Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133352e302f32342d3234203d3e2038303438.roa
File:                     3230302e33352e3133352e302f32342d3234203d3e2038303438.roa (raw, json)
Hash identifier:          Np82M/hp0NAsIqkAeeVjQdY0PBHWr2clzfN2RsuZkbA=
Subject key identifier:   8E:5F:9A:96:17:CF:35:2C:AC:EB:AF:EF:B4:B9:A9:A3:A0:0C:31:FF
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       4502CE6E831D61B4B5AD334AFB49A19759682D5C
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133352e302f32342d3234203d3e2038303438.roa
Signing time:             Fri 13 Feb 2026 14:30:22 +0000
ROA not before:           Fri 13 Feb 2026 14:25:22 +0000
ROA not after:            Fri 12 Feb 2027 14:30:22 +0000
asID:                     8048
IP address blocks:        200.35.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:02:ce:6e:83:1d:61:b4:b5:ad:33:4a:fb:49:a1:97:59:68:2d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Feb 13 14:25:22 2026 GMT
            Not After : Feb 12 14:30:22 2027 GMT
        Subject: CN=8E5F9A9617CF352CACEBAFEFB4B9A9A3A00C31FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:aa:9b:1a:c6:ac:16:e4:7d:a2:bf:ad:d4:8f:
                    3b:25:5b:be:8c:15:ae:9b:2a:ef:03:88:c9:52:31:
                    86:ae:d8:2c:35:db:b0:ca:61:11:be:f1:7a:86:33:
                    b7:69:a1:0b:f9:f7:e5:89:d6:4c:2b:fd:de:21:3f:
                    04:a8:ce:20:7c:78:0b:9e:cf:67:25:ff:31:44:1f:
                    96:e4:b8:38:1e:f5:e7:d8:c9:49:2f:34:00:7e:9e:
                    c2:2c:0f:37:31:10:c1:34:a7:f1:73:8d:4c:43:97:
                    23:97:f5:38:f0:7a:a0:dd:de:0b:39:06:92:63:ea:
                    b4:6a:ea:ac:84:8b:7d:38:e9:98:91:95:a3:7e:91:
                    02:46:07:2b:01:7a:62:18:2c:10:f8:ca:64:16:1d:
                    72:89:cb:fc:53:58:96:a4:a6:46:14:8a:31:16:c0:
                    56:40:68:96:86:8d:53:e2:33:f8:ba:b5:07:17:24:
                    b2:9e:94:18:c5:fe:e2:87:48:d4:05:41:57:69:a5:
                    ab:46:c7:e8:9f:67:fe:f9:82:66:2e:35:64:f1:93:
                    aa:e3:9d:cf:2c:c8:dc:72:39:85:3e:5f:87:58:59:
                    3d:bd:fe:47:f3:55:1c:48:01:a2:fb:6d:da:10:07:
                    15:bf:10:96:b2:87:a9:f7:d3:33:a6:1e:33:4f:e0:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5F:9A:96:17:CF:35:2C:AC:EB:AF:EF:B4:B9:A9:A3:A0:0C:31:FF
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133352e302f32342d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:11:d5:24:35:cf:f7:38:9d:69:6a:14:22:bc:24:e2:34:
         96:27:f8:1b:a0:4a:d5:bc:d6:56:ed:9a:29:2c:2e:98:7f:65:
         cf:38:98:3e:b2:e0:73:e8:04:e9:5f:0b:ad:5c:44:f7:77:4b:
         a4:7e:ff:98:7f:1e:59:4f:ab:e5:4c:a9:11:16:7b:9b:e6:9a:
         16:9f:7d:95:88:ba:7a:43:c5:9c:ea:e1:4d:0d:5f:8a:1b:0e:
         11:ed:40:a2:f7:19:80:01:e7:ac:62:a6:68:32:16:04:0c:dd:
         90:29:f7:ef:be:1d:36:f2:db:24:3b:a4:a1:d5:63:94:5e:71:
         66:1c:c4:e1:5e:e7:14:a6:56:9f:de:cc:0b:7f:80:79:c3:9e:
         c3:85:76:0a:d0:20:e1:b4:98:a9:64:95:ec:80:7a:9e:1b:4e:
         5e:fd:7e:61:e7:2b:3c:81:4a:89:3a:c1:c6:dd:8e:eb:53:71:
         70:10:55:5e:90:90:04:ae:a7:fa:69:b7:8b:b8:46:3f:9a:4f:
         59:fd:50:0c:fd:d7:ab:43:94:7e:9d:36:6d:18:12:9f:64:5c:
         66:58:72:53:48:f5:89:c2:22:03:05:79:29:51:f7:25:1b:8f:
         c8:72:f6:af:0d:a5:30:0a:8e:8c:e8:b8:03:bd:47:27:3f:3f:
         1d:41:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:04:20 2026 by rpki-client