Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137342e302f32342d3234203d3e203237383238.roa
File:                     3230302e372e3137342e302f32342d3234203d3e203237383238.roa (raw, json)
Hash identifier:          CWMei7tyswpphlR4pMdsEH8hbsp9WHLgJSa9/PHq6/0=
Subject key identifier:   0D:67:62:6A:27:E5:B5:00:93:5F:C9:23:7A:23:78:C9:47:C7:AF:A3
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       3DAAC6787F48547DFCBD0233E04F5CC94CCA04D4
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137342e302f32342d3234203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 18:15:02 +0000
ROA not before:           Fri 27 Mar 2026 18:10:02 +0000
ROA not after:            Fri 26 Mar 2027 18:15:02 +0000
asID:                     27828
IP address blocks:        200.7.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:aa:c6:78:7f:48:54:7d:fc:bd:02:33:e0:4f:5c:c9:4c:ca:04:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 18:10:02 2026 GMT
            Not After : Mar 26 18:15:02 2027 GMT
        Subject: CN=0D67626A27E5B500935FC9237A2378C947C7AFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:2a:84:7e:b4:fb:f5:46:79:46:b1:83:72:
                    8d:b0:55:e0:c7:44:f9:e6:c5:d2:f5:db:bc:16:9c:
                    99:e9:ea:5c:0b:d3:ea:f6:da:6f:96:36:bf:c2:a9:
                    05:e8:f6:03:bb:4b:db:4f:67:68:b1:63:ce:ed:0d:
                    a6:da:e0:cb:23:b4:6c:6d:31:9d:7f:31:e4:5f:b4:
                    55:92:2c:f4:2e:d2:04:d8:ad:23:82:49:6d:ba:53:
                    dc:34:13:b8:c1:03:97:c9:4b:e3:06:9e:63:43:51:
                    a5:61:6e:f4:a8:b0:31:17:58:96:79:7a:cb:3e:34:
                    00:84:04:db:0a:7f:86:29:03:b2:1f:88:97:96:65:
                    55:bf:e2:fd:8b:5d:5f:fc:94:8c:ed:c0:ce:1c:9e:
                    38:97:9f:b6:00:5a:6b:13:01:00:6a:35:e1:8e:e2:
                    60:c6:ce:40:96:25:30:b6:00:28:e0:26:11:e7:89:
                    c2:c5:d7:17:7e:49:89:d2:f4:2a:b1:28:1d:3d:5c:
                    9e:0e:16:19:88:7f:9b:9c:64:92:09:82:32:41:3a:
                    ca:75:93:c3:3a:95:7f:70:2b:ac:8e:29:29:66:73:
                    c9:bb:a5:13:be:db:3a:46:58:2a:48:81:37:f1:06:
                    db:5a:9b:cd:b4:02:77:7f:e5:96:ee:b0:c2:52:16:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:67:62:6A:27:E5:B5:00:93:5F:C9:23:7A:23:78:C9:47:C7:AF:A3
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137342e302f32342d3234203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:b7:93:00:61:d2:e2:96:40:77:13:37:cd:ce:68:a8:f1:85:
         79:fe:d7:1d:78:f6:a4:34:49:04:5b:10:80:2a:72:76:34:d3:
         8a:67:19:0b:8a:cb:85:3e:2f:3d:d5:6c:6f:d5:40:53:86:7c:
         9f:21:c5:d4:d4:4e:36:dc:08:d9:48:29:6e:3a:71:90:c0:76:
         ef:e0:9d:91:5e:bf:eb:63:6f:8d:06:8d:ec:64:78:06:a7:65:
         ac:aa:da:ad:26:7b:7a:3d:31:d9:fc:f3:df:ac:81:d8:2a:14:
         c1:09:07:45:ef:5d:6c:7f:fd:46:13:dd:6e:9b:b3:c2:9c:7a:
         7b:a3:59:31:e1:31:9a:99:ae:c4:1e:62:a1:3b:af:51:76:61:
         fc:33:d4:53:c3:21:77:36:97:4b:30:80:85:54:12:94:bb:19:
         49:18:11:53:cd:21:e5:a8:9b:16:84:57:ea:8d:b2:6c:6f:67:
         5e:4e:cb:73:ed:69:83:e2:25:66:90:9c:8d:b4:42:61:1e:3f:
         84:2e:57:8f:20:a0:3d:c2:d4:f1:cf:5a:13:2f:cf:b4:22:b5:
         db:b9:b8:8e:38:c0:32:44:31:7d:30:f0:67:3a:2e:92:82:61:
         19:72:08:6a:dd:77:6f:5f:23:e6:6b:e8:b6:42:59:cb:f7:97:
         d1:2d:14:8b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUParGeH9IVH38vQIz4E9cyUzKBNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4
MTg1MDFEMjAeFw0yNjAzMjcxODEwMDJaFw0yNzAzMjYxODE1MDJaMDMxMTAvBgNV
BAMTKDBENjc2MjZBMjdFNUI1MDA5MzVGQzkyMzdBMjM3OEM5NDdDN0FGQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZSqEfrT79UZ5RrGDco2wVeDH
RPnmxdL127wWnJnp6lwL0+r22m+WNr/CqQXo9gO7S9tPZ2ixY87tDaba4MsjtGxt
MZ1/MeRftFWSLPQu0gTYrSOCSW26U9w0E7jBA5fJS+MGnmNDUaVhbvSosDEXWJZ5
ess+NACEBNsKf4YpA7IfiJeWZVW/4v2LXV/8lIztwM4cnjiXn7YAWmsTAQBqNeGO
4mDGzkCWJTC2ACjgJhHnicLF1xd+SYnS9CqxKB09XJ4OFhmIf5ucZJIJgjJBOsp1
k8M6lX9wK6yOKSlmc8m7pRO+2zpGWCpIgTfxBttam820And/5ZbusMJSFll5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUDWdiaifltQCTX8kjeiN4yUfHr6MwHwYDVR0j
BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB
NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2
NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3
NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw
QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzAzMDJlMzcyZTMxMzczNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczODMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIB64wDQYJ
KoZIhvcNAQELBQADggEBAEC3kwBh0uKWQHcTN83OaKjxhXn+1x149qQ0SQRbEIAq
cnY004pnGQuKy4U+Lz3VbG/VQFOGfJ8hxdTUTjbcCNlIKW46cZDAdu/gnZFev+tj
b40GjexkeAanZayq2q0me3o9Mdn889+sgdgqFMEJB0XvXWx//UYT3W6bs8Kcenuj
WTHhMZqZrsQeYqE7r1F2Yfwz1FPDIXc2l0swgIVUEpS7GUkYEVPNIeWomxaEV+qN
smxvZ15Oy3PtaYPiJWaQnI20QmEeP4QuV48goD3C1PHPWhMvz7Qitdu5uI44wDJE
MX0w8Gc6LpKCYRlyCGrdd29fI+Zr6LZCWcv3l9EtFIs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:32 2026 by rpki-client