Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e38362e302f32332d3233203d3e203237393235.roa
File:                     3230302e3131312e38362e302f32332d3233203d3e203237393235.roa (raw, json)
Hash identifier:          wdC/IKX9URanxLpRFnqJwCJYJKK83me0QCIAD1gR0sA=
Subject key identifier:   4D:47:91:78:D4:DB:6D:E4:E7:42:4D:62:33:78:73:25:0D:C1:BD:DB
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       45ADDE4CF0E675E5011C7582B30B2B2FC430321E
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e38362e302f32332d3233203d3e203237393235.roa
Signing time:             Fri 12 Jun 2026 19:47:31 +0000
ROA not before:           Fri 12 Jun 2026 19:42:31 +0000
ROA not after:            Fri 11 Jun 2027 19:47:31 +0000
asID:                     27925
IP address blocks:        200.111.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 06:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ad:de:4c:f0:e6:75:e5:01:1c:75:82:b3:0b:2b:2f:c4:30:32:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Jun 12 19:42:31 2026 GMT
            Not After : Jun 11 19:47:31 2027 GMT
        Subject: CN=4D479178D4DB6DE4E7424D62337873250DC1BDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:72:cc:4d:5c:23:bc:28:e4:c3:52:f1:b0:08:
                    0e:5d:39:f4:0f:3e:8a:b7:c4:96:39:a9:68:1d:f4:
                    3e:4b:f6:2d:d5:a8:0c:b6:41:fb:8c:39:5f:d0:33:
                    0d:ae:e7:27:68:aa:78:80:99:69:4b:1b:74:b6:d6:
                    6d:f3:4d:23:36:ec:50:61:53:c3:eb:5f:b3:86:7a:
                    0f:06:46:42:94:30:ce:cc:68:d1:0b:dc:34:19:04:
                    ac:4e:a5:09:18:7d:96:72:9c:37:f3:75:6b:81:d8:
                    35:ee:25:6a:9e:6a:fe:1a:fa:41:25:6d:70:7d:36:
                    67:90:f5:32:32:89:31:4f:7e:70:e0:11:b7:a9:18:
                    d7:7c:aa:ba:45:79:ee:82:4a:90:cf:d9:18:8e:99:
                    10:53:8e:4c:20:64:68:3d:1c:c0:b5:56:b8:b6:61:
                    a8:bc:87:5e:89:f2:84:f1:e3:1e:de:00:97:a4:44:
                    ef:18:4c:ab:a4:97:3d:97:2c:46:97:d2:c1:2f:75:
                    90:e8:3e:7c:68:e1:ed:2b:f6:be:79:91:58:fe:e1:
                    0b:b3:60:9f:71:3f:b7:16:ad:6f:26:0c:21:40:a2:
                    d0:6b:b3:b4:95:dd:f6:f1:f0:d6:36:41:8c:a5:ec:
                    f2:fd:34:7c:94:84:f7:0f:b2:a5:dc:04:75:49:36:
                    eb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:47:91:78:D4:DB:6D:E4:E7:42:4D:62:33:78:73:25:0D:C1:BD:DB
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e38362e302f32332d3233203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.111.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:03:40:64:5a:3e:7b:0e:67:a6:ba:ba:68:f2:3b:90:69:57:
         58:8e:3d:22:a4:fe:b0:dd:dc:a0:a4:16:e8:2d:4f:c0:e6:bc:
         42:4f:32:fc:4c:e6:b4:07:af:50:cf:55:7d:e4:2a:d0:1b:68:
         d3:34:d3:f7:91:06:ab:1d:da:64:cc:0c:56:56:5a:01:5c:24:
         2a:c5:44:ae:a4:24:bb:c2:0e:ff:1a:fe:0a:76:50:13:72:20:
         f8:68:1f:f0:80:f4:16:9e:94:ac:dc:89:f8:25:77:6d:8e:3b:
         cf:ee:f7:74:9b:0d:ee:ab:19:9b:30:c9:78:89:3c:25:9a:bd:
         73:1d:e6:2e:9d:1b:71:a9:da:2e:e6:d8:10:94:5f:4e:59:dd:
         ed:53:54:b3:f1:e3:f1:b4:d9:b2:ab:aa:29:aa:ce:4f:a8:92:
         cd:8a:01:0d:af:fc:e2:54:b4:b1:be:69:ba:cc:bf:bd:13:71:
         75:c9:47:e6:18:86:7a:4f:31:17:2e:68:99:b2:0d:10:77:db:
         5d:73:39:c5:29:c1:f0:41:d4:56:ee:b4:df:64:5b:55:b0:7f:
         44:46:55:ed:54:53:5f:96:76:cc:6d:1e:cd:16:0a:68:34:72:
         c7:33:e3:0e:3b:d5:7d:4d:89:4e:79:be:4d:02:f8:43:29:0a:
         08:5f:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:44:01 2026 by rpki-client