Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230302e3132362e36342e302f31382d3234203d3e203134313137.roa
File:                     3230302e3132362e36342e302f31382d3234203d3e203134313137.roa (raw, json)
Hash identifier:          0QlD0Z5XwrHvy+sDrcfAEPDPiQ+vb2otabZaSxeLKrM=
Subject key identifier:   F9:10:13:9B:56:5D:CF:F0:5E:04:85:0C:37:01:01:FE:6D:90:1A:86
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       40AF5A8858F2E4761D71501DBB197722B4C823E4
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230302e3132362e36342e302f31382d3234203d3e203134313137.roa
Signing time:             Tue 02 Jun 2026 19:46:12 +0000
ROA not before:           Tue 02 Jun 2026 19:41:12 +0000
ROA not after:            Tue 01 Jun 2027 19:46:12 +0000
asID:                     14117
IP address blocks:        200.126.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 07:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:af:5a:88:58:f2:e4:76:1d:71:50:1d:bb:19:77:22:b4:c8:23:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Jun  2 19:41:12 2026 GMT
            Not After : Jun  1 19:46:12 2027 GMT
        Subject: CN=F910139B565DCFF05E04850C370101FE6D901A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:96:8e:99:2d:f4:18:08:e0:1e:d0:b0:03:
                    42:da:43:a8:f0:ee:57:af:bc:8e:ec:fa:c6:9a:53:
                    61:a9:8b:06:f9:8e:15:be:56:09:09:40:c2:16:3e:
                    41:ed:a8:b1:51:ba:33:a9:06:1f:56:fa:23:c8:8a:
                    a4:ed:8e:e8:29:73:07:e1:7f:cb:58:d6:38:bc:97:
                    39:2c:b3:0a:04:46:54:8c:88:e5:86:ec:3e:bf:8c:
                    23:ce:d0:52:73:7f:5e:db:be:3c:53:0c:bf:4a:b6:
                    3a:ad:c5:b2:fd:b0:6f:5c:6f:f2:60:d5:65:bb:4a:
                    7e:4d:f6:ee:83:41:fc:05:c6:2a:79:30:79:16:9a:
                    27:fa:31:b8:fa:40:a6:7d:6f:9a:ce:85:df:0b:5b:
                    39:e1:cf:65:a8:e5:a0:ae:aa:ec:fb:5d:bc:51:71:
                    5c:4f:78:a7:38:cf:e7:6f:87:f2:48:60:d2:04:37:
                    c0:c5:2e:a3:ef:8f:c6:9c:49:9b:cc:af:04:e2:76:
                    fc:9d:06:47:d4:0f:67:cd:9e:8c:c1:7c:ca:44:0d:
                    69:c4:54:de:d7:6e:13:c9:a0:fa:da:45:54:6d:61:
                    1b:75:1f:42:63:e7:0c:97:72:5b:64:78:16:ab:5b:
                    70:04:ab:63:92:ce:34:f3:ac:8b:df:c9:fd:9f:e1:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:10:13:9B:56:5D:CF:F0:5E:04:85:0C:37:01:01:FE:6D:90:1A:86
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230302e3132362e36342e302f31382d3234203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         26:62:5b:01:b6:63:74:d1:fb:21:c0:d1:83:ce:df:79:60:08:
         db:09:ec:d6:cc:cf:e8:cd:68:cd:96:91:43:fa:3b:7a:81:8d:
         52:ec:32:0e:86:b1:57:2d:c8:f9:67:42:93:2b:e4:c3:7f:48:
         4b:a1:84:c0:49:c3:6b:c3:f9:67:69:21:23:1a:83:52:fb:50:
         3d:aa:db:50:51:97:2f:6c:94:3e:32:19:af:fc:3c:ba:2b:ac:
         ca:5c:c5:91:fc:52:23:e4:19:cf:c9:56:3c:fc:7e:e6:3d:1f:
         91:11:fa:f1:80:40:93:a8:e2:c4:ba:5a:9e:d2:35:7d:bd:89:
         84:cc:36:ad:5f:bf:d8:ce:0b:3b:a9:53:6e:70:83:44:ec:47:
         cd:b6:85:1b:13:9f:ef:f4:54:d6:ff:72:5b:12:13:5a:ab:e3:
         53:22:d9:9e:90:59:ab:dd:40:72:30:75:15:f7:97:31:89:f3:
         1e:47:6d:1b:ec:29:b7:5e:9e:f3:b3:95:18:2b:65:c1:89:12:
         6f:2b:70:68:d9:dc:7d:95:b7:0a:ad:5b:a7:e3:6e:db:30:27:
         d8:73:5a:5f:9a:87:de:d1:45:31:9e:01:97:4a:99:4b:18:9b:
         1c:f5:dc:34:b2:70:68:e3:99:29:d0:ec:6e:e1:b6:a3:c1:07:
         55:5b:97:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:13:25 2026 by rpki-client