Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136352e302f32342d3234203d3e203237383238.roa
File:                     3230302e372e3136352e302f32342d3234203d3e203237383238.roa (raw, json)
Hash identifier:          smMHGedxvDw38xdPqExtcxjfeRNRj3+/dYffqQOCxzg=
Subject key identifier:   1E:87:93:68:6C:78:B1:F1:70:06:B2:14:88:D1:2E:3A:76:51:34:6F
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       7146A46E52E7E9A2C0E11F37FF3369165FC8A43A
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136352e302f32342d3234203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 18:15:03 +0000
ROA not before:           Fri 27 Mar 2026 18:10:03 +0000
ROA not after:            Fri 26 Mar 2027 18:15:03 +0000
asID:                     27828
IP address blocks:        200.7.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:46:a4:6e:52:e7:e9:a2:c0:e1:1f:37:ff:33:69:16:5f:c8:a4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 18:10:03 2026 GMT
            Not After : Mar 26 18:15:03 2027 GMT
        Subject: CN=1E8793686C78B1F17006B21488D12E3A7651346F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:88:59:39:6c:95:ba:86:b9:3b:7c:88:18:
                    58:c4:1a:6e:cf:cb:21:55:17:a6:8c:2a:a3:be:2a:
                    fa:ec:10:37:4f:aa:10:46:84:e0:20:13:66:b3:86:
                    7e:f6:a9:94:97:6f:be:bc:45:a1:c1:d8:c0:57:49:
                    f1:e2:be:0a:94:ec:23:a7:26:ea:54:33:03:32:9f:
                    61:ef:b4:33:d7:9b:7a:50:7a:0b:d8:da:80:55:29:
                    cb:d1:85:20:53:48:30:9f:51:10:84:a7:94:19:9d:
                    ab:70:3b:bf:31:e1:2b:59:4d:b0:ec:57:f2:62:83:
                    ee:f9:a7:94:73:85:37:33:d6:a5:f2:f3:5a:24:fe:
                    5d:ea:e6:be:af:02:37:2d:f3:b3:1c:2f:aa:1e:e8:
                    c1:fd:99:a7:65:a9:9d:32:a4:32:28:cb:1a:61:d6:
                    3c:2e:86:43:61:ef:0e:bc:59:69:2f:bf:67:e7:20:
                    0f:88:9e:dd:1d:d3:d1:6e:43:7f:58:71:b8:a5:1b:
                    a6:18:56:0d:aa:86:ed:cf:01:52:c0:22:5c:ca:55:
                    bf:a0:e9:d5:85:50:ac:ae:b8:0f:d5:99:d4:7c:3d:
                    f9:de:f0:ed:d2:bc:5d:26:8f:1f:a9:84:09:38:b9:
                    99:a2:70:b0:80:c9:43:db:2f:79:f9:c7:01:a5:06:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:87:93:68:6C:78:B1:F1:70:06:B2:14:88:D1:2E:3A:76:51:34:6F
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136352e302f32342d3234203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a5:8d:56:7b:8c:66:c2:9c:18:fb:59:40:23:8c:7c:c8:58:
         4c:cd:5c:67:52:85:e0:7b:aa:03:02:9c:6f:a2:28:f2:74:d1:
         51:9c:20:51:9a:24:3d:56:9a:f7:d7:0a:dd:59:30:4d:61:ea:
         2e:bb:09:02:fe:39:61:28:6e:a0:7a:8a:be:89:f8:c2:2a:9a:
         78:14:a6:17:e7:d8:93:e2:58:9e:f3:83:ee:bf:9f:e5:bd:42:
         62:cf:1c:a4:00:df:29:3b:94:bf:ca:b1:d3:f4:90:22:d3:20:
         74:bf:21:f6:c0:90:64:ed:fd:f7:04:ed:18:d6:69:8d:4e:a4:
         4a:0b:aa:86:fb:08:b8:95:0f:d0:21:85:34:f7:34:20:65:20:
         55:fb:eb:82:3f:d2:ef:1b:d0:61:07:cc:1d:ef:1a:f4:41:fd:
         fd:09:58:93:46:04:30:4d:31:0c:47:49:25:66:0a:39:46:3a:
         81:21:54:7d:21:ad:38:e9:b1:ea:b1:49:32:d6:5f:81:c6:c4:
         76:90:fb:2a:45:ae:74:61:43:e9:d1:6f:d1:6f:07:99:4a:76:
         7d:b5:2d:11:b5:aa:bf:bc:4a:c4:b8:21:d8:59:a4:9b:a8:c1:
         c0:04:d9:55:72:47:c8:03:7e:eb:bf:c3:2d:be:d3:2f:8e:ae:
         8e:9a:4f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:46 2026 by rpki-client