Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134322e302f32342d3234203d3e203238303839.roa
File:                     3230302e33352e3134322e302f32342d3234203d3e203238303839.roa (raw, json)
Hash identifier:          0ZY2RpdYrxyMWZg81FeQQRSnjRyGajFvTqAYxgyd40g=
Subject key identifier:   93:4A:E7:8A:F9:39:FB:5C:F8:FC:36:90:98:3C:F7:B2:ED:35:42:EB
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       173DB6A3562CD620B79E2AA3BF3EAC93C47AEF11
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134322e302f32342d3234203d3e203238303839.roa
Signing time:             Thu 26 Feb 2026 16:32:01 +0000
ROA not before:           Thu 26 Feb 2026 16:27:01 +0000
ROA not after:            Thu 25 Feb 2027 16:32:01 +0000
asID:                     28089
IP address blocks:        200.35.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3d:b6:a3:56:2c:d6:20:b7:9e:2a:a3:bf:3e:ac:93:c4:7a:ef:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Feb 26 16:27:01 2026 GMT
            Not After : Feb 25 16:32:01 2027 GMT
        Subject: CN=934AE78AF939FB5CF8FC3690983CF7B2ED3542EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:d8:67:ad:d2:d4:68:a2:1c:20:91:78:60:
                    a5:44:75:59:17:7d:ab:73:ac:3a:c4:16:f1:f6:9a:
                    c7:a8:60:58:61:3d:fb:e7:23:2a:00:ef:cb:54:9b:
                    76:b6:4b:c8:f3:a4:b6:30:c7:60:6d:86:62:aa:21:
                    bb:6b:c3:90:19:71:05:c8:cd:cb:dd:11:f7:e5:a3:
                    7a:34:b3:fd:e5:85:65:2a:19:32:86:fe:6f:c1:e8:
                    ad:f1:71:1a:4b:3c:00:65:ce:d9:de:ef:69:60:fd:
                    bf:7a:b1:0d:27:96:63:43:31:19:23:d8:27:e6:c5:
                    42:82:7a:7e:5b:7b:ea:48:9c:cc:a6:0d:95:aa:d1:
                    e7:d5:ff:5b:9e:e7:47:c8:76:22:01:82:05:84:b0:
                    bd:ca:67:79:b0:98:f2:e3:33:e9:63:46:fc:5e:a3:
                    b5:88:ec:13:b6:ba:79:cc:f6:53:86:bd:2a:a7:f1:
                    fb:80:3e:88:b2:55:ce:e2:5f:56:02:26:3f:b1:b9:
                    6b:bf:8d:d8:3e:9a:b0:66:1f:b6:0a:e7:2d:20:70:
                    22:45:76:14:2c:8d:56:8b:90:fd:91:1f:db:af:ca:
                    48:9a:88:c4:9a:82:20:8d:23:4f:2c:d8:dd:6b:41:
                    ab:5e:a5:f2:7e:04:92:20:de:c6:d6:4b:c2:e1:7d:
                    17:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4A:E7:8A:F9:39:FB:5C:F8:FC:36:90:98:3C:F7:B2:ED:35:42:EB
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134322e302f32342d3234203d3e203238303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b5:25:27:d6:e4:6e:d0:54:b3:ab:51:f8:f3:de:b5:90:10:
         a9:37:ef:31:2d:7c:c9:c6:b8:aa:99:39:71:0a:a4:15:8c:e8:
         a8:14:1c:c0:2e:cc:80:75:92:bf:e0:55:8f:76:7b:7d:0f:a1:
         ec:ef:36:34:d8:fb:67:e9:b0:45:a1:b7:b0:05:20:df:49:98:
         2e:57:63:c0:e7:2c:a0:ab:1d:70:17:0e:e4:1c:d2:db:06:c0:
         67:38:15:52:a9:da:91:2c:e9:8c:b7:c8:00:ce:14:6e:fc:72:
         cd:50:06:9e:3d:f8:67:fd:6d:d4:d1:78:42:0b:fd:e6:21:aa:
         0e:d8:d6:e7:16:ba:3e:a6:f0:e5:c0:fb:ca:29:5c:d0:99:00:
         88:1f:c3:64:4f:97:35:0b:8c:d0:28:f7:2c:dd:61:6b:fc:c7:
         be:16:6b:e2:c0:fb:90:6b:1a:21:7a:db:b7:0b:7e:80:3f:0e:
         9a:5a:53:3f:80:07:82:0a:9f:b0:3c:61:7c:51:49:8c:09:bf:
         3a:6f:13:4c:0b:4c:f6:45:5e:8e:ec:5f:09:95:c4:77:69:f1:
         a1:1b:f7:79:9c:42:ae:18:88:5f:a8:1a:04:6e:9a:b9:d6:46:
         0d:f3:1a:46:5d:1b:2e:b6:3a:48:61:e3:69:85:09:ba:dd:82:
         9c:04:48:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:13:01 2026 by rpki-client