Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa
File:                     3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa (raw, json)
Hash identifier:          b0YAaScv5fcisUrBcb579zgag15WT+TTXxx7hMhEMKs=
Subject key identifier:   C0:20:7F:69:C5:A8:9B:FA:9C:17:F3:A8:FA:3B:16:B3:59:4A:CB:74
Certificate issuer:       /CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
Certificate serial:       37430C00BA8C0AD94E5AD8343F5F7075EA9B4AC4
Authority key identifier: AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa
Signing time:             Fri 12 Jun 2026 21:47:33 +0000
ROA not before:           Fri 12 Jun 2026 21:42:33 +0000
ROA not after:            Fri 11 Jun 2027 21:47:33 +0000
asID:                     274158
IP address blocks:        200.33.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 15:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:43:0c:00:ba:8c:0a:d9:4e:5a:d8:34:3f:5f:70:75:ea:9b:4a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFC3EBFC444E6025C839618C3C81CC8996599A2
        Validity
            Not Before: Jun 12 21:42:33 2026 GMT
            Not After : Jun 11 21:47:33 2027 GMT
        Subject: CN=C0207F69C5A89BFA9C17F3A8FA3B16B3594ACB74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:54:5b:16:6d:ba:10:85:76:96:c7:bd:89:
                    ea:c0:82:71:ab:cf:81:43:9c:2d:03:1d:fb:74:56:
                    fb:ca:f9:94:14:8c:34:57:80:d5:ca:dc:b9:b5:2e:
                    4c:a9:ef:94:c3:da:57:4f:2d:df:cf:1e:64:69:65:
                    af:16:92:63:f6:35:08:5e:09:00:a9:c9:f2:2a:ba:
                    c9:4b:9b:f8:27:7d:7a:21:66:c8:fc:92:bd:25:a1:
                    8b:1a:69:17:fc:7d:45:11:ae:28:6b:bf:8a:fe:f3:
                    58:cc:af:e4:8e:27:5d:bc:9f:a2:d1:44:99:d5:db:
                    b8:09:e6:58:52:da:e3:2a:08:26:2d:d3:82:ff:3b:
                    90:b6:c9:8d:ba:9d:3f:d2:58:d6:05:45:be:34:88:
                    b7:46:21:79:e9:13:c1:3d:43:74:15:33:56:04:7b:
                    c9:bc:18:ed:49:81:8f:ed:4c:66:03:f3:52:85:01:
                    74:6c:32:87:c8:1d:ab:9d:04:2d:aa:55:d8:05:74:
                    63:6e:9c:8f:61:77:11:91:6b:41:57:50:07:c7:2d:
                    f8:0e:30:5b:5b:5d:1a:5e:b8:31:e3:76:d1:ea:69:
                    9a:29:50:f9:33:2a:c3:69:fd:7e:c2:76:01:8e:8a:
                    e2:b1:78:d6:6d:eb:2b:16:f6:72:37:7d:11:8e:e6:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:20:7F:69:C5:A8:9B:FA:9C:17:F3:A8:FA:3B:16:B3:59:4A:CB:74
            X509v3 Authority Key Identifier:
                keyid:AF:FC:3E:BF:C4:44:E6:02:5C:83:96:18:C3:C8:1C:C8:99:65:99:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFFC3EBFC444E6025C839618C3C81CC8996599A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFD627C37ADC22DE8C4D189E2D98D4CC80C4EECF1C2920D0F4409019E54F8C4A/0/3230302e33332e3130382e302f32342d3234203d3e20323734313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:50:04:10:31:0b:32:9d:c4:ce:0d:25:fe:1a:69:99:c4:12:
