Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32322d3232203d3e203237383238.roa
File:                     3230302e372e3136302e302f32322d3232203d3e203237383238.roa (raw, json)
Hash identifier:          JoIUWm3zetdgIHwUUXGp88I14G8kQbATKacBitHoILI=
Subject key identifier:   AD:89:20:E7:36:5E:7D:F5:9E:09:72:7A:9B:7C:3B:13:9E:46:7E:60
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       2B4F5A4768CC755E99CF400E3412771060B099CF
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32322d3232203d3e203237383238.roa
Signing time:             Tue 31 Mar 2026 05:00:02 +0000
ROA not before:           Tue 31 Mar 2026 04:55:02 +0000
ROA not after:            Tue 30 Mar 2027 05:00:02 +0000
asID:                     27828
IP address blocks:        200.7.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4f:5a:47:68:cc:75:5e:99:cf:40:0e:34:12:77:10:60:b0:99:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 31 04:55:02 2026 GMT
            Not After : Mar 30 05:00:02 2027 GMT
        Subject: CN=AD8920E7365E7DF59E09727A9B7C3B139E467E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:37:de:f0:fc:b6:24:9b:45:fc:02:ef:8c:
                    25:ef:e3:d5:a4:4e:57:34:d8:4b:bc:6f:72:c6:bf:
                    96:b5:50:da:88:d9:ab:6c:1d:9c:d0:d7:70:b7:07:
                    d3:e7:7b:c7:4a:d4:41:b1:e8:09:78:f2:97:ee:4a:
                    4d:b0:e5:d7:af:15:5b:dd:d5:5e:26:ed:55:72:5e:
                    73:23:39:af:26:fb:d1:f3:f5:78:0a:ad:8d:07:eb:
                    4b:eb:bf:71:dd:59:64:c7:df:1d:2b:55:86:8e:92:
                    54:df:dd:06:86:62:51:b4:e7:d3:6d:aa:71:bd:4e:
                    db:f3:39:df:17:d6:95:a1:cd:33:06:36:89:5b:21:
                    16:79:26:af:72:f2:19:9c:f6:5c:48:d4:90:ff:f6:
                    c2:2c:db:2a:2d:7d:ce:8e:d7:d5:61:dd:a3:34:4e:
                    d3:1c:84:ce:49:ba:33:a9:64:e3:4f:7d:78:bd:d9:
                    fe:df:a7:fe:33:3c:cb:9f:b6:f0:8b:5c:ba:66:f3:
                    cf:ba:7c:12:7c:0f:96:75:83:ea:a7:49:c5:84:d6:
                    e1:48:6b:f9:ad:bc:29:92:00:87:0e:c4:aa:2b:76:
                    ac:e9:57:f3:14:13:a6:41:7a:1a:e4:5d:2a:dc:dc:
                    57:54:13:5b:51:09:06:6c:90:2f:38:08:52:04:0e:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:89:20:E7:36:5E:7D:F5:9E:09:72:7A:9B:7C:3B:13:9E:46:7E:60
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32322d3232203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:df:98:d3:37:44:7f:62:0e:cb:1c:ec:10:49:ea:ec:b8:
         46:9f:31:b2:a6:81:b0:98:6b:ae:72:fe:2c:48:16:d3:fa:10:
         02:a5:2d:41:a4:08:9b:dd:d0:a9:ed:12:c7:fc:f4:e8:2f:a2:
         fa:80:bb:7e:42:c2:47:e7:08:7f:7d:22:d9:e6:e4:88:22:76:
         c7:ab:ec:3f:04:54:22:c6:c6:88:a4:f5:8f:3e:01:d4:c7:59:
         65:ed:74:82:57:5e:d4:3f:e0:47:6f:a3:a1:8d:74:34:a6:fc:
         ad:f3:2b:ef:44:ea:1a:f1:28:66:73:1e:11:bf:33:5e:4a:95:
         be:21:5b:d3:db:3d:da:40:57:5f:0d:35:ca:80:30:e0:39:1d:
         ae:58:ee:dd:97:c2:a2:6e:98:dc:78:c6:da:dc:a5:7f:31:29:
         22:ff:e3:79:ac:33:64:68:ea:41:ec:2c:04:62:45:68:06:34:
         ea:41:79:a6:5c:63:e3:5c:a4:54:f2:e8:e1:07:f2:ec:5f:3f:
         01:d6:11:c4:15:96:89:f0:ab:8f:d0:e6:a8:a0:96:eb:9d:e2:
         4f:e0:1c:41:0c:df:e9:e5:ac:cc:6d:fa:3e:61:f0:ec:e4:22:
         46:96:6d:53:cb:d6:5c:cd:88:ea:1d:d4:4a:b6:28:51:26:5b:
         96:b4:35:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:21 2026 by rpki-client