Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e39342e302f32342d3234203d3e203237393235.roa
File:                     3230302e31312e39342e302f32342d3234203d3e203237393235.roa (raw, json)
Hash identifier:          lS94U8Nq333YwOb7qaO7VuPCT44OyJB0AlF74uCuwVI=
Subject key identifier:   E0:2B:D2:9C:9D:3C:52:33:FD:4E:B2:E1:32:7B:14:03:B9:00:2F:59
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       6166F6495E28A4776CA9989AC056DD07D8332665
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e39342e302f32342d3234203d3e203237393235.roa
Signing time:             Fri 12 Jun 2026 16:47:29 +0000
ROA not before:           Fri 12 Jun 2026 16:42:29 +0000
ROA not after:            Fri 11 Jun 2027 16:47:29 +0000
asID:                     27925
IP address blocks:        200.11.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 06:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:66:f6:49:5e:28:a4:77:6c:a9:98:9a:c0:56:dd:07:d8:33:26:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Jun 12 16:42:29 2026 GMT
            Not After : Jun 11 16:47:29 2027 GMT
        Subject: CN=E02BD29C9D3C5233FD4EB2E1327B1403B9002F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:17:bc:29:51:9d:91:e1:9c:d8:90:f9:b4:
                    d1:f4:ef:4e:05:6f:07:d1:dc:6a:e9:82:67:73:f6:
                    50:c3:de:1d:d7:e5:36:d1:67:93:9b:17:55:b4:7f:
                    4a:22:fd:b5:47:37:75:19:b9:97:88:26:d0:88:64:
                    31:5f:bb:c0:03:de:db:af:e7:af:4e:bd:42:ca:a7:
                    69:c3:4e:b4:47:fb:57:0d:2c:f3:da:3e:58:a3:33:
                    09:c4:68:00:c8:8d:1a:c0:6c:d8:07:4c:fc:ae:63:
                    a5:21:b8:aa:f7:bb:55:52:fc:2d:46:39:5d:a8:a4:
                    09:85:fa:c1:07:86:d3:90:1d:de:f7:41:85:e9:e6:
                    4d:19:85:aa:94:94:78:80:31:fa:13:de:d7:dc:55:
                    a7:f7:c3:da:fc:af:2f:5f:f3:c2:11:53:81:3d:5f:
                    ee:cd:fb:2b:72:f2:8f:06:b3:a1:e2:3c:23:cf:22:
                    eb:7b:b8:08:7f:28:98:84:e7:ec:85:66:76:59:e0:
                    30:84:25:f4:86:a6:46:bf:bd:a0:12:75:b3:38:ec:
                    2a:39:b3:7f:9b:09:7d:90:99:06:c2:47:ff:d2:7f:
                    51:40:b3:4a:76:dd:69:4c:57:ba:53:16:47:32:36:
                    58:53:49:11:32:cc:c2:48:59:b1:6b:e6:d8:fe:f4:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2B:D2:9C:9D:3C:52:33:FD:4E:B2:E1:32:7B:14:03:B9:00:2F:59
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e31312e39342e302f32342d3234203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d0:22:7a:eb:72:d9:49:7b:5e:fb:fe:7f:03:1d:ac:09:9e:
         91:9d:25:43:52:f1:6b:5f:92:f6:f7:91:b1:6b:33:61:c6:a1:
         89:b9:e7:ff:d2:a1:e4:9c:0e:e1:5a:f9:a4:8d:3f:cf:e7:fd:
         ee:d8:1d:58:6d:38:f0:af:7e:e8:2b:6d:fd:e6:25:03:e5:9b:
         2a:d1:32:3d:3f:36:ed:00:72:80:af:83:89:a3:71:4b:a9:e4:
         26:63:ef:1e:25:a2:e3:af:c6:4f:f8:c9:45:b0:22:32:53:fe:
         86:ef:55:62:3f:5e:23:27:8a:cf:90:1d:9f:e5:18:80:be:8a:
         13:f9:dc:da:72:f7:b6:bf:94:b0:ef:03:fa:5a:ec:7b:6a:f5:
         9b:71:84:de:79:d0:74:e5:be:2f:b2:8d:8a:7e:87:85:dc:e6:
         5b:f3:fa:2a:35:01:1c:8a:8b:77:b1:fd:3c:96:e9:83:ad:ac:
         49:a9:4d:d2:5a:12:63:39:2c:d8:5b:8e:19:96:10:d0:af:2d:
         1b:48:6e:87:d0:a4:03:8e:e9:ef:0e:ea:95:e3:ea:97:95:1e:
         0a:6b:48:0d:c1:54:09:4c:94:af:d8:a2:7a:9c:0c:2f:41:c0:
         0a:77:4a:59:08:0b:de:2c:6b:ba:86:34:4f:32:b1:44:7f:a2:
         16:66:44:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:43:38 2026 by rpki-client