         95:bf:69:65:ee:43:d0:6d:aa:7f:6c:51:54:1a:a8:d0:c5:c2:
         3f:70:59:69:f2:c0:3c:1a:70:fd:9d:d7:c1:76:af:eb:8b:a0:
         e1:dd:11:93:e5:de:81:66:b4:94:7a:3b:00:ae:e0:b2:7f:a8:
         7e:52:22:b6:59:c7:91:7f:a1:c5:0b:ed:aa:7f:c4:9a:8a:ee:
         e3:4d:04:a1:55:d9:2c:51:50:52:93:de:69:3b:97:57:d3:18:
         02:41:ba:48:ee:c1:63:a1:f7:6b:b4:95:e7:67:5d:85:c0:ec:
         cb:a4:6f:87:ef:f4:e3:41:7a:b2:75:f8:b1:aa:8e:7e:cc:b7:
         6e:37:21:ac:b8:fa:10:e2:3b:72:96:e2:19:f1:89:cb:8b:a0:
         72:82:c5:1e:71:ba:8b:78:9f:c5:fc:fc:4b:c4:35:04:33:d6:
         c0:b2:15:ad:60:0b:11:ed:ca:5d:96:67:3f:62:f1:61:44:ab:
         db:7e:e2:12:46:99:a6:81:19:be:30:fe:f5:8e:c0:72:91:ed:
         ab:c4:82:f6:f9:b0:79:70:55:dc:cd:3d:b1:5b:49:c4:9f:56:
         00:71:fd:b3:51:d1:7e:60:a8:7e:93:16:05:c4:69:d9:1d:e6:
         19:de:0e:83
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUN0MMALqMCtlOWtg0P19wdeqbSsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZGQzNFQkZDNDQ0RTYwMjVDODM5NjE4QzNDODFDQzg5
OTY1OTlBMjAeFw0yNjA2MTIyMTQyMzNaFw0yNzA2MTEyMTQ3MzNaMDMxMTAvBgNV
BAMTKEMwMjA3RjY5QzVBODlCRkE5QzE3RjNBOEZBM0IxNkIzNTk0QUNCNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVJlRbFm26EIV2lse9ierAgnGr
z4FDnC0DHft0VvvK+ZQUjDRXgNXK3Lm1Lkyp75TD2ldPLd/PHmRpZa8WkmP2NQhe
CQCpyfIquslLm/gnfXohZsj8kr0loYsaaRf8fUURrihrv4r+81jMr+SOJ128n6LR
RJnV27gJ5lhS2uMqCCYt04L/O5C2yY26nT/SWNYFRb40iLdGIXnpE8E9Q3QVM1YE
e8m8GO1JgY/tTGYD81KFAXRsMofIHaudBC2qVdgFdGNunI9hdxGRa0FXUAfHLfgO
MFtbXRpeuDHjdtHqaZopUPkzKsNp/X7CdgGOiuKxeNZt6ysW9nI3fRGO5m0VAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwCB/acWom/qcF/Oo+jsWs1lKy3QwHwYDVR0j
BBgwFoAUr/w+v8RE5gJcg5YYw8gcyJllmaIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRkQ2MjdDMzdBREMyMkRFOEM0RDE4OUUyRDk4RDRDQzgw
QzRFRUNGMUMyOTIwRDBGNDQwOTAxOUU1NEY4QzRBLzAvQUZGQzNFQkZDNDQ0RTYw
MjVDODM5NjE4QzNDODFDQzg5OTY1OTlBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRkZDM0VCRkM0NDRFNjAyNUM4
Mzk2MThDM0M4MUNDODk5NjU5OUEyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUZENjI3QzM3QURDMjJERThDNEQxODlFMkQ5OEQ0Q0M4MEM0RUVDRjFD
MjkyMEQwRjQ0MDkwMTlFNTRGOEM0QS8wLzMyMzAzMDJlMzMzMzJlMzEzMDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM0MzEzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyCFs
MA0GCSqGSIb3DQEBCwUAA4IBAQCaUAQQMQsyncTODSX+GmmZxBKVv2ll7kPQbap/
bFFUGqjQxcI/cFlp8sA8GnD9ndfBdq/ri6Dh3RGT5d6BZrSUejsAruCyf6h+UiK2
WceRf6HFC+2qf8Saiu7jTQShVdksUVBSk95pO5dX0xgCQbpI7sFjofdrtJXnZ12F
wOzLpG+H7/TjQXqydfixqo5+zLduNyGsuPoQ4jtyluIZ8YnLi6BygsUecbqLeJ/F
/PxLxDUEM9bAshWtYAsR7cpdlmc/YvFhRKvbfuISRpmmgRm+MP71jsByke2rxIL2
+bB5cFXczT2xW0nEn1YAcf2zUdF+YKh+kxYFxGnZHeYZ3g6D
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:42:56 2026 by rpki-client