Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139342e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3139342e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          Yc5IJKzhyZkdmdR4BqolSwUHiDtRK1xCYkcrJhW/N2M=
Subject key identifier:   16:8B:B6:86:32:B8:78:37:05:1F:CA:72:40:2A:9B:D1:FA:0D:EE:4D
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       7D6E97B30ECB9AD514A2945DD7C8B7C8865D476F
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139342e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 30 Mar 2026 20:36:42 +0000
ROA not before:           Mon 30 Mar 2026 20:31:42 +0000
ROA not after:            Mon 29 Mar 2027 20:36:42 +0000
asID:                     22313
IP address blocks:        200.35.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6e:97:b3:0e:cb:9a:d5:14:a2:94:5d:d7:c8:b7:c8:86:5d:47:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 30 20:31:42 2026 GMT
            Not After : Mar 29 20:36:42 2027 GMT
        Subject: CN=168BB68632B87837051FCA72402A9BD1FA0DEE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:45:3f:c9:a2:d2:6a:ab:5f:96:88:d2:de:
                    56:b7:15:73:48:10:97:e3:1e:2f:eb:ca:2e:32:08:
                    0c:05:76:e6:54:0f:85:7d:83:1f:90:9b:1c:8c:21:
                    50:6a:9f:5d:03:31:69:32:2c:68:b7:31:c2:6e:73:
                    9c:36:d6:ad:69:b9:92:d5:01:1e:15:74:39:02:fc:
                    6f:98:d4:dc:24:50:d0:83:19:a7:b5:c3:db:66:ff:
                    8d:8d:eb:44:82:b8:1b:4e:f2:53:5f:39:28:fe:2a:
                    09:8b:33:66:d7:0e:be:d9:b1:1e:7f:ea:95:b3:d4:
                    41:0f:5b:9e:ef:c7:c5:a7:d5:87:4e:44:45:4e:40:
                    7a:ff:f5:d9:0e:d2:a5:f5:80:1b:c0:0c:b9:4e:b3:
                    67:d9:fb:a8:a4:06:65:ec:3f:25:d8:bf:ff:be:51:
                    a6:90:e1:d7:b0:2a:a0:96:02:49:9b:fb:cb:48:b7:
                    dc:4a:55:68:dd:57:26:4b:c0:5b:98:c5:02:5b:d3:
                    6f:41:13:4d:d3:4b:82:71:f6:28:ba:fc:47:88:e1:
                    53:5a:b7:63:33:cc:ec:5b:c2:16:33:b8:12:95:1b:
                    66:e1:ac:f9:14:65:59:f9:77:78:59:a0:6b:98:4e:
                    0b:e1:13:45:97:5f:a6:b8:63:89:57:3d:49:d5:f4:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8B:B6:86:32:B8:78:37:05:1F:CA:72:40:2A:9B:D1:FA:0D:EE:4D
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139342e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:3e:db:a7:e3:fa:81:08:e0:b0:31:81:48:05:70:7f:ef:
         8f:18:b5:6b:20:77:52:e3:d0:d4:7a:bd:16:8e:0f:b0:b6:ff:
         2f:14:dd:a2:5b:5b:62:76:26:67:fa:83:d0:39:e1:16:71:4a:
         26:0d:ad:3b:04:1a:0d:45:fb:a1:cb:e0:5a:84:73:c4:37:bc:
         c1:89:7d:d7:2f:7b:03:fe:ac:d7:b2:00:be:be:3e:bb:85:8b:
         22:69:a4:82:64:17:6c:81:c2:5e:e1:22:7a:74:84:fb:99:46:
         40:bd:52:a3:a2:cf:a5:71:c2:71:39:03:7e:0e:a9:72:cf:ac:
         c4:72:31:f7:da:f2:a2:0e:bf:cb:51:1a:b7:d7:17:76:d4:ba:
         cb:d7:b4:27:2e:89:08:d3:d1:67:b4:17:1c:1b:af:85:90:d0:
         88:01:dc:44:1c:6d:08:43:19:7e:72:6a:26:3c:18:38:81:c5:
         15:57:a9:f6:60:af:75:17:51:ee:41:3f:be:ea:16:32:1f:ae:
         73:91:ba:c2:79:4d:ea:99:1f:cf:b2:b0:b0:8b:10:29:34:6f:
         2b:bb:03:c0:09:1e:45:2f:af:1c:af:2b:65:2e:c6:93:46:dc:
         87:2c:d8:3b:ba:9d:25:67:d3:0f:cb:df:1b:0c:2a:3a:ed:d1:
         af:a6:b7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:08:44 2026 by rpki-client