Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139332e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3139332e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          o8SuWpDhmdp2urMlhqb8wx+CC4yALctgC/x7OPwch/M=
Subject key identifier:   83:8A:C1:F5:69:A7:F0:18:23:F7:D6:29:87:A0:44:31:22:75:F8:62
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       23D46B4939BB375889D8829FABCAADB4812B1F04
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139332e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 30 Mar 2026 20:36:45 +0000
ROA not before:           Mon 30 Mar 2026 20:31:45 +0000
ROA not after:            Mon 29 Mar 2027 20:36:45 +0000
asID:                     22313
IP address blocks:        200.35.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d4:6b:49:39:bb:37:58:89:d8:82:9f:ab:ca:ad:b4:81:2b:1f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 30 20:31:45 2026 GMT
            Not After : Mar 29 20:36:45 2027 GMT
        Subject: CN=838AC1F569A7F01823F7D62987A044312275F862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d7:88:62:3c:03:36:a1:7b:9d:cf:9c:6e:21:
                    5f:46:fb:1a:df:6c:55:08:20:30:b5:81:2f:88:7f:
                    2f:05:eb:2d:a1:be:29:30:c4:b8:95:0c:3a:ed:92:
                    53:39:2e:2e:95:21:28:af:c0:62:0e:49:f5:28:8e:
                    42:e8:0b:af:7c:e9:08:b2:0d:2e:bf:f8:f1:ea:9d:
                    d3:3e:76:6b:23:88:4a:6c:a5:75:83:58:c3:af:3d:
                    bc:c8:dc:ac:c6:f5:c1:bb:64:e8:ec:5a:d0:02:e6:
                    4f:2e:0f:9a:90:aa:3a:dc:6b:8a:2f:30:ec:1c:b6:
                    33:92:7a:8c:1d:dd:60:b8:9c:f0:cb:72:7f:55:ec:
                    03:a2:40:dd:24:03:cd:f9:5f:48:18:a1:77:10:a9:
                    6c:51:3e:4a:35:0b:23:84:00:cd:6e:0a:70:4a:07:
                    83:f7:af:b2:fe:ca:42:31:b5:72:a3:f7:26:03:0f:
                    a1:89:9f:55:46:33:fc:72:6c:b0:02:13:2d:15:1e:
                    9d:32:dd:48:57:25:9c:82:78:09:fe:96:dc:c2:6f:
                    f9:ae:6a:fb:00:07:43:f9:f1:6c:98:d0:9e:35:ab:
                    e8:98:26:c6:35:b3:58:85:73:c1:7c:be:c6:75:5a:
                    a7:96:c7:72:cd:63:db:3e:fe:a8:f3:14:9a:a6:75:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8A:C1:F5:69:A7:F0:18:23:F7:D6:29:87:A0:44:31:22:75:F8:62
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139332e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:2a:b6:73:97:b1:ba:1b:bf:8f:40:34:b9:44:60:15:1c:
         89:dc:48:b2:8d:56:cc:9d:dc:39:76:59:de:64:49:54:e0:7b:
         d9:4a:bb:ce:b6:63:75:58:c0:38:c8:02:7c:88:36:c3:1a:61:
