Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137352e302f32342d3234203d3e203237383238.roa
File:                     3230302e372e3137352e302f32342d3234203d3e203237383238.roa (raw, json)
Hash identifier:          EKi6QC5CgWG3LzlZdxJNBgEigmn2MOhgGa8NpMwLpIc=
Subject key identifier:   A7:45:F7:B7:B2:B3:9D:60:00:BC:AE:92:78:47:28:65:03:BE:DB:59
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       115B64BEA8173F0DB2C47DF88D3A6804A8EACD63
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137352e302f32342d3234203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 18:15:03 +0000
ROA not before:           Fri 27 Mar 2026 18:10:03 +0000
ROA not after:            Fri 26 Mar 2027 18:15:03 +0000
asID:                     27828
IP address blocks:        200.7.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5b:64:be:a8:17:3f:0d:b2:c4:7d:f8:8d:3a:68:04:a8:ea:cd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 18:10:03 2026 GMT
            Not After : Mar 26 18:15:03 2027 GMT
        Subject: CN=A745F7B7B2B39D6000BCAE927847286503BEDB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:d2:eb:cd:27:b3:40:82:a9:f3:6c:4d:1e:
                    74:b0:8c:bf:05:d7:6d:af:ba:d9:ca:04:8b:d7:72:
                    55:56:33:00:b8:c4:81:b4:e7:a0:c0:85:eb:4d:9c:
                    90:c4:80:38:66:68:69:f9:c3:45:84:ae:eb:5e:48:
                    3a:e1:db:fc:d6:0f:c5:a9:86:52:0f:45:c8:71:84:
                    f6:36:14:03:3d:9f:90:66:7d:31:cd:e4:dd:21:95:
                    ef:6f:1a:7c:86:c2:a4:c9:9c:40:11:75:e8:e4:13:
                    f3:11:ab:6c:bf:63:de:bb:73:25:75:2c:7e:27:57:
                    4a:2a:4a:79:e0:60:23:0a:fe:55:d7:8c:4f:ce:48:
                    db:d7:02:4d:fd:f1:1f:9c:97:f3:08:e9:97:e5:1e:
                    59:ac:a7:3b:e4:67:1b:7a:7a:80:a9:83:f7:79:f8:
                    ce:41:92:b6:5a:07:d2:bf:9c:95:37:e3:c2:81:9f:
                    d1:fc:9b:4f:ea:41:fc:cd:31:bc:86:22:dd:f4:0c:
                    20:ec:2d:0b:dd:e7:d3:e2:26:63:50:40:4f:cc:f2:
                    78:1e:05:6b:55:8e:d4:98:00:6e:b6:f7:8d:5c:9d:
                    59:29:33:50:cf:26:59:cf:45:df:6f:b0:7f:18:7f:
                    59:af:a5:34:86:1c:3d:af:2c:46:e9:41:47:4b:d2:
                    6a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:45:F7:B7:B2:B3:9D:60:00:BC:AE:92:78:47:28:65:03:BE:DB:59
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137352e302f32342d3234203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c1:8b:db:ff:26:64:3a:fd:40:77:cd:93:68:f8:74:0b:57:
         a3:92:4c:83:0a:15:7b:7c:1e:33:3a:ca:d2:1b:60:ce:ab:49:
         70:03:35:e1:58:0d:cd:1c:61:5a:3c:06:57:c6:4b:33:30:da:
         82:b1:d3:00:ad:db:bb:97:06:c6:a6:9d:5a:20:12:08:44:f0:
         4c:67:09:8c:ba:10:c3:06:34:55:f7:d2:4f:86:1c:eb:35:1f:
         19:5f:f9:29:14:89:4d:b0:32:7f:73:f2:28:49:3f:1a:e8:a7:
         12:ff:ba:b8:67:f2:dc:81:c4:92:4d:b0:93:02:29:cc:59:77:
         8d:ac:58:8a:df:0b:de:12:b3:dc:50:37:4a:00:8d:9c:a8:ca:
         a0:8c:4b:d6:41:0b:a1:9c:22:4e:1c:e6:bb:d5:06:16:81:5d:
         64:4a:22:7d:2f:0c:3d:57:8c:2b:56:ba:b7:a0:f9:cb:8f:5e:
         2c:1d:a5:8f:5c:d6:f3:08:51:e7:cc:98:5f:e0:68:51:ac:fc:
         46:d5:f2:e6:e0:67:d9:22:48:4e:27:bc:11:d6:df:35:99:1a:
         00:12:99:0c:07:14:6f:fd:9c:02:63:71:7a:46:8d:16:ec:c8:
         de:6d:c8:b7:8b:36:0a:73:35:8f:86:b6:e5:92:ec:81:a0:a8:
         31:4e:c5:4d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUEVtkvqgXPw2yxH34jTpoBKjqzWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4
MTg1MDFEMjAeFw0yNjAzMjcxODEwMDNaFw0yNzAzMjYxODE1MDNaMDMxMTAvBgNV
BAMTKEE3NDVGN0I3QjJCMzlENjAwMEJDQUU5Mjc4NDcyODY1MDNCRURCNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEstLrzSezQIKp82xNHnSwjL8F
122vutnKBIvXclVWMwC4xIG056DAhetNnJDEgDhmaGn5w0WEruteSDrh2/zWD8Wp
hlIPRchxhPY2FAM9n5BmfTHN5N0hle9vGnyGwqTJnEARdejkE/MRq2y/Y967cyV1
LH4nV0oqSnngYCMK/lXXjE/OSNvXAk398R+cl/MI6ZflHlmspzvkZxt6eoCpg/d5
+M5BkrZaB9K/nJU348KBn9H8m0/qQfzNMbyGIt30DCDsLQvd59PiJmNQQE/M8nge
BWtVjtSYAG62941cnVkpM1DPJlnPRd9vsH8Yf1mvpTSGHD2vLEbpQUdL0mqJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUp0X3t7KznWAAvK6SeEcoZQO+21kwHwYDVR0j
BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB
NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2
NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3
NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw
QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzAzMDJlMzcyZTMxMzczNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczODMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIB68wDQYJ
KoZIhvcNAQELBQADggEBAEPBi9v/JmQ6/UB3zZNo+HQLV6OSTIMKFXt8HjM6ytIb
YM6rSXADNeFYDc0cYVo8BlfGSzMw2oKx0wCt27uXBsamnVogEghE8ExnCYy6EMMG
NFX30k+GHOs1Hxlf+SkUiU2wMn9z8ihJPxropxL/urhn8tyBxJJNsJMCKcxZd42s
WIrfC94Ss9xQN0oAjZyoyqCMS9ZBC6GcIk4c5rvVBhaBXWRKIn0vDD1XjCtWureg
+cuPXiwdpY9c1vMIUefMmF/gaFGs/EbV8ubgZ9kiSE4nvBHW3zWZGgASmQwHFG/9
nAJjcXpGjRbsyN5tyLeLNgpzNY+GtuWS7IGgqDFOxU0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:36 2026 by rpki-client