Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/3230302e33332e3230302e302f32332d3234203d3e203131353139.roa
File:                     3230302e33332e3230302e302f32332d3234203d3e203131353139.roa (raw, json)
Hash identifier:          qMy3udJsG5+m8vpnuVrFwdPuqYro4AMsjMeSDn/dTfA=
Subject key identifier:   EB:CF:2C:3B:EA:7B:51:92:6F:FD:2D:02:88:A8:7A:37:E2:4B:50:9C
Certificate issuer:       /CN=24B55248027DBB0BEA90E6AE3465153C7D9FCAA9
Certificate serial:       260A0ABEDA66A54E7E493A00648CC3DCE8F449F7
Authority key identifier: 24:B5:52:48:02:7D:BB:0B:EA:90:E6:AE:34:65:15:3C:7D:9F:CA:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/3230302e33332e3230302e302f32332d3234203d3e203131353139.roa
Signing time:             Wed 28 Oct 2026 08:10:00 +0000
ROA not before:           Wed 28 Oct 2026 08:05:00 +0000
ROA not after:            Wed 27 Oct 2027 08:10:00 +0000
asID:                     11519
IP address blocks:        200.33.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Nov 2026 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0a:0a:be:da:66:a5:4e:7e:49:3a:00:64:8c:c3:dc:e8:f4:49:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24B55248027DBB0BEA90E6AE3465153C7D9FCAA9
        Validity
            Not Before: Oct 28 08:05:00 2026 GMT
            Not After : Oct 27 08:10:00 2027 GMT
        Subject: CN=EBCF2C3BEA7B51926FFD2D0288A87A37E24B509C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:82:ea:11:a3:e7:10:51:f7:e8:0e:50:4b:
                    0c:72:41:55:83:a5:4b:31:d5:5c:87:ef:70:25:e3:
                    a6:38:19:1b:8e:2e:3a:5f:d1:e0:b8:d5:93:88:d2:
                    08:b4:29:61:1c:9f:57:7b:d1:c9:bc:fe:dd:fe:b3:
                    6e:fa:47:f8:a4:a2:9e:ad:82:4e:3e:0e:c8:6c:18:
                    a0:96:05:6c:e6:b3:ed:58:19:bc:74:bc:df:f7:3e:
                    93:34:38:8d:09:e4:dd:b0:52:04:36:ec:57:b9:9e:
                    5a:54:4c:af:d0:62:30:84:87:fe:5f:bf:ed:41:84:
                    77:93:1d:05:4c:14:56:25:84:4a:79:06:94:51:9d:
                    d1:8f:7d:a2:43:f6:be:fd:52:a5:e8:d2:a8:40:a8:
                    8b:ab:f2:4b:30:bb:a7:3f:d9:ce:a8:dc:74:2a:29:
                    3d:0c:68:08:6b:26:26:99:6f:bd:e2:ac:8a:fe:75:
                    9f:8b:2c:f8:72:cc:d4:ee:39:79:1e:ec:77:02:aa:
                    5e:fb:6a:50:e9:32:06:e5:91:bb:3d:b1:1c:42:28:
                    ea:a2:1d:5f:d6:7f:a3:2f:84:f9:9d:12:b9:fa:42:
                    86:b6:d7:10:9e:e7:20:b4:28:84:e1:8c:28:fd:ce:
                    ae:0e:f5:9d:a6:bf:b9:59:99:0e:40:6d:79:7e:fd:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CF:2C:3B:EA:7B:51:92:6F:FD:2D:02:88:A8:7A:37:E2:4B:50:9C
            X509v3 Authority Key Identifier:
                keyid:24:B5:52:48:02:7D:BB:0B:EA:90:E6:AE:34:65:15:3C:7D:9F:CA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/3230302e33332e3230302e302f32332d3234203d3e203131353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:19:b2:19:88:7f:07:2e:3c:63:39:1c:7c:22:55:43:b4:e2:
         d7:de:2e:a8:7e:cd:98:23:3b:e5:8e:5e:77:6d:aa:9e:d5:11:
         a6:6a:36:ff:ea:34:e2:f7:14:c5:74:6f:dd:d6:3b:b5:07:63:
         4b:aa:36:f8:6b:b6:de:1a:65:d5:c2:2d:12:2d:7c:06:04:05:
         e7:dc:8b:9d:d8:de:48:b3:d8:28:d7:b9:43:f6:8b:f4:bb:15:
         f0:3d:8c:2a:ad:24:40:02:fb:a1:d0:cf:85:6a:5d:80:ee:0b:
         41:31:a3:30:55:00:84:35:d0:b9:67:35:5f:0b:29:91:14:e3:
         92:a1:fb:f6:5a:1a:61:ad:09:c0:f8:8e:c8:6a:60:3c:15:26:
         a2:d2:a6:1e:2f:f4:7b:3e:06:e3:d2:ed:f1:70:e5:05:6f:c1:
         d2:81:99:77:b8:c4:70:a5:b3:08:1b:ad:28:1a:d9:77:ea:01:
         b5:51:e8:13:2b:34:4e:bf:30:ae:79:24:78:71:8c:bc:90:31:
         09:7f:6f:df:a8:f8:bf:08:c8:3a:8f:fa:1b:2a:b8:0c:6c:c4:
         9f:7c:0b:67:a8:d8:12:87:18:c4:f5:29:f2:21:31:5f:e6:dc:
         0f:54:c5:96:b5:ea:c7:e3:ec:8f:18:73:42:3d:0b:c4:07:43:
         38:44:33:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 09:39:26 2026 by rpki-client