Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32342d3234203d3e20323734303236.roa
File:                     3230302e372e3136302e302f32342d3234203d3e20323734303236.roa (raw, json)
Hash identifier:          V5CZ2YL51njizOCmB2OrACDv/MfbHYrsQXStrm/V6Xc=
Subject key identifier:   BD:19:55:0F:61:FA:2E:5D:A0:9E:77:C4:9D:FA:19:B7:66:32:9D:24
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       0416C987800B7333C1E58DF467616047ABA6A717
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32342d3234203d3e20323734303236.roa
Signing time:             Tue 31 Mar 2026 05:00:01 +0000
ROA not before:           Tue 31 Mar 2026 04:55:01 +0000
ROA not after:            Tue 30 Mar 2027 05:00:01 +0000
asID:                     274026
IP address blocks:        200.7.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:16:c9:87:80:0b:73:33:c1:e5:8d:f4:67:61:60:47:ab:a6:a7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 31 04:55:01 2026 GMT
            Not After : Mar 30 05:00:01 2027 GMT
        Subject: CN=BD19550F61FA2E5DA09E77C49DFA19B766329D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:d0:72:bd:f1:ba:e2:c9:a0:1e:e2:a6:ad:
                    94:f6:2c:7e:24:a3:bc:eb:42:27:7d:ff:a4:09:c6:
                    23:ec:75:59:10:fb:ac:a7:10:5e:a1:6c:d9:93:90:
                    d8:e4:88:57:80:e4:a1:e6:4c:e1:d1:49:ca:ed:32:
                    c3:2e:2d:07:84:cc:bf:08:8e:75:8a:4a:fc:c4:d2:
                    a1:f8:2a:04:9c:a1:83:38:ee:cf:e0:4c:48:dc:6e:
                    e3:aa:5f:82:87:92:46:02:a2:6c:6a:fd:4b:a5:d1:
                    f9:59:f3:33:96:62:ec:85:6b:19:bf:9f:1e:b5:df:
                    93:55:2b:af:2a:34:89:8d:66:ff:7a:3e:c9:11:78:
                    af:39:56:58:c6:d4:60:35:77:aa:2b:96:08:d9:0d:
                    ad:6c:f6:df:70:db:48:73:67:4c:bf:22:22:d6:dd:
                    f8:93:82:20:7b:0d:c9:cd:b8:03:20:cf:d7:66:db:
                    57:c2:b0:ef:30:6b:41:ba:2d:bb:7a:2a:c1:f3:97:
                    49:a9:47:10:2e:15:e7:32:db:c2:35:de:99:16:77:
                    8b:a2:14:f9:d7:52:38:c2:91:37:f5:07:41:bb:c8:
                    2c:64:15:8f:a0:80:8d:84:48:92:53:12:a6:53:ee:
                    e3:85:ec:1e:0f:1e:cf:e2:ea:d4:aa:27:d0:c3:e1:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:19:55:0F:61:FA:2E:5D:A0:9E:77:C4:9D:FA:19:B7:66:32:9D:24
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32342d3234203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:cd:48:61:10:b4:39:b3:46:2b:04:16:a5:06:f0:3d:48:21:
         90:d6:de:df:81:56:a7:11:30:5b:2a:71:fc:bb:2d:fe:2e:1d:
         fb:72:47:d9:14:a8:b4:9d:64:8b:68:8e:58:b6:33:c4:9f:68:
         48:ab:75:e7:4f:b9:34:ca:a8:83:ca:8b:dd:1c:da:5a:cc:43:
         de:48:cd:5a:50:78:8c:50:d9:39:3c:d2:13:e5:65:dc:05:6a:
         24:6d:06:d7:c1:a3:a7:5a:62:35:99:d8:1a:0b:5d:23:a3:d0:
         30:b1:f0:2d:aa:a1:2c:0d:cc:75:dc:91:e2:59:db:fc:45:33:
         59:a8:87:8e:92:07:c6:87:7d:c0:0f:eb:d2:08:1e:a1:dc:c0:
         e7:66:87:b0:b9:e8:1c:0b:ce:28:e9:2e:56:8d:cb:37:8b:9d:
         fe:d9:32:94:8d:90:8e:a5:0b:c5:d5:23:c8:c7:7e:09:e8:d9:
         8e:1a:2b:3f:42:27:1e:06:42:1a:57:18:ab:73:86:cd:bd:40:
         a2:0b:bd:95:35:55:27:37:4d:9d:4e:bb:d9:33:d8:5b:db:ad:
         4b:d3:65:b9:02:91:d5:56:df:40:2d:84:1a:71:26:db:ce:2d:
         e1:fc:a7:12:32:a4:ab:2e:00:30:e1:15:13:f4:48:eb:3d:c3:
         48:42:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:21 2026 by rpki-client