Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137332e302f32342d3234203d3e203237383238.roa
File:                     3230302e372e3137332e302f32342d3234203d3e203237383238.roa (raw, json)
Hash identifier:          t0DHaEd59d5t8lMCbibNgxgF8xkVsCs14bFwpOwzp5E=
Subject key identifier:   97:B7:62:B9:CF:ED:28:B9:A2:A4:35:3C:85:BF:27:C0:61:06:F4:9F
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       56EC20DFB242F97300DE925A8DD1F24AAD6FB84D
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137332e302f32342d3234203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 18:15:02 +0000
ROA not before:           Fri 27 Mar 2026 18:10:02 +0000
ROA not after:            Fri 26 Mar 2027 18:15:02 +0000
asID:                     27828
IP address blocks:        200.7.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ec:20:df:b2:42:f9:73:00:de:92:5a:8d:d1:f2:4a:ad:6f:b8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 18:10:02 2026 GMT
            Not After : Mar 26 18:15:02 2027 GMT
        Subject: CN=97B762B9CFED28B9A2A4353C85BF27C06106F49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:a5:10:df:51:27:b5:1d:fd:18:71:0b:99:
                    2f:94:ad:93:6b:79:9b:db:aa:dd:fc:66:c2:fb:bb:
                    92:14:a5:6a:98:c5:7d:6e:ff:23:e4:5b:37:fb:9a:
                    e9:ac:48:80:3b:2c:43:9a:3a:c4:82:f7:1c:38:ba:
                    bb:4b:1e:f2:91:c8:38:c6:fc:01:f5:38:40:35:fe:
                    c7:39:b8:46:68:03:c8:a2:fb:d4:f0:2b:2d:26:50:
                    2e:95:20:ee:81:f1:21:d1:b1:bb:2b:6d:e8:72:94:
                    2b:21:86:b6:12:5c:83:6c:78:fe:f1:ee:3a:bb:dc:
                    96:76:ea:b8:be:77:ab:6e:b5:6d:53:04:ef:39:4e:
                    da:e4:69:12:59:b8:a3:ae:81:cb:f9:6d:21:25:a8:
                    3b:00:76:31:76:6a:dc:56:21:26:93:24:b4:f9:09:
                    33:06:ae:39:37:32:6a:1a:c2:f2:bc:85:1f:e4:70:
                    42:7e:1c:35:5b:74:6a:3f:97:17:0f:34:63:e1:87:
                    d7:31:9e:0f:ec:cd:6e:18:ce:79:79:01:51:d3:15:
                    8d:1e:45:83:ac:ea:5a:fb:7c:c9:15:de:da:e0:ff:
                    a8:ae:80:ef:90:98:8e:cc:98:b9:5f:69:e5:38:db:
                    44:8d:fb:de:b2:f1:ac:ea:83:61:8f:c0:d0:9a:22:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B7:62:B9:CF:ED:28:B9:A2:A4:35:3C:85:BF:27:C0:61:06:F4:9F
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137332e302f32342d3234203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:90:3f:7a:e4:5a:d3:bc:7a:7d:35:1b:a0:d9:7c:29:04:
         7e:56:e7:58:87:5f:af:b7:0f:10:40:a9:f5:d9:51:62:1e:c8:
         63:6d:88:8c:db:fe:83:b0:6c:da:52:aa:3d:08:df:d9:78:d0:
         be:b5:ca:eb:f0:aa:1f:61:b9:57:60:82:03:7d:e9:c9:66:a1:
         63:a1:b2:27:91:9c:0a:29:df:70:91:74:1c:4d:95:34:e2:9c:
         57:70:a9:90:b7:7e:89:d7:35:d3:df:c8:a1:19:41:e8:af:0b:
         96:41:db:89:58:be:1d:a7:f7:eb:e7:5a:ea:e9:d6:55:db:62:
         c0:8a:90:de:6a:09:97:09:62:e9:c6:8d:4e:79:d1:f8:e0:4f:
         7f:64:de:11:f4:77:2a:87:f2:0f:77:15:f2:9d:30:26:83:bd:
         f3:0e:47:04:e0:d3:d9:93:d9:66:c4:2c:3d:9f:a7:49:71:5d:
         0d:f8:d4:34:35:fd:bd:63:51:65:b2:ef:4c:eb:2e:12:43:92:
         56:c5:26:a4:49:17:07:d4:aa:f6:96:45:73:09:a6:63:72:69:
         11:ea:db:12:01:ec:1e:26:d7:f2:3b:8f:ba:cf:5f:44:77:c6:
         b8:47:e3:ab:4b:c1:77:2d:b8:8a:47:59:ec:05:2f:ce:d1:27:
         e5:bb:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:25 2026 by rpki-client