Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136322e302f32342d3234203d3e20323734303236.roa
File:                     3230302e372e3136322e302f32342d3234203d3e20323734303236.roa (raw, json)
Hash identifier:          HDhLSzIJ4XhVCTfuPE9Q6DwPukIGTE04bCQb3zFguL4=
Subject key identifier:   3A:CD:E5:E4:A8:63:19:57:75:C6:5A:82:A8:75:B6:4D:03:98:4A:43
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       355C210DD1995C2A3259DF4F079A4F0DEFD4455D
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136322e302f32342d3234203d3e20323734303236.roa
Signing time:             Tue 31 Mar 2026 05:00:01 +0000
ROA not before:           Tue 31 Mar 2026 04:55:01 +0000
ROA not after:            Tue 30 Mar 2027 05:00:01 +0000
asID:                     274026
IP address blocks:        200.7.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5c:21:0d:d1:99:5c:2a:32:59:df:4f:07:9a:4f:0d:ef:d4:45:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 31 04:55:01 2026 GMT
            Not After : Mar 30 05:00:01 2027 GMT
        Subject: CN=3ACDE5E4A863195775C65A82A875B64D03984A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:13:0f:99:23:40:0e:f0:a2:62:77:4f:73:
                    31:9d:4d:00:01:05:45:3e:2d:97:10:dc:38:f8:dd:
                    72:97:d6:b3:1d:5c:17:98:6a:0e:99:06:60:b2:5f:
                    6a:68:3d:49:e9:98:df:bb:19:9b:8e:e7:ac:33:56:
                    8d:5b:c5:cc:70:c5:c6:83:16:08:9b:33:79:d0:2b:
                    c7:03:3e:81:7c:6c:9b:62:d8:e2:db:6f:95:7d:4b:
                    00:88:30:7f:fb:2e:da:64:eb:64:da:00:a7:1e:c9:
                    83:8a:25:59:4a:cc:cb:2d:57:ab:4c:94:a9:7a:52:
                    93:a7:64:76:e3:8b:8a:07:16:70:ec:15:bb:ac:6f:
                    1e:c0:4b:a7:5f:4c:6c:7a:a0:e1:54:f8:a3:13:e8:
                    98:37:4f:85:c3:d2:0c:85:2a:64:c9:3a:78:e7:57:
                    9d:57:0c:fd:a0:58:03:49:9a:ea:9f:94:5d:b0:45:
                    8f:67:94:6d:ee:9a:a5:3e:48:50:da:92:9c:6e:bb:
                    f6:72:d2:18:cb:83:ce:d3:e6:ca:4a:cf:15:01:4a:
                    1e:af:1a:6b:ff:97:e4:8d:5e:1a:b5:ed:98:f3:94:
                    38:7a:b5:be:32:f4:1a:39:ed:cc:ba:18:f6:9c:d9:
                    68:5a:ed:45:8a:66:ed:4f:f0:48:20:9e:93:86:1c:
                    4d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CD:E5:E4:A8:63:19:57:75:C6:5A:82:A8:75:B6:4D:03:98:4A:43
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136322e302f32342d3234203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:70:5d:cc:92:e2:3b:1a:19:a8:40:9b:df:e0:ad:09:76:10:
         77:89:fc:30:3e:27:2e:96:f0:ce:f0:08:69:10:3e:87:10:4f:
         8b:22:97:c1:90:55:18:43:a8:18:3a:a7:90:90:0b:9e:e6:37:
         3d:b1:d4:fd:26:34:f9:ae:d4:71:27:83:b4:01:16:7d:22:34:
         48:7f:6f:c1:45:6e:c6:71:d8:80:6d:ce:f7:ee:fc:65:d7:a3:
         89:bd:20:76:42:15:c6:98:3e:a6:41:b8:cd:0c:b6:96:63:28:
         56:e6:74:79:29:1a:69:b4:9e:84:89:e8:70:3d:a4:82:dc:74:
         ce:e1:63:1d:0a:c5:92:d1:3a:6f:43:d8:ff:7f:3b:b0:2e:1c:
         10:c4:71:8b:1c:ee:75:47:c0:7f:96:56:0b:58:74:9b:5d:82:
         0e:18:df:34:69:1e:07:32:3a:a1:1b:b4:1e:39:51:fc:d4:8c:
         b0:07:d3:3d:57:11:b2:70:0e:4e:70:6a:db:c4:1f:9d:61:e0:
         57:6e:bc:6c:e1:99:39:8c:4a:4a:89:be:14:4d:ac:05:9a:17:
         84:89:11:e4:ea:cf:51:50:23:0a:21:5a:a2:c9:3b:35:3b:b5:
         46:ed:cb:eb:d3:35:84:ac:47:87:30:44:08:df:c7:4d:43:47:
         c1:78:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:28 2026 by rpki-client