Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136382e302f32342d3234203d3e20323734303236.roa
File:                     3230302e372e3136382e302f32342d3234203d3e20323734303236.roa (raw, json)
Hash identifier:          3MtZsDey2ica2k65xAvsSeOf6Cf7rcZnZ5bREkxmsgU=
Subject key identifier:   96:CB:9A:B3:0D:55:99:78:A2:3B:BA:BA:4F:BC:65:1D:8A:1F:58:11
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       296CDB8EB7E8AF85D9E137512C0865C4F6CA1CD9
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136382e302f32342d3234203d3e20323734303236.roa
Signing time:             Fri 27 Mar 2026 19:30:02 +0000
ROA not before:           Fri 27 Mar 2026 19:25:02 +0000
ROA not after:            Fri 26 Mar 2027 19:30:02 +0000
asID:                     274026
IP address blocks:        200.7.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6c:db:8e:b7:e8:af:85:d9:e1:37:51:2c:08:65:c4:f6:ca:1c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 19:25:02 2026 GMT
            Not After : Mar 26 19:30:02 2027 GMT
        Subject: CN=96CB9AB30D559978A23BBABA4FBC651D8A1F5811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:fa:ef:a7:66:a0:13:c0:8b:4c:bc:76:be:
                    01:7f:3f:2d:ea:cc:d4:7e:b2:91:4f:37:40:b4:a4:
                    d0:7b:d4:63:00:b2:a6:e5:d4:fd:ce:5d:7c:cf:3f:
                    b1:9b:4b:50:53:12:50:21:b1:9a:71:ce:1b:cd:30:
                    0d:1e:a3:b4:04:85:cd:93:06:ed:5f:95:2f:79:ca:
                    29:46:ca:13:7d:b2:f0:79:8f:93:dc:19:d3:87:75:
                    c8:9d:db:23:bb:3a:4d:1e:29:8d:68:f3:a7:e4:f0:
                    f7:b6:84:eb:a4:97:90:c9:ef:72:ca:c5:c4:c8:bd:
                    4e:b2:07:af:4f:39:d7:6c:8d:b4:33:8b:f4:9e:ed:
                    bc:a7:01:4c:ae:aa:1c:2e:9d:64:f7:48:d7:a6:5c:
                    70:3b:2d:fb:f4:7a:fb:5c:38:e0:91:cd:65:c9:a2:
                    64:e1:8b:4c:38:6f:50:5d:a0:78:06:ee:43:2a:bf:
                    17:b4:76:c2:07:d3:e3:3a:96:1d:3b:18:91:0b:0e:
                    69:f1:df:7e:be:ce:97:ed:1c:76:3b:47:88:e9:48:
                    eb:90:01:22:21:63:d9:9c:8d:f0:a8:6b:3b:65:52:
                    c2:ac:09:b9:7a:bc:a1:09:ac:e1:05:91:25:67:df:
                    7e:36:df:2e:2c:09:bd:07:da:07:9c:47:c6:73:1b:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CB:9A:B3:0D:55:99:78:A2:3B:BA:BA:4F:BC:65:1D:8A:1F:58:11
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136382e302f32342d3234203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:d6:37:71:5d:35:45:7f:77:6f:aa:99:fc:7b:0e:12:79:
         66:ab:43:11:a6:79:48:d7:2b:92:45:0c:60:73:0d:5c:43:d2:
         4d:b1:90:7a:cd:39:fb:13:c3:c6:72:07:0b:38:ae:d1:a0:36:
         38:fc:d6:60:42:10:e4:a9:f6:0f:1e:3f:73:7e:b5:54:e2:98:
         6f:5d:96:2e:27:69:83:df:1c:4c:7d:b6:3f:b0:4b:9b:1d:f7:
         95:10:2d:8b:38:95:45:9b:59:00:92:f5:c5:01:9b:cc:3a:c5:
         51:b0:8c:8e:f3:30:fe:b4:ed:9a:ad:5f:9d:f0:75:3e:35:b3:
         a4:53:31:62:bc:1f:3c:87:8c:15:5a:e7:5d:48:1b:48:52:c8:
         19:b7:11:6c:95:2e:fb:1f:fa:2f:bf:e0:83:a4:8b:7d:28:57:
         e8:14:64:bd:3a:dc:d2:3d:1d:89:62:70:54:e0:35:ed:63:32:
         94:83:6d:e8:2f:1e:2d:74:e5:8d:bc:48:3f:ee:e5:78:48:e7:
         8e:38:d7:91:59:0f:ae:f2:17:e4:74:ba:73:b3:21:da:41:9f:
         b0:4a:cf:a9:7d:ea:28:f8:f7:91:03:30:6a:49:c5:da:3b:ea:
         78:61:68:9e:ea:62:aa:ff:e2:a9:96:f0:3a:29:f0:70:d8:c8:
         8e:75:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:08 2026 by rpki-client