Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137312e302f32342d3234203d3e20323734303236.roa
File:                     3230302e372e3137312e302f32342d3234203d3e20323734303236.roa (raw, json)
Hash identifier:          kZtopf2kbtHkJ4u/PF05W+dPYZKqprCUW147jtUAlCo=
Subject key identifier:   63:36:66:A3:5A:86:55:E3:64:D7:9C:3A:9F:18:1A:2E:ED:72:99:AF
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       5A552F44BF73539EE3F7046F40887D65F93AE3E2
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137312e302f32342d3234203d3e20323734303236.roa
Signing time:             Fri 27 Mar 2026 19:30:00 +0000
ROA not before:           Fri 27 Mar 2026 19:25:00 +0000
ROA not after:            Fri 26 Mar 2027 19:30:00 +0000
asID:                     274026
IP address blocks:        200.7.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:55:2f:44:bf:73:53:9e:e3:f7:04:6f:40:88:7d:65:f9:3a:e3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 19:25:00 2026 GMT
            Not After : Mar 26 19:30:00 2027 GMT
        Subject: CN=633666A35A8655E364D79C3A9F181A2EED7299AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:e1:12:79:70:84:87:fb:f2:ec:70:17:7d:
                    65:d7:62:df:38:5d:e7:70:c9:ab:de:39:5e:6f:70:
                    cc:13:3d:e2:fd:95:75:61:58:0c:17:53:85:68:64:
                    8f:76:9c:6c:05:54:df:59:51:20:e1:0e:18:01:39:
                    90:d4:48:af:d3:fb:0e:90:79:b8:17:1d:16:17:94:
                    a8:bf:5f:09:e9:b3:5f:4f:18:13:73:29:60:49:64:
                    ed:de:54:b8:c0:97:08:6f:9a:f0:f1:46:82:ea:8b:
                    f2:49:ef:8b:4b:44:48:bb:70:81:6b:d0:c0:0b:b2:
                    78:71:b7:a2:b6:ab:90:c1:06:1f:ec:7a:d2:67:ad:
                    97:14:cd:ae:04:f5:0e:08:53:28:5f:0e:fb:1d:6b:
                    cc:21:f3:4a:67:a2:da:4e:46:97:90:eb:d4:01:2d:
                    e6:14:8d:92:9b:56:1c:77:98:1f:d8:a1:98:2f:3d:
                    c4:8a:e8:98:be:f8:53:30:41:a2:af:a0:f7:27:56:
                    ec:35:a9:4f:a9:b4:16:a8:35:9b:02:97:1d:66:25:
                    d9:ed:f2:05:82:56:a7:e5:af:02:c5:34:7e:ad:c7:
                    8d:bc:7f:ce:34:b0:9b:02:dd:cb:dc:4d:63:9e:13:
                    b9:83:01:2b:21:72:3b:8f:40:db:2b:83:59:9a:82:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:36:66:A3:5A:86:55:E3:64:D7:9C:3A:9F:18:1A:2E:ED:72:99:AF
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137312e302f32342d3234203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:77:d4:c9:00:ac:43:20:aa:45:2a:e5:30:a8:ef:60:e2:52:
         8a:f8:11:20:7b:18:8b:a9:43:4d:f6:73:ec:3b:15:ea:69:c0:
         e7:c3:74:63:2a:2a:49:98:09:e4:3e:3d:f5:42:e5:c8:9d:3f:
         df:7d:d5:73:ff:85:b7:41:45:fb:50:0d:93:79:0a:be:e7:f7:
         25:38:aa:4f:7b:f0:17:bf:44:31:e3:8d:4c:76:7a:d6:bf:08:
         98:bb:ae:fb:e2:23:85:7a:2a:37:9e:94:10:fb:35:ee:8d:ba:
         59:68:ef:72:1a:f3:41:7d:98:00:af:3e:27:f5:e7:ce:af:c7:
         e5:58:cc:6a:46:b7:35:57:29:b9:03:f9:82:84:3f:2b:bd:1e:
         a8:7b:97:4c:64:37:8d:8e:4a:7b:f3:d0:2a:ea:2e:fe:97:ac:
         e7:79:12:10:f4:60:6a:8f:34:93:d3:8d:b9:43:69:05:aa:ff:
         1a:32:85:5f:a1:3a:6e:bd:6e:1e:84:d3:be:5f:90:b2:c6:b8:
         2a:c9:06:9b:2d:eb:c1:4f:eb:d5:53:e8:86:fe:ab:cd:30:b8:
         98:0c:e4:5e:c8:51:55:c8:a6:ac:ed:9b:53:39:da:27:06:68:
         02:27:dc:6d:b6:f9:7c:88:ae:42:58:df:15:b9:52:bb:ef:70:
         1f:8e:dd:fb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWlUvRL9zU57j9wRvQIh9Zfk64+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4
MTg1MDFEMjAeFw0yNjAzMjcxOTI1MDBaFw0yNzAzMjYxOTMwMDBaMDMxMTAvBgNV
BAMTKDYzMzY2NkEzNUE4NjU1RTM2NEQ3OUMzQTlGMTgxQTJFRUQ3Mjk5QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmtOESeXCEh/vy7HAXfWXXYt84
XedwyaveOV5vcMwTPeL9lXVhWAwXU4VoZI92nGwFVN9ZUSDhDhgBOZDUSK/T+w6Q
ebgXHRYXlKi/Xwnps19PGBNzKWBJZO3eVLjAlwhvmvDxRoLqi/JJ74tLREi7cIFr
0MALsnhxt6K2q5DBBh/setJnrZcUza4E9Q4IUyhfDvsda8wh80pnotpORpeQ69QB
LeYUjZKbVhx3mB/YoZgvPcSK6Ji++FMwQaKvoPcnVuw1qU+ptBaoNZsClx1mJdnt
8gWCVqflrwLFNH6tx428f840sJsC3cvcTWOeE7mDASshcjuPQNsrg1mago+LAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYzZmo1qGVeNk15w6nxgaLu1yma8wHwYDVR0j
BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB
NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2
NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3
NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw
QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzAzMDJlMzcyZTMxMzczMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNDMwMzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgHqzAN
BgkqhkiG9w0BAQsFAAOCAQEALXfUyQCsQyCqRSrlMKjvYOJSivgRIHsYi6lDTfZz
7DsV6mnA58N0YyoqSZgJ5D499ULlyJ0/333Vc/+Ft0FF+1ANk3kKvuf3JTiqT3vw
F79EMeONTHZ61r8ImLuu++IjhXoqN56UEPs17o26WWjvchrzQX2YAK8+J/Xnzq/H
5VjMaka3NVcpuQP5goQ/K70eqHuXTGQ3jY5Ke/PQKuou/pes53kSEPRgao80k9ON
uUNpBar/GjKFX6E6br1uHoTTvl+Qssa4KskGmy3rwU/r1VPohv6rzTC4mAzkXshR
VcimrO2bUznaJwZoAifcbbb5fIiuQljfFblSu+9wH47d+w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:52 2026 by rpki-client