Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133312e302f32342d3234203d3e203238303839.roa
File:                     3230302e33352e3133312e302f32342d3234203d3e203238303839.roa (raw, json)
Hash identifier:          kW3MSXN4DAV4RDwbxedNBsYwXc567ZFhS85WgwJkhhY=
Subject key identifier:   45:97:6C:BC:23:E6:6E:FC:56:43:41:77:36:E1:D0:E8:FF:17:97:94
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       3B0C7BECCEC1A381EB75680795E905E2A63ED099
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133312e302f32342d3234203d3e203238303839.roa
Signing time:             Thu 26 Feb 2026 16:32:02 +0000
ROA not before:           Thu 26 Feb 2026 16:27:02 +0000
ROA not after:            Thu 25 Feb 2027 16:32:02 +0000
asID:                     28089
IP address blocks:        200.35.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0c:7b:ec:ce:c1:a3:81:eb:75:68:07:95:e9:05:e2:a6:3e:d0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Feb 26 16:27:02 2026 GMT
            Not After : Feb 25 16:32:02 2027 GMT
        Subject: CN=45976CBC23E66EFC5643417736E1D0E8FF179794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:66:3e:89:68:ab:a1:fa:14:35:85:f0:f5:
                    97:61:ca:7a:70:9f:14:4e:c0:c4:f5:b8:05:86:ba:
                    3a:29:f3:e5:af:fc:1b:f9:a8:f1:cf:50:63:29:29:
                    15:d7:d4:2c:24:87:28:c1:84:55:70:a9:38:a3:2b:
                    8c:b0:69:77:0c:35:5a:32:cc:f0:da:35:c3:2f:91:
                    11:59:45:ae:db:2e:8a:f3:7d:60:74:cb:0e:c0:11:
                    ed:0c:78:ce:28:54:bb:85:dd:31:c3:fa:8f:94:62:
                    a3:68:71:0a:05:59:47:f0:0b:16:60:8a:76:f7:b8:
                    6a:83:6a:3b:fb:1b:96:99:b8:e7:f2:2a:52:55:07:
                    32:74:6d:04:e8:d4:93:31:f0:69:87:db:b5:1c:5d:
                    47:49:98:62:07:e8:41:44:18:ac:17:c0:b2:ad:67:
                    10:3b:fa:ee:7e:4e:62:51:4c:b3:49:26:7a:1e:93:
                    77:e9:9f:1b:5c:cd:1a:09:e8:ef:3b:38:f5:b7:72:
                    9c:ad:13:74:db:44:91:37:1f:93:04:41:fd:d0:8d:
                    7d:18:c1:e5:f8:c5:fd:44:cf:62:30:0f:24:cc:7b:
                    cd:a9:30:84:6c:07:34:26:29:f8:e3:ad:0b:d3:ba:
                    60:8e:95:03:82:57:f7:ad:fb:b4:5a:d9:d2:dc:2b:
                    0a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:97:6C:BC:23:E6:6E:FC:56:43:41:77:36:E1:D0:E8:FF:17:97:94
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133312e302f32342d3234203d3e203238303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:25:7d:37:b1:ef:57:a7:61:09:2a:e7:92:ce:8f:be:e4:3a:
         17:5a:ca:70:58:55:36:94:59:ba:5c:b4:95:b6:e8:9a:26:fc:
         26:d5:ed:7b:f8:21:2f:26:26:da:3b:57:6e:c2:ad:d9:96:47:
         35:68:36:9c:80:da:67:ef:85:ab:7f:29:60:9c:19:e2:6a:9b:
         96:60:88:60:3f:64:f1:fd:66:5f:c5:bb:f4:74:10:b8:c6:ce:
         17:10:fa:5f:d8:6f:f0:83:c3:4d:35:b5:bc:3d:e0:d4:ce:e6:
         51:b2:f0:2c:ab:f0:2e:c8:29:c9:5f:40:96:83:28:51:5d:b4:
         21:62:78:cf:f7:f0:91:06:2f:09:c4:36:76:8b:ed:ee:07:f6:
         d6:83:aa:de:b3:8f:1b:e4:0d:bc:d5:f9:69:47:7b:14:e7:3a:
         5d:74:6f:d8:bf:95:95:6c:f1:0a:b5:48:64:78:d4:ba:4c:16:
         e7:b0:24:8c:e0:61:14:43:44:a3:d1:82:a6:81:43:60:20:91:
         09:b6:a5:29:71:ac:ff:92:8e:33:27:c2:a5:bb:5c:62:d9:0d:
         af:33:b5:d3:fc:8e:a0:ff:8e:10:3d:0d:5f:2c:b2:12:e3:39:
         87:42:cd:72:fc:39:c4:53:1d:70:1d:4e:fc:b1:46:f4:4d:11:
         96:f4:21:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:12:06 2026 by rpki-client