Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136312e302f32342d3234203d3e20323734303236.roa
File:                     3230302e372e3136312e302f32342d3234203d3e20323734303236.roa (raw, json)
Hash identifier:          6v+tYdi+hoHQ9bOAGfkm5xtiMY27Dud7iD4JFEw98w0=
Subject key identifier:   D7:CE:56:B6:FA:3E:55:73:DA:00:CA:BF:4D:0A:B4:6A:43:48:F1:FA
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       10A830F1E5C71B6300B780F8062963D15E3089B3
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136312e302f32342d3234203d3e20323734303236.roa
Signing time:             Tue 31 Mar 2026 05:00:00 +0000
ROA not before:           Tue 31 Mar 2026 04:55:00 +0000
ROA not after:            Tue 30 Mar 2027 05:00:00 +0000
asID:                     274026
IP address blocks:        200.7.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a8:30:f1:e5:c7:1b:63:00:b7:80:f8:06:29:63:d1:5e:30:89:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 31 04:55:00 2026 GMT
            Not After : Mar 30 05:00:00 2027 GMT
        Subject: CN=D7CE56B6FA3E5573DA00CABF4D0AB46A4348F1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:d3:d6:02:58:43:f8:10:d8:63:ee:48:e5:
                    9c:d8:a4:ef:be:7c:33:b8:2e:3e:5c:7b:a2:c0:b4:
                    43:fd:a6:b8:d2:57:15:3e:b7:b2:9c:25:c2:51:d0:
                    21:b6:ba:71:e1:b7:7d:f3:49:30:42:b1:a9:47:49:
                    dd:1b:d9:74:c1:b1:af:52:cc:45:40:b4:37:be:61:
                    51:da:52:3f:07:9b:92:15:97:52:d4:2c:01:b6:97:
                    f6:cd:41:64:51:e3:17:9b:c7:6b:de:69:ab:64:99:
                    35:29:b4:82:4c:73:98:65:e0:6d:0f:e2:e0:bc:84:
                    bb:ab:3a:d7:a1:d4:45:76:8b:83:a3:c1:2d:c5:0c:
                    2d:5b:18:81:2f:13:d9:b3:e5:b0:ce:80:40:22:ba:
                    9b:fb:dd:b2:a3:ac:78:75:ab:08:15:52:5c:5f:18:
                    69:1e:de:18:82:8b:0b:2d:c2:0f:01:60:65:f9:f5:
                    a4:db:b7:da:50:ba:f8:db:c0:50:ae:bb:01:a7:8b:
                    f0:8f:65:56:cc:7b:e2:b2:96:c7:52:92:56:9c:74:
                    4a:d8:a3:d8:6a:b3:b1:64:6a:d5:d6:ae:6b:55:98:
                    e7:5b:a7:f6:1b:5a:2c:f9:14:81:46:3a:ed:45:9f:
                    89:ee:54:5b:bc:77:8d:0b:4a:dd:91:7a:96:0b:00:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CE:56:B6:FA:3E:55:73:DA:00:CA:BF:4D:0A:B4:6A:43:48:F1:FA
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136312e302f32342d3234203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:92:50:9e:75:a9:e6:23:8e:8f:93:21:45:a1:06:f8:bf:9d:
         d5:05:72:8c:a9:ee:a5:5e:62:c2:aa:e6:8f:3c:33:7d:1e:2c:
         a1:16:48:aa:7a:2b:b2:39:d9:d5:a5:3a:0a:3b:d3:75:66:ad:
         44:46:43:80:f1:32:58:50:8c:b9:ce:eb:4b:ba:04:1f:79:ed:
         59:c6:ea:8a:1a:2e:f6:43:a0:27:03:61:50:dd:a0:d0:de:a1:
         c9:2e:a7:64:a3:d1:1a:fe:ea:d9:cc:1f:48:41:84:5a:a3:f3:
         2a:86:1e:fc:6b:47:d0:e4:05:d7:ad:42:be:27:f6:94:17:09:
         29:cc:66:05:58:2b:d8:44:ab:6e:50:d6:72:61:24:8c:cc:bd:
         54:8e:28:6b:8b:74:44:67:6d:08:db:e3:18:58:3d:05:c5:d2:
         35:25:3c:9c:f2:e5:de:db:6c:cb:21:63:5d:3b:de:44:b2:9b:
         5c:9a:1e:d9:4b:e2:cc:cd:cb:25:c0:40:e1:48:17:2a:38:98:
         35:5d:db:b4:09:43:78:1c:4e:43:a2:f2:6b:d2:60:01:c9:a8:
         00:41:71:6c:47:b4:21:ec:99:4f:82:05:cd:46:10:d9:b7:2c:
         21:10:9b:22:ef:41:bd:15:c0:9c:d6:80:95:ac:ed:d6:d0:ad:
         06:80:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:22 2026 by rpki-client