1D:73:A9:53:C0:32:18:75:65:1D:EF:D6:AC:96:AE:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3230302e31322e3230302e302f32312d3231203d3e203237363931.roa
Signing time:             Thu 08 Oct 2026 17:39:21 +0000
ROA not before:           Thu 08 Oct 2026 17:34:21 +0000
ROA not after:            Thu 07 Oct 2027 17:39:21 +0000
asID:                     27691
IP address blocks:        200.12.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/53B392C71D73A953C0321875651DEFD6AC96AE92.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/53B392C71D73A953C0321875651DEFD6AC96AE92.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 06:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:25:9a:0b:d3:17:88:06:bc:24:a3:bf:61:0f:8e:ab:a9:1e:6b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B392C71D73A953C0321875651DEFD6AC96AE92
        Validity
            Not Before: Oct  8 17:34:21 2026 GMT
            Not After : Oct  7 17:39:21 2027 GMT
        Subject: CN=C1D20804C970DCD95DB79FA898B4BCAA1C945268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:98:23:b6:d3:8b:75:b7:da:1f:fb:67:5c:
                    bd:86:89:b1:e3:03:f2:c0:0d:5d:18:c6:22:f2:6e:
                    2f:2b:c3:a1:52:06:2b:fe:ce:96:21:9d:30:3d:2e:
                    fd:51:8a:8f:37:1a:f4:10:c9:2d:43:ac:4f:57:91:
                    fb:07:a0:51:3a:9a:f6:9f:86:9d:81:1e:62:95:81:
                    a9:5d:8d:9a:fa:24:e2:c0:e5:9a:a1:75:db:3c:d5:
                    5e:6f:cc:74:8b:88:64:44:f0:55:39:64:78:ba:d7:
                    c4:66:79:3f:95:84:68:fa:f1:77:f2:e3:72:52:51:
                    73:90:67:1c:48:bb:46:14:cb:49:61:c7:53:72:8a:
                    0d:bc:f3:75:c8:5c:5b:ee:49:cd:47:18:b8:70:e7:
                    04:cd:54:ee:5d:81:b1:dc:be:7e:8d:72:01:8a:b6:
                    53:4d:68:c0:46:9b:7b:72:10:13:a4:85:ed:35:3b:
                    00:12:c2:00:8a:77:0a:86:4f:ec:66:db:ec:ce:43:
                    0e:d2:68:7c:f1:16:76:36:2f:d9:c7:3f:ad:23:c4:
                    35:84:b0:e6:20:29:b3:66:f2:52:10:07:e0:f4:9d:
                    ad:2b:20:e6:98:2f:44:46:e7:5e:03:9e:04:48:f1:
                    2e:a7:37:21:cf:1f:06:d3:5a:a5:d2:5c:87:8c:a3:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D2:08:04:C9:70:DC:D9:5D:B7:9F:A8:98:B4:BC:AA:1C:94:52:68
            X509v3 Authority Key Identifier:
                keyid:53:B3:92:C7:1D:73:A9:53:C0:32:18:75:65:1D:EF:D6:AC:96:AE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/53B392C71D73A953C0321875651DEFD6AC96AE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3230302e31322e3230302e302f32312d3231203d3e203237363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:d9:0b:60:a1:bc:13:58:f9:3b:c6:35:f4:f5:4e:3d:dd:58:
         94:5f:02:b9:5a:10:1a:cf:cb:fb:d4:b8:61:bc:a9:c1:24:53:
         ad:22:9b:48:65:1f:2c:84:b0:5e:c0:ee:a3:66:46:0a:b6:db:
         f4:33:3f:c8:57:de:1a:96:19:6b:f6:75:c2:e3:af:92:e8:da:
         a1:10:d2:8f:ae:f5:52:99:a9:c7:1d:5a:68:5c:3c:cd:f6:78:
         22:a1:be:99:57:6d:61:76:63:50:1a:2a:3f:3b:2f:f1:df:56:
         02:1d:fa:9d:d5:e5:22:e1:f0:96:f7:3a:58:79:4e:e2:62:da:
         2b:9d:c0:c0:11:5b:3e:09:10:ba:00:ac:0e:36:08:5f:d1:54:
         7a:39:9a:c3:1b:8f:fe:dc:5e:d1:26:bf:b0:9f:98:97:9e:ca:
         76:0c:02:5f:44:3f:6f:77:29:ea:7f:81:3e:0e:27:1b:4c:dd:
         38:56:88:49:2e:97:15:8f:fa:52:37:e5:15:0d:e2:ae:66:43:
         cc:18:28:0d:a8:bb:a4:77:31:e9:2a:6a:17:a4:af:7e:2e:35:
         43:e1:b8:ae:da:15:18:23:63:7b:8c:7e:40:fe:56:23:6b:8e:
         9f:b5:7d:50:5f:de:76:90:ee:49:89:8c:66:1f:c8:32:5f:ad:
         d9:cb:5a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:43:36 2026 by rpki-client