Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136362e302f32342d3234203d3e203237383238.roa
File:                     3230302e372e3136362e302f32342d3234203d3e203237383238.roa (raw, json)
Hash identifier:          qObGnIbug7Hhqr6rXXsvsLmDAe+FOYAq+4BjaxmTCDM=
Subject key identifier:   19:8F:54:8A:5C:61:DA:53:DB:D1:88:A9:73:7D:BB:9A:39:46:B9:AB
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       720A210E8FED8E6052390571D37CC87C28CC9FB4
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136362e302f32342d3234203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 18:15:00 +0000
ROA not before:           Fri 27 Mar 2026 18:10:00 +0000
ROA not after:            Fri 26 Mar 2027 18:15:00 +0000
asID:                     27828
IP address blocks:        200.7.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0a:21:0e:8f:ed:8e:60:52:39:05:71:d3:7c:c8:7c:28:cc:9f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 18:10:00 2026 GMT
            Not After : Mar 26 18:15:00 2027 GMT
        Subject: CN=198F548A5C61DA53DBD188A9737DBB9A3946B9AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:fe:dd:dc:f3:fa:5f:ef:6e:42:06:7a:c8:
                    cf:13:d9:42:be:4f:35:7f:3c:e3:50:39:b7:27:90:
                    db:75:43:c7:ef:24:47:6f:ad:24:89:ab:91:29:c8:
                    4b:2c:cb:59:84:f5:74:44:0a:25:be:20:1c:b0:85:
                    82:86:fb:30:f1:d6:f8:51:22:b0:85:c0:ae:71:56:
                    38:a6:b1:4e:c6:5a:bf:65:1d:6f:3a:fc:71:da:cd:
                    82:b1:d7:f9:e2:62:cd:eb:c9:7a:87:65:b5:12:2d:
                    86:7d:82:e9:f7:5c:19:5b:96:44:c0:02:d2:4c:61:
                    06:10:42:24:31:f6:04:bf:cd:b0:a1:84:f7:92:e3:
                    f0:f8:6a:74:c8:a5:69:7d:ee:79:68:20:f7:fa:1d:
                    69:29:e4:b1:b3:90:ef:4a:d8:f1:e7:da:21:3e:04:
                    f9:60:d1:cf:37:eb:02:4e:79:57:a5:e6:24:e0:04:
                    a4:ff:0e:99:01:af:4a:e2:83:6b:ac:cf:e5:0d:ae:
                    c0:be:43:f9:ab:73:e9:19:b6:85:90:3f:0f:2b:5d:
                    52:61:8e:b2:8a:53:3a:cc:2b:bb:eb:a2:98:cf:12:
                    29:bf:35:98:bc:0b:19:35:4e:db:e4:40:48:fb:9f:
                    1a:9c:1a:5e:68:49:d9:2e:90:ab:f6:11:d6:ed:0e:
                    35:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:54:8A:5C:61:DA:53:DB:D1:88:A9:73:7D:BB:9A:39:46:B9:AB
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136362e302f32342d3234203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:3a:d3:39:30:58:d8:a0:d8:b5:2a:fe:08:97:82:c0:95:a1:
         68:08:19:1f:a3:b0:7a:ed:ce:2d:cb:0c:35:df:37:dc:ee:b9:
         a6:f2:0f:0b:6a:58:00:1d:85:6b:04:64:22:26:c1:7e:3e:89:
         70:85:06:13:0c:d6:0c:b3:1c:8d:e6:9a:f7:d8:d0:39:e7:5e:
         96:aa:0c:c3:1a:fe:24:ec:aa:c2:ed:06:47:00:3b:6e:0b:87:
         6e:bc:33:9b:f9:09:aa:de:6b:ea:5a:89:d5:a2:da:96:7b:be:
         ec:f3:bc:eb:58:45:04:bc:32:ec:dc:4a:8f:56:c8:8a:5b:d3:
         16:79:6a:86:9e:f6:28:0a:97:63:00:0d:97:5a:29:ce:6d:00:
         48:29:8c:c0:b0:42:69:c3:30:f6:a6:e2:5d:33:e6:66:c6:aa:
         05:79:a4:62:5a:78:28:bf:fa:9a:e8:65:22:90:27:1b:ad:78:
         04:7a:1c:c9:ff:04:95:c8:54:49:6c:79:a9:9e:d1:ef:17:02:
         da:05:70:a4:ea:6d:bc:d9:74:89:85:17:30:ac:39:88:b8:3a:
         11:79:78:d3:0d:c3:da:6d:ff:40:b7:44:4a:25:3d:72:96:87:
         15:bc:06:83:a0:f6:e6:fe:e9:bb:7d:14:b9:2d:2e:e4:6d:72:
         5b:3c:41:bd
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUcgohDo/tjmBSOQVx03zIfCjMn7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4
MTg1MDFEMjAeFw0yNjAzMjcxODEwMDBaFw0yNzAzMjYxODE1MDBaMDMxMTAvBgNV
BAMTKDE5OEY1NDhBNUM2MURBNTNEQkQxODhBOTczN0RCQjlBMzk0NkI5QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9/7d3PP6X+9uQgZ6yM8T2UK+
TzV/PONQObcnkNt1Q8fvJEdvrSSJq5EpyEssy1mE9XRECiW+IBywhYKG+zDx1vhR
IrCFwK5xVjimsU7GWr9lHW86/HHazYKx1/niYs3ryXqHZbUSLYZ9gun3XBlblkTA
AtJMYQYQQiQx9gS/zbChhPeS4/D4anTIpWl97nloIPf6HWkp5LGzkO9K2PHn2iE+
BPlg0c836wJOeVel5iTgBKT/DpkBr0rig2usz+UNrsC+Q/mrc+kZtoWQPw8rXVJh
jrKKUzrMK7vropjPEim/NZi8Cxk1TtvkQEj7nxqcGl5oSdkukKv2EdbtDjXJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUGY9Uilxh2lPb0Yipc327mjlGuaswHwYDVR0j
BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB
NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2
NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3
NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw
QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzAzMDJlMzcyZTMxMzYzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczODMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIB6YwDQYJ
KoZIhvcNAQELBQADggEBAIs60zkwWNig2LUq/giXgsCVoWgIGR+jsHrtzi3LDDXf
N9zuuabyDwtqWAAdhWsEZCImwX4+iXCFBhMM1gyzHI3mmvfY0DnnXpaqDMMa/iTs
qsLtBkcAO24Lh268M5v5Carea+paidWi2pZ7vuzzvOtYRQS8MuzcSo9WyIpb0xZ5
aoae9igKl2MADZdaKc5tAEgpjMCwQmnDMPam4l0z5mbGqgV5pGJaeCi/+proZSKQ
JxuteAR6HMn/BJXIVElseame0e8XAtoFcKTqbbzZdImFFzCsOYi4OhF5eNMNw9pt
/0C3REolPXKWhxW8BoOg9ub+6bt9FLktLuRtcls8Qb0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:41 2026 by rpki-client