Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e3230302e302f32312d3232203d3e203237393235.roa
File:                     3230302e3131312e3230302e302f32312d3232203d3e203237393235.roa (raw, json)
Hash identifier:          x3UxalQZTrwnwYQo1sQtBegS0L7ff7jMw59TA7IIZZQ=
Subject key identifier:   B9:32:39:7A:2C:C0:FB:6D:CD:43:45:10:E1:91:48:C7:39:F7:73:6F
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       508866102E4FBDE1045FC2391340785C17CB8E10
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e3230302e302f32312d3232203d3e203237393235.roa
Signing time:             Fri 12 Jun 2026 19:47:31 +0000
ROA not before:           Fri 12 Jun 2026 19:42:31 +0000
ROA not after:            Fri 11 Jun 2027 19:47:31 +0000
asID:                     27925
IP address blocks:        200.111.200.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 06:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:88:66:10:2e:4f:bd:e1:04:5f:c2:39:13:40:78:5c:17:cb:8e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Jun 12 19:42:31 2026 GMT
            Not After : Jun 11 19:47:31 2027 GMT
        Subject: CN=B932397A2CC0FB6DCD434510E19148C739F7736F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8a:99:e1:48:1a:b1:73:6f:d4:41:53:a8:c3:
                    d3:2d:7a:44:a2:5e:3c:51:94:b9:37:47:bd:a4:11:
                    36:bf:b3:85:75:d2:88:63:04:fc:b7:ad:f8:53:a0:
                    3a:b2:12:87:da:6f:cd:60:4f:ae:3e:09:f2:3c:e7:
                    6b:0b:70:51:0f:be:26:23:7a:02:1b:a4:c4:99:f9:
                    06:e1:2c:11:8d:98:99:d6:0b:ab:3f:33:fe:ec:08:
                    b7:f5:a2:37:9b:25:6f:83:fa:37:9f:19:3a:65:b7:
                    1b:18:7e:50:e5:63:a0:4e:1c:69:b7:57:cd:24:79:
                    1b:32:55:09:95:ff:b0:e6:79:b3:cf:1c:77:76:03:
                    49:87:5f:c7:db:cb:2c:79:54:da:67:67:77:29:6a:
                    b7:93:b5:b9:e6:06:19:59:ff:c0:be:cf:95:3a:ac:
                    a7:c6:ae:38:17:67:e3:be:aa:ea:a7:21:8f:fd:53:
                    3a:93:4d:5d:5d:81:66:d5:eb:e5:19:5b:2c:ae:1c:
                    35:12:ac:4d:3c:1c:24:d2:e5:eb:8c:8c:42:33:33:
                    85:b4:15:d3:b1:97:52:1f:0b:ea:25:cb:06:ea:d0:
                    e7:a7:7c:2c:b3:6d:56:75:a4:42:1c:b4:94:41:e9:
                    9f:94:2f:5b:f2:63:a5:e2:42:28:80:ff:6a:91:fd:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:32:39:7A:2C:C0:FB:6D:CD:43:45:10:E1:91:48:C7:39:F7:73:6F
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e3230302e302f32312d3232203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.111.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:5e:3a:49:d6:86:80:78:8d:71:9f:e0:d6:87:19:6f:2e:d1:
         04:f3:62:37:d4:27:91:2e:b5:10:c7:b9:d3:67:72:77:cd:a6:
         00:69:55:b1:65:af:e8:fc:c7:c0:a9:ab:84:87:15:cb:5f:ea:
         62:60:a5:9f:d6:8d:1c:97:32:e7:94:b6:1d:74:38:73:3c:f5:
         9b:47:4c:ec:cd:f9:e8:1e:2f:36:bf:ee:62:a2:50:40:34:4b:
         b7:21:6b:87:53:31:1a:db:72:4e:0e:da:d8:2d:81:77:e0:87:
         79:92:01:cb:37:da:14:4d:98:a3:eb:b4:22:30:25:47:75:f1:
         8a:32:b1:f8:ed:16:36:8e:7d:60:8c:ea:a1:ca:96:66:2c:c3:
         cc:9a:61:3c:19:51:da:ec:0b:60:fa:66:01:4e:49:1e:4c:97:
         eb:6e:11:d7:c0:34:35:9f:71:7b:20:41:6d:99:27:da:c3:3f:
         3f:77:81:dc:a9:59:7c:8b:c4:7c:4d:2f:b2:2e:5e:c6:3a:b1:
         46:75:6c:48:34:7b:31:89:1c:be:be:12:d3:0a:2c:d1:4f:db:
         cd:f6:89:7f:7d:41:31:c2:7d:27:37:e6:65:ff:2d:fd:9e:fc:
         f1:76:92:58:ac:5a:4c:87:94:bf:9f:5e:02:f6:d4:f0:5e:a1:
         3f:da:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:43:33 2026 by rpki-client