Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136372e302f32342d3234203d3e203237383238.roa
File:                     3230302e372e3136372e302f32342d3234203d3e203237383238.roa (raw, json)
Hash identifier:          d0oojpmIp9VZSsp3DZym3oLqyxdFb3oXKp/ZQjTeVQc=
Subject key identifier:   1D:CE:16:3F:09:08:98:53:BE:0D:1B:47:CB:8E:64:98:50:D3:C8:23
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       73B2409BD31BAE0B524B058B873076B4467A082F
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136372e302f32342d3234203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 18:15:00 +0000
ROA not before:           Fri 27 Mar 2026 18:10:00 +0000
ROA not after:            Fri 26 Mar 2027 18:15:00 +0000
asID:                     27828
IP address blocks:        200.7.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b2:40:9b:d3:1b:ae:0b:52:4b:05:8b:87:30:76:b4:46:7a:08:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 18:10:00 2026 GMT
            Not After : Mar 26 18:15:00 2027 GMT
        Subject: CN=1DCE163F09089853BE0D1B47CB8E649850D3C823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:6d:d0:81:5d:e3:2e:69:12:12:7d:a1:07:78:
                    c0:09:47:81:86:06:3b:76:7d:b2:de:4e:f2:c2:a7:
                    55:b8:b1:75:f4:c8:c7:c2:d3:24:39:a2:ce:6f:34:
                    44:16:f9:c8:a1:55:e9:98:0a:d9:e2:83:71:ac:35:
                    96:b0:22:71:b0:c5:83:a6:42:f0:05:b4:1c:24:2a:
                    ac:9a:bf:e9:3b:ec:03:0c:aa:10:3f:4b:e2:c6:67:
                    2c:9a:d9:40:5a:bf:30:21:22:5d:5c:33:81:35:d3:
                    e1:f1:b0:c6:a2:11:46:54:c3:28:be:4b:d9:f6:92:
                    61:3b:36:2c:fd:40:06:d5:72:a7:58:55:6b:5e:2d:
                    ca:96:06:b5:e5:45:09:b9:63:4a:75:95:63:f9:f5:
                    19:d6:4b:9a:fe:d5:28:e2:6c:86:bf:fe:97:0c:08:
                    f0:fa:fc:dd:72:21:ac:39:24:ea:27:3c:90:f6:99:
                    0b:89:b1:d0:fc:12:3a:bd:41:16:2b:71:03:56:fe:
                    e5:3f:c5:c1:7e:14:09:61:74:6b:9b:99:41:58:ea:
                    c5:dc:6e:e7:9c:ba:6f:22:db:f4:db:3d:82:38:5c:
                    a2:3c:1d:c9:36:45:07:63:11:8a:95:e9:05:24:ac:
                    70:cc:b4:d1:6f:a6:13:0b:c9:5a:d5:5d:f7:d7:ae:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CE:16:3F:09:08:98:53:BE:0D:1B:47:CB:8E:64:98:50:D3:C8:23
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136372e302f32342d3234203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:01:b3:0c:82:d4:30:bb:8c:ca:14:95:6f:57:ec:ee:e2:ab:
         93:35:fe:ab:51:ba:07:77:83:b2:c1:9b:f8:9b:18:f3:86:0c:
         b1:e9:dd:82:21:e3:88:2e:e0:7a:95:51:db:24:ec:2e:51:e2:
         2e:59:eb:c5:3f:0c:be:0b:8a:3f:00:c3:a8:9d:98:8e:1e:e9:
         a1:80:a5:b7:89:0c:12:19:b0:2c:c3:a8:50:93:85:82:14:a0:
         61:00:49:33:90:45:51:df:52:cf:47:ab:c7:90:7b:1f:ca:85:
         7b:a9:29:11:28:31:a5:2e:71:e3:5b:84:2d:a8:70:d5:ea:00:
         02:aa:08:40:07:4b:7d:e8:72:ef:11:d5:c2:94:f2:10:4a:cd:
         df:e8:29:43:95:ca:cc:3c:65:48:25:c6:2c:f5:f3:e4:91:54:
         24:df:ef:9e:ca:df:30:53:2f:f3:a0:42:98:18:53:f7:6b:02:
         ec:1e:9f:62:14:c9:95:52:cf:d5:cc:a7:14:5a:7c:0d:b5:41:
         9a:08:af:7d:ad:86:12:51:bc:48:68:0f:54:26:f4:c9:2a:44:
         bc:c9:d3:11:bb:b7:57:25:ac:0a:0d:2b:b3:87:23:72:f5:05:
         4c:6c:8e:ee:24:4e:c9:a9:07:5a:37:79:9f:b6:26:42:88:d9:
         f6:89:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:48 2026 by rpki-client