Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133302e302f32342d3234203d3e2038303438.roa
File:                     3230302e33352e3133302e302f32342d3234203d3e2038303438.roa (raw, json)
Hash identifier:          pgsRBeUwOqc5UYPGLOj+m8XK5qtX6tIY0utMNyiqsY4=
Subject key identifier:   AC:BB:D1:3F:2E:CC:99:27:B9:18:29:87:6C:70:71:1E:04:32:B7:82
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       255E13604DB283B4AFDD8CB28D8CF238EB888A0F
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133302e302f32342d3234203d3e2038303438.roa
Signing time:             Thu 26 Feb 2026 16:32:02 +0000
ROA not before:           Thu 26 Feb 2026 16:27:02 +0000
ROA not after:            Thu 25 Feb 2027 16:32:02 +0000
asID:                     8048
IP address blocks:        200.35.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5e:13:60:4d:b2:83:b4:af:dd:8c:b2:8d:8c:f2:38:eb:88:8a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Feb 26 16:27:02 2026 GMT
            Not After : Feb 25 16:32:02 2027 GMT
        Subject: CN=ACBBD13F2ECC9927B91829876C70711E0432B782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:9b:1e:3d:26:2a:94:74:11:e9:7d:5b:8b:
                    bd:aa:c6:d5:6c:ba:e1:80:62:4d:72:da:6a:18:c4:
                    46:80:d1:4f:63:46:e8:db:b6:ec:7d:b3:b3:a9:af:
                    4e:88:81:d0:99:a4:00:4c:5c:9b:cc:47:fe:a5:37:
                    93:88:97:c5:31:08:c8:74:3f:4e:e3:aa:cc:7b:40:
                    55:b9:6c:0f:e5:2a:03:dc:7d:34:29:86:34:b8:ca:
                    4e:62:1c:5f:81:00:b8:33:ad:16:78:5c:41:93:6f:
                    6c:3d:e9:6e:72:55:5b:08:d5:fa:0a:53:50:ed:8b:
                    50:e6:b3:1e:1f:61:68:65:14:dc:49:f8:85:c4:e1:
                    e9:36:da:94:b7:8a:1b:0d:3f:37:9c:bf:6e:56:7c:
                    ae:28:d3:09:ad:25:f8:44:17:0e:33:d0:12:de:f5:
                    a1:ce:6e:c7:01:7f:92:a4:be:cf:8d:cd:07:de:24:
                    50:72:e5:21:c2:b1:f0:0c:55:64:39:f0:cb:e2:19:
                    80:0b:b4:d5:15:91:20:71:0a:88:06:7d:36:03:f0:
                    9d:74:d4:ed:c4:cf:b6:6e:a5:e6:d1:87:ec:b8:33:
                    5d:1a:c2:38:17:5e:2b:a0:8c:d5:cd:d0:da:ca:b7:
                    d6:fb:13:14:c6:d3:5d:82:ce:9c:27:fb:1c:7b:36:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BB:D1:3F:2E:CC:99:27:B9:18:29:87:6C:70:71:1E:04:32:B7:82
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133302e302f32342d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:20:f0:c3:7d:a4:ea:74:bc:dd:51:30:15:24:24:d8:52:47:
         0a:8a:ed:a6:0f:83:40:6f:88:87:17:0a:58:28:18:03:70:93:
         b6:74:d8:ba:21:63:ae:2f:73:07:ce:70:ce:f7:ce:7e:30:9e:
         d4:24:bb:5f:2a:87:3f:a9:70:2a:2e:e1:67:2f:40:54:7a:a9:
         2d:d1:05:a2:74:aa:85:6f:85:02:f7:80:b6:a2:81:3b:9c:e8:
         ec:8c:a5:90:ea:06:95:a5:a9:ac:cc:14:d2:b3:fd:a6:36:a2:
         77:93:c7:60:fd:5d:d1:30:19:b9:a9:ba:f7:07:ac:4b:ad:a4:
         9d:08:b5:0b:4d:98:28:96:2f:e5:6e:59:06:14:d4:27:e0:f3:
         06:f7:65:42:ba:3c:0a:21:80:e4:d2:98:cd:23:de:bf:c9:bb:
         ce:fb:e9:0b:84:91:b5:47:d7:c0:5e:ae:38:0e:05:2c:b1:88:
         b2:85:33:f6:c7:46:0f:24:c4:bb:2e:51:56:6f:37:3a:56:9c:
         61:a9:c6:1a:a1:18:be:3a:dd:35:e3:74:91:85:d7:fa:d9:31:
         60:20:68:ca:89:5e:bc:7f:bf:b0:e7:71:64:84:d3:fb:b8:69:
         6a:7a:66:dd:dc:d4:da:34:ed:cb:bc:69:ae:1c:4a:5e:13:35:
         06:11:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:31:40 2026 by rpki-client