         11:4f:cd:86:f3:31:ef:a5:0d:a4:4b:ef:66:f5:88:cf:68:72:
         f4:48:92:5a:95:6f:00:25:9d:34:fd:fc:7f:bc:96:c1:b2:78:
         fd:dd:7d:3d:2f:68:c5:24:32:f0:5f:4e:4a:43:13:af:90:46:
         59:86:9f:44:10:3b:3d:f9:61:0e:dd:36:02:70:25:ac:5b:5c:
         b9:7b:78:2b:07:13:a1:58:45:6e:6d:9a:2f:92:44:b3:8f:92:
         67:90:e5:62:5e:81:a7:ab:d5:25:0d:02:75:ae:57:4a:3e:f2:
         68:b3:f0:ee:42:bd:6d:bc:32:3e:47:94:fc:5d:d4:38:d6:ce:
         1b:73:dd:ea:80:68:e0:f0:46:df:de:64:25:18:6a:b2:92:94:
         19:51:21:55:14:7c:03:e2:74:b8:26:e5:e2:a0:c7:1a:c3:fc:
         79:d0:43:c6:8e:a2:c5:0b:4a:79:e7:35:ed:6a:35:bb:3a:32:
         8e:17:10:4b:73:ff:e1:f9:83:65:b9:86:dd:95:e0:bf:e7:59:
         6e:98:83:3b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUI9RrSTm7N1iJ2IKfq8qttIErHwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NjI5QTY5NEVGNzIxN0VGM0RFNUUxMjgxMDRDMUUx
NEI0QkVCMzAeFw0yNjAzMzAyMDMxNDVaFw0yNzAzMjkyMDM2NDVaMDMxMTAvBgNV
BAMTKDgzOEFDMUY1NjlBN0YwMTgyM0Y3RDYyOTg3QTA0NDMxMjI3NUY4NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj14hiPAM2oXudz5xuIV9G+xrf
bFUIIDC1gS+Ify8F6y2hvikwxLiVDDrtklM5Li6VISivwGIOSfUojkLoC6986Qiy
DS6/+PHqndM+dmsjiEpspXWDWMOvPbzI3KzG9cG7ZOjsWtAC5k8uD5qQqjrca4ov
MOwctjOSeowd3WC4nPDLcn9V7AOiQN0kA835X0gYoXcQqWxRPko1CyOEAM1uCnBK
B4P3r7L+ykIxtXKj9yYDD6GJn1VGM/xybLACEy0VHp0y3UhXJZyCeAn+ltzCb/mu
avsAB0P58WyY0J41q+iYJsY1s1iFc8F8vsZ1WqeWx3LNY9s+/qjzFJqmdYWtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUg4rB9Wmn8Bgj99Yph6BEMSJ1+GIwHwYDVR0j
BBgwFoAUs2YpppTvchfvPeXhKBBMHhS0vrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDc2ODMxMjlDQTNFODAwRDY5QUY1RjVCMjcxQjE3NkYw
OEE3MjkyQzZDRUFGQzExMDU4REY3RUU5MTMzMTRDLzAvQjM2NjI5QTY5NEVGNzIx
N0VGM0RFNUUxMjgxMDRDMUUxNEI0QkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzY2MjlBNjk0RUY3MjE3RUYz
REU1RTEyODEwNEMxRTE0QjRCRUIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA3NjgzMTI5Q0EzRTgwMEQ2OUFGNUY1QjI3MUIxNzZGMDhBNzI5MkM2
Q0VBRkMxMTA1OERGN0VFOTEzMzE0Qy8wLzMyMzAzMDJlMzMzNTJlMzEzOTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjMzMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgjwTAN
BgkqhkiG9w0BAQsFAAOCAQEAjMAqtnOXsbobv49ANLlEYBUcidxIso1WzJ3cOXZZ
3mRJVOB72Uq7zrZjdVjAOMgCfIg2wxphEU/NhvMx76UNpEvvZvWIz2hy9EiSWpVv
ACWdNP38f7yWwbJ4/d19PS9oxSQy8F9OSkMTr5BGWYafRBA7PflhDt02AnAlrFtc
uXt4KwcToVhFbm2aL5JEs4+SZ5DlYl6Bp6vVJQ0Cda5XSj7yaLPw7kK9bbwyPkeU
/F3UONbOG3Pd6oBo4PBG395kJRhqspKUGVEhVRR8A+J0uCbl4qDHGsP8edBDxo6i
xQtKeec17Wo1uzoyjhcQS3P/4fmDZbmG3ZXgv+dZbpiDOw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:08:39 2026 by rpki-client