Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137342e302f32342d3234203d3e20323734303236.roa
File:                     3230302e372e3137342e302f32342d3234203d3e20323734303236.roa (raw, json)
Hash identifier:          eiHtxXoGMIhuFJ1oP0qEB1khewFTiNXqcDs51Zc29dc=
Subject key identifier:   C3:88:75:E9:F8:1A:73:3A:DD:AD:6C:F1:1B:2E:F3:1C:BB:73:E2:7C
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       7E2F45089618620A6E1172D12300D7C6601862F3
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137342e302f32342d3234203d3e20323734303236.roa
Signing time:             Fri 27 Mar 2026 19:30:01 +0000
ROA not before:           Fri 27 Mar 2026 19:25:01 +0000
ROA not after:            Fri 26 Mar 2027 19:30:01 +0000
asID:                     274026
IP address blocks:        200.7.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2f:45:08:96:18:62:0a:6e:11:72:d1:23:00:d7:c6:60:18:62:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 19:25:01 2026 GMT
            Not After : Mar 26 19:30:01 2027 GMT
        Subject: CN=C38875E9F81A733ADDAD6CF11B2EF31CBB73E27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:ac:74:1d:ff:42:f4:dc:c3:5d:d0:84:dd:
                    62:04:0f:87:13:b7:55:45:c5:b9:f5:74:e9:89:09:
                    6c:ae:a3:ff:59:3b:14:c1:1f:d8:97:cb:71:b3:6d:
                    7a:89:12:b3:7d:76:6f:73:15:18:32:92:90:cf:64:
                    55:f4:80:ad:37:33:52:b6:29:c2:70:73:bc:b5:4e:
                    db:7a:9c:9f:a2:ff:16:07:90:30:6d:db:c7:b1:65:
                    9c:2b:51:43:89:f1:f6:8c:7e:5f:b6:26:ca:1a:77:
                    fd:31:b1:51:b2:c2:82:2b:f6:d4:c4:ca:75:b3:05:
                    96:83:97:b6:0c:ab:c4:cd:37:9b:b8:fd:ac:0a:91:
                    f1:91:24:5d:2e:5a:b9:b0:b4:d5:39:5e:a8:fd:a3:
                    d2:23:91:15:f6:9a:35:5e:10:3f:76:b8:b9:b6:8b:
                    45:21:69:21:5c:e8:48:0c:ff:36:55:5a:67:92:d3:
                    53:3b:56:f0:b5:5d:89:3d:eb:46:ff:b3:71:75:70:
                    32:7c:cf:30:82:f9:b7:11:ff:e9:aa:7e:95:1b:11:
                    d5:29:d4:d4:5e:ee:a8:bc:79:57:79:26:3f:fc:fb:
                    3e:25:27:f0:57:35:53:7f:2a:12:11:33:64:eb:11:
                    0f:36:94:3f:f1:5a:cf:99:9f:b5:f0:a2:cb:96:8d:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:88:75:E9:F8:1A:73:3A:DD:AD:6C:F1:1B:2E:F3:1C:BB:73:E2:7C
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137342e302f32342d3234203d3e20323734303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:27:30:1a:27:bf:79:7d:19:a9:5f:9f:cc:8a:ba:da:69:
         53:0a:6c:a5:67:e4:f3:df:ac:fc:60:d8:db:13:36:08:9a:3f:
         d1:3a:f7:ea:76:76:02:e7:72:e2:0c:bf:06:2e:cf:89:af:14:
         eb:d9:32:98:7a:22:f4:2f:78:c7:68:a2:72:6b:54:69:6c:7f:
         2b:e1:f7:c8:d2:6a:85:2e:fb:76:90:fc:0c:2c:6c:0a:c8:64:
         64:5a:c7:6a:4c:41:3b:c3:30:9c:cf:ea:2c:dd:80:bb:fb:0a:
         b4:73:2f:9a:e1:52:cc:ed:a9:b5:20:b1:e8:10:5c:87:54:ed:
         d8:b9:a5:66:8e:af:4e:cc:a7:af:00:b0:fe:3e:5b:1d:6a:f9:
         83:45:35:58:e4:16:52:c4:57:c7:c1:6f:1b:f3:32:6b:b3:c9:
         08:81:ea:b9:fb:f4:8d:2f:74:18:e2:92:4e:7a:a4:fb:df:21:
         ce:ea:2a:e8:00:83:9f:43:a1:90:40:5f:73:07:29:7a:93:5d:
         1d:f4:57:ea:81:c2:80:42:9d:64:bf:32:ed:28:32:02:4d:e6:
         4c:ee:0d:53:85:80:a8:16:96:f1:a4:7e:f9:04:71:a3:4e:26:
         fb:67:f1:7b:16:73:00:bd:6b:e5:4b:72:84:00:f7:e4:33:0f:
         d2:ba:ea:28
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfi9FCJYYYgpuEXLRIwDXxmAYYvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4
MTg1MDFEMjAeFw0yNjAzMjcxOTI1MDFaFw0yNzAzMjYxOTMwMDFaMDMxMTAvBgNV
BAMTKEMzODg3NUU5RjgxQTczM0FEREFENkNGMTFCMkVGMzFDQkI3M0UyN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FKx0Hf9C9NzDXdCE3WIED4cT
t1VFxbn1dOmJCWyuo/9ZOxTBH9iXy3GzbXqJErN9dm9zFRgykpDPZFX0gK03M1K2
KcJwc7y1Ttt6nJ+i/xYHkDBt28exZZwrUUOJ8faMfl+2Jsoad/0xsVGywoIr9tTE
ynWzBZaDl7YMq8TNN5u4/awKkfGRJF0uWrmwtNU5Xqj9o9IjkRX2mjVeED92uLm2
i0UhaSFc6EgM/zZVWmeS01M7VvC1XYk960b/s3F1cDJ8zzCC+bcR/+mqfpUbEdUp
1NRe7qi8eVd5Jj/8+z4lJ/BXNVN/KhIRM2TrEQ82lD/xWs+Zn7XwosuWjZqRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUw4h16fgaczrdrWzxGy7zHLtz4nwwHwYDVR0j
BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB
NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2
NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3
NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw
QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzAzMDJlMzcyZTMxMzczNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNDMwMzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgHrjAN
BgkqhkiG9w0BAQsFAAOCAQEAHTcnMBonv3l9Galfn8yKutppUwpspWfk89+s/GDY
2xM2CJo/0Tr36nZ2Audy4gy/Bi7Pia8U69kymHoi9C94x2iicmtUaWx/K+H3yNJq
hS77dpD8DCxsCshkZFrHakxBO8MwnM/qLN2Au/sKtHMvmuFSzO2ptSCx6BBch1Tt
2LmlZo6vTsynrwCw/j5bHWr5g0U1WOQWUsRXx8FvG/Mya7PJCIHqufv0jS90GOKS
Tnqk+98hzuoq6ACDn0OhkEBfcwcpepNdHfRX6oHCgEKdZL8y7SgyAk3mTO4NU4WA
qBaW8aR++QRxo04m+2fxexZzAL1r5UtyhAD35DMP0rrqKA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:09 2026 by rpki-client