Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133302e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e3133302e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          gDE3bpKluuIrdra7pqrjYxS8v0a4OAdbUhlSgCKlmxk=
Subject key identifier:   A0:20:94:56:40:BE:86:F8:25:42:67:6E:6B:6B:32:9A:CF:35:23:E5
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       7DD04C6DA4D378CCA9D1A83C6DB1FB89C4FEDA7F
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133302e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 29 Jan 2026 16:28:16 +0000
ROA not before:           Thu 29 Jan 2026 16:23:16 +0000
ROA not after:            Thu 28 Jan 2027 16:28:16 +0000
asID:                     13999
IP address blocks:        200.77.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d0:4c:6d:a4:d3:78:cc:a9:d1:a8:3c:6d:b1:fb:89:c4:fe:da:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jan 29 16:23:16 2026 GMT
            Not After : Jan 28 16:28:16 2027 GMT
        Subject: CN=A020945640BE86F82542676E6B6B329ACF3523E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:77:86:6e:ac:e9:7f:0f:49:0a:e4:4e:8c:eb:
                    98:6d:d9:44:9b:e5:b3:64:b0:7a:f0:24:0f:31:8d:
                    dd:49:c7:e0:e9:37:ea:55:8f:b1:b7:1b:9f:55:cb:
                    10:54:2e:53:18:8c:4c:20:1d:18:a0:0b:90:0d:d3:
                    05:70:d4:97:24:62:86:78:2e:5c:0c:e5:98:80:c5:
                    95:09:a5:42:67:47:97:19:4d:91:5c:45:46:b4:e5:
                    eb:a8:1e:0f:53:71:c8:fd:79:8c:be:e9:bc:db:d5:
                    4f:6f:a4:1f:12:f9:88:a5:c6:c2:88:e5:76:e1:72:
                    98:6e:e0:f5:85:33:6e:d5:f3:c9:2f:c0:70:e8:ff:
                    08:8d:58:d4:bf:6f:a7:e3:e3:46:26:36:7d:43:ce:
                    aa:6a:bb:4e:d6:86:2b:a7:67:84:3c:88:f5:db:d7:
                    07:83:d7:72:3c:0d:f5:9f:21:ca:79:6e:6a:44:90:
                    ac:a6:82:c1:dc:c6:c2:f6:f3:54:dd:87:57:04:f7:
                    c1:50:41:97:f8:9b:c7:99:9c:9c:24:aa:99:0d:9a:
                    2e:e2:4c:3b:7b:51:ea:f6:44:9f:fc:f0:d3:6b:13:
                    63:63:2e:f6:6a:34:6f:c9:87:44:96:71:02:2f:a7:
                    8c:f0:27:17:1c:df:44:41:8d:2f:2c:c0:3a:63:af:
                    40:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:20:94:56:40:BE:86:F8:25:42:67:6E:6B:6B:32:9A:CF:35:23:E5
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133302e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:27:b2:1b:b4:fa:ae:85:69:37:d2:b0:20:ff:d9:f1:c5:
         b2:ec:4a:40:4d:62:5a:d3:52:c2:3e:b5:e9:2e:ad:29:96:69:
         5f:5a:77:0d:3f:7c:35:2e:1a:07:80:8d:ae:1d:9e:06:91:b9:
         92:06:29:3a:5b:72:3e:08:ab:70:83:3e:78:ac:d2:7b:8a:62:
         07:ff:b8:5d:39:65:d7:2d:1f:9d:da:ce:a8:53:49:43:39:78:
         4d:f3:4d:19:ae:ed:23:0c:73:58:38:25:02:55:98:18:df:32:
         4d:f4:9a:11:ae:16:cc:48:60:9e:d0:52:50:ac:e4:49:ba:5e:
         20:e9:94:0c:3c:5d:77:0b:8c:83:de:74:fa:b5:f9:54:7f:70:
         d9:ea:81:47:96:69:7e:8f:da:fb:3f:f2:1c:ac:18:d9:5f:a7:
         4c:bb:10:c0:69:26:cc:8d:64:f3:0e:65:2d:36:d6:41:9e:f0:
         21:6d:35:03:98:63:8a:cd:89:d0:ad:ef:a9:a5:78:22:0d:b5:
         02:23:e4:4a:16:0d:4d:42:65:07:36:ff:33:78:18:62:a6:55:
         95:af:3e:88:51:74:62:74:e2:94:57:2d:61:4d:a3:5e:53:4d:
         e1:0a:7e:a6:be:d1:28:8c:0a:65:e8:96:c1:42:75:24:10:95:
         6c:f1:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:56:22 2026 by rpki-client