Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136352e302f32342d3234203d3e20323734303236.roa
File:                     3230302e372e3136352e302f32342d3234203d3e20323734303236.roa (raw, json)
Hash identifier:          q/i5mWGgGFHiUNOCxJhku0IievLLkN9ecu/HhxcpKUo=
Subject key identifier:   A8:1E:32:EA:AD:95:FE:9E:AC:27:0F:EF:5F:C0:BF:59:81:DF:31:D3
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       5135FE1362CA36E31142D3E098B0D695764FBE5C
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136352e302f32342d3234203d3e20323734303236.roa
Signing time:             Fri 27 Mar 2026 19:30:02 +0000
ROA not before:           Fri 27 Mar 2026 19:25:02 +0000
ROA not after:            Fri 26 Mar 2027 19:30:02 +0000
asID:                     274026
IP address blocks:        200.7.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:35:fe:13:62:ca:36:e3:11:42:d3:e0:98:b0:d6:95:76:4f:be:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 19:25:02 2026 GMT
            Not After : Mar 26 19:30:02 2027 GMT
        Subject: CN=A81E32EAAD95FE9EAC270FEF5FC0BF5981DF31D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:26:a2:3c:29:89:de:dc:3d:a2:61:45:af:
                    f0:3c:d8:54:2a:00:c2:fc:c0:ea:ef:eb:ec:9d:af:
                    62:15:82:62:16:56:1f:32:cf:d9:af:02:31:5d:2d:
                    b9:75:cf:eb:5b:c0:b6:f4:d7:00:79:6c:ce:11:54:
                    e7:98:a7:db:d1:4b:db:85:76:b8:f1:b4:28:12:e3:
                    0d:a5:55:7f:f8:ad:5e:62:74:db:9c:06:35:8a:37:
                    eb:7f:b1:7b:1f:12:06:32:bb:b9:1c:e6:f0:eb:f5:
                    5e:76:95:14:45:98:54:70:25:b2:99:61:5e:c5:9e:
                    d3:1e:ee:e0:8d:59:00:dc:1f:a8:30:93:cd:03:92:
                    91:50:1d:2a:5a:f4:5f:c4:2b:7e:9d:ec:fb:ca:74:
                    30:ec:ed:d3:e6:76:af:37:29:3f:39:52:d8:ed:e2:
                    92:3b:39:4c:e3:5f:12:cc:62:aa:d6:89:33:84:5c:
                    43:16:04:4c:da:95:59:d5:b7:5e:3a:eb:8f:9b:df:
                    c3:40:6a:93:bd:8d:76:59:ac:bf:95:28:b1:2b:20:
                    30:31:db:51:41:26:d9:4d:94:5c:96:44:0d:67:95:
                    44:92:da:ee:86:83:b4:8d:c2:10:c9:5f:60:80:54:
                    0e:4b:22:d1:00:e0:47:b7:af:dd:84:80:3a:b3:9f:
                    1d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1E:32:EA:AD:95:FE:9E:AC:27:0F:EF:5F:C0:BF:59:81:DF:31:D3
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136352e302f32342d3234203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:9e:af:7f:93:84:87:85:9e:4e:74:98:db:01:ae:0e:a4:ac:
         d8:2a:05:7b:ae:da:98:e1:52:fc:22:88:9f:1c:d0:16:43:ee:
         49:6b:4f:93:d4:34:38:0d:7c:ef:fd:c4:bd:ea:bb:db:22:2e:
         66:65:92:65:1b:a8:52:3b:9c:68:41:f1:7f:2f:12:9c:48:19:
         80:4a:97:48:1c:32:4f:53:b3:03:26:03:08:aa:02:89:64:6d:
         f8:7b:51:e0:07:fb:49:b9:84:df:ee:f0:da:f2:59:70:d4:a0:
         ec:d7:21:f5:37:de:1b:ca:b7:b7:53:cb:d2:42:fd:b3:be:ed:
         83:ad:24:10:6b:f9:c1:f2:23:75:d6:f7:5a:0b:0c:36:17:b8:
         f7:e1:04:34:83:2d:e7:b5:a7:e2:b8:73:3c:73:14:17:b6:05:
         1b:26:fe:06:12:18:2f:4f:3f:88:16:de:13:f5:bc:4a:0e:8a:
         d9:2d:96:1e:e2:e7:02:01:8e:bc:af:fe:1f:ae:8a:7a:33:42:
         3a:e8:4b:b6:fa:29:fc:83:ec:32:9b:b8:5f:7e:26:01:fc:51:
         42:1b:c9:5a:3b:34:b7:ee:59:63:fc:47:18:72:e4:c2:b5:ee:
         df:b2:f6:2a:05:e2:fe:45:84:f3:4a:bb:73:d4:5c:ff:07:b9:
         46:01:55:69
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUTX+E2LKNuMRQtPgmLDWlXZPvlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4
MTg1MDFEMjAeFw0yNjAzMjcxOTI1MDJaFw0yNzAzMjYxOTMwMDJaMDMxMTAvBgNV
BAMTKEE4MUUzMkVBQUQ5NUZFOUVBQzI3MEZFRjVGQzBCRjU5ODFERjMxRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVNCaiPCmJ3tw9omFFr/A82FQq
AML8wOrv6+ydr2IVgmIWVh8yz9mvAjFdLbl1z+tbwLb01wB5bM4RVOeYp9vRS9uF
drjxtCgS4w2lVX/4rV5idNucBjWKN+t/sXsfEgYyu7kc5vDr9V52lRRFmFRwJbKZ
YV7FntMe7uCNWQDcH6gwk80DkpFQHSpa9F/EK36d7PvKdDDs7dPmdq83KT85Utjt
4pI7OUzjXxLMYqrWiTOEXEMWBEzalVnVt14664+b38NAapO9jXZZrL+VKLErIDAx
21FBJtlNlFyWRA1nlUSS2u6Gg7SNwhDJX2CAVA5LItEA4Ee3r92EgDqznx2LAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqB4y6q2V/p6sJw/vX8C/WYHfMdMwHwYDVR0j
BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB
NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2
NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3
NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw
QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzAzMDJlMzcyZTMxMzYzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNDMwMzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgHpTAN
BgkqhkiG9w0BAQsFAAOCAQEARZ6vf5OEh4WeTnSY2wGuDqSs2CoFe67amOFS/CKI
nxzQFkPuSWtPk9Q0OA187/3Eveq72yIuZmWSZRuoUjucaEHxfy8SnEgZgEqXSBwy
T1OzAyYDCKoCiWRt+HtR4Af7SbmE3+7w2vJZcNSg7Nch9TfeG8q3t1PL0kL9s77t
g60kEGv5wfIjddb3WgsMNhe49+EENIMt57Wn4rhzPHMUF7YFGyb+BhIYL08/iBbe
E/W8Sg6K2S2WHuLnAgGOvK/+H66KejNCOuhLtvop/IPsMpu4X34mAfxRQhvJWjs0
t+5ZY/xHGHLkwrXu37L2KgXi/kWE80q7c9Rc/we5RgFVaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:16 2026 by rpki-client