Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135332e302f32342d3234203d3e203532323730.roa
File:                     3230302e38352e3135332e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          rW/ZIS9tt+8gVs2zro9wsdYcbzJmwlBOMayr550f9+Q=
Subject key identifier:   14:E2:26:2D:5D:8C:35:15:19:6C:28:8A:E2:DE:BB:72:1A:4B:0D:7D
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       407C363378F0679D23F6055FF05D96F394EE245A
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135332e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 14 Oct 2026 20:40:23 +0000
ROA not before:           Wed 14 Oct 2026 20:35:23 +0000
ROA not after:            Wed 13 Oct 2027 20:40:23 +0000
asID:                     52270
IP address blocks:        200.85.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7c:36:33:78:f0:67:9d:23:f6:05:5f:f0:5d:96:f3:94:ee:24:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Oct 14 20:35:23 2026 GMT
            Not After : Oct 13 20:40:23 2027 GMT
        Subject: CN=14E2262D5D8C3515196C288AE2DEBB721A4B0D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:e9:03:ed:42:5d:e4:62:82:6f:90:51:d3:
                    1a:a0:69:70:26:de:e2:5e:d7:bb:a9:70:5e:68:e3:
                    a1:69:23:c6:c7:1d:3a:d8:b2:b9:13:78:85:fe:36:
                    dc:66:15:5c:0c:45:df:c5:b7:d2:03:0d:ae:9d:57:
                    f0:71:b9:1c:22:df:d7:77:7f:aa:31:ea:0f:3f:ba:
                    59:8d:45:c9:53:3a:94:50:cd:68:eb:05:59:08:d0:
                    f3:67:22:03:a0:ba:2d:40:22:1e:50:9b:3a:74:b7:
                    29:41:29:73:c6:8c:3e:34:b1:46:86:63:18:54:3c:
                    be:1e:a0:c8:90:cd:a2:8e:fb:48:3a:e2:3f:e9:cc:
                    e7:ae:d4:54:4e:c4:67:38:ea:ce:bf:e4:0d:4b:f6:
                    b8:95:fb:29:2b:62:3b:96:8a:a7:6c:a0:1c:5b:db:
                    8a:dd:2e:d5:91:1d:5a:45:78:b6:09:39:bc:82:82:
                    54:97:ad:4b:27:eb:53:c1:5c:3e:bf:88:93:08:69:
                    1e:4d:20:eb:b2:3a:4f:42:30:e4:83:c5:d2:d6:f9:
                    2c:86:23:fb:34:4f:dd:4c:8c:b2:fa:75:55:ca:88:
                    3d:42:99:7b:ce:6a:6e:7e:56:bf:88:dd:70:c5:f4:
                    51:60:1e:9c:70:dd:21:51:95:81:1e:6f:bf:81:2f:
                    11:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:26:2D:5D:8C:35:15:19:6C:28:8A:E2:DE:BB:72:1A:4B:0D:7D
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135332e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a1:f8:36:a7:e2:06:96:15:5f:65:57:bb:e9:00:c9:c2:4c:
         5c:41:f1:7e:1e:cd:06:44:dd:7b:50:7d:b5:c3:97:a6:8f:85:
         65:e9:b6:e7:31:bf:90:8d:cc:fb:9d:b8:58:33:76:8d:1b:05:
         82:ea:6e:36:85:ac:ee:da:0b:35:b7:49:0c:c9:d8:da:20:17:
         21:3b:99:d6:00:89:6a:22:27:ed:bf:30:4e:0c:47:5a:e5:1b:
         f8:22:27:bb:54:bd:46:26:f1:bd:a9:b0:79:1e:ab:d0:d1:d7:
         6e:6f:a2:a3:80:b1:d7:13:b2:45:17:be:e6:ee:34:3a:0b:40:
         34:1e:ed:f0:c4:95:d0:ca:d4:51:5f:b2:3b:71:39:db:24:6c:
         5f:8f:18:5f:2c:1a:46:1e:38:99:68:5b:73:bc:f0:f6:72:ad:
         2e:b9:e5:f7:d3:65:45:eb:c1:35:c5:1d:5d:1f:d9:a9:04:1e:
         c7:ec:f4:7c:e1:49:19:48:cc:ed:18:14:d7:eb:a5:fd:bd:b5:
         dd:68:2f:95:ff:99:2d:59:07:44:cd:15:95:f7:ca:91:cd:4e:
         75:93:7b:ac:34:93:c6:34:43:94:e2:1d:c0:39:ee:a8:fb:00:
         3b:79:1f:43:22:31:e9:82:16:ce:2e:4c:a2:77:70:37:29:fe:
         61:2b:8f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:38:18 2026 by rpki-client