Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139352e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3139352e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          hYM/WPCUPlGPh9tm7d4rQHENHY+Dw4z5HUx4wsGK4ZE=
Subject key identifier:   C5:4C:31:E0:0C:BF:9C:AC:85:92:BB:53:02:B5:28:70:97:7E:0B:51
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       27924AE597620EBA2FF689FAAFE7B67AF2174DDF
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139352e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 30 Mar 2026 20:36:43 +0000
ROA not before:           Mon 30 Mar 2026 20:31:43 +0000
ROA not after:            Mon 29 Mar 2027 20:36:43 +0000
asID:                     22313
IP address blocks:        200.35.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:92:4a:e5:97:62:0e:ba:2f:f6:89:fa:af:e7:b6:7a:f2:17:4d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 30 20:31:43 2026 GMT
            Not After : Mar 29 20:36:43 2027 GMT
        Subject: CN=C54C31E00CBF9CAC8592BB5302B52870977E0B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:c0:8d:e1:16:57:ff:bb:05:a5:ac:12:54:
                    c4:a1:2c:88:4b:9d:ac:39:fc:8c:36:18:ba:e6:85:
                    ff:cb:21:59:ef:b4:dc:d4:36:c2:8e:19:99:54:1e:
                    63:af:09:4b:aa:b4:cd:b5:58:23:d4:ac:00:93:54:
                    86:10:32:ed:9a:48:ee:7c:7d:8a:64:07:3c:91:58:
                    de:51:41:bb:26:3a:80:ad:c6:51:18:4a:a5:a7:75:
                    02:c5:e8:95:3a:15:ba:bb:73:64:1d:30:aa:f3:17:
                    de:af:75:c7:4e:38:32:3d:1b:56:57:1f:02:0c:42:
                    4d:6a:eb:96:de:bb:27:ef:3f:ce:6a:d0:ce:4a:17:
                    3d:6b:49:df:30:7c:2f:fd:9e:d1:5c:c3:6f:9b:8b:
                    4b:23:b7:1f:81:33:b9:a0:a3:a2:d8:fc:9f:0b:ab:
                    76:7f:2b:c6:8f:71:29:31:56:d8:e7:fe:88:2e:42:
                    66:8e:f8:36:47:7c:5d:ad:f2:47:24:f8:d5:06:df:
                    ed:0d:88:aa:34:9c:dc:13:98:07:ef:2d:8a:1c:62:
                    b8:95:7b:64:4c:c5:5f:c2:40:66:b9:7f:bd:41:4e:
                    97:86:a1:c2:4b:92:5b:cf:c4:6a:02:61:3b:ad:71:
                    c7:85:13:24:aa:de:ab:cf:fa:e6:74:2c:f8:88:23:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4C:31:E0:0C:BF:9C:AC:85:92:BB:53:02:B5:28:70:97:7E:0B:51
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139352e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:fc:62:a1:ce:24:45:54:ea:f3:0e:7e:83:f1:f4:49:8a:bb:
         80:8c:f0:02:c2:a0:a7:0b:dd:f5:75:5e:52:ab:43:21:82:fc:
         e2:ed:d8:60:86:50:98:86:c7:8d:76:f5:9d:00:e7:50:40:08:
         62:14:ac:45:1f:1c:c1:d4:27:85:c7:2b:d5:34:c6:34:ce:8f:
         0f:52:60:39:29:dc:12:0e:d9:62:2c:9a:b4:d7:e4:e0:fc:46:
         7b:29:79:f6:b8:60:c4:ed:de:b9:a7:45:e9:1f:a2:e6:26:0c:
         a9:67:57:d7:f8:c6:18:f7:84:6d:d7:66:a3:ea:a3:aa:76:68:
         11:b1:09:0a:d1:44:2b:6a:f8:b5:b3:34:8f:2f:4e:9f:14:03:
         7d:dd:de:a3:41:12:8e:5e:23:cf:27:a7:38:8a:51:53:a2:0e:
         a7:98:a9:86:b2:4f:db:69:89:ee:2d:2d:f5:92:0f:83:bd:a2:
         bc:da:46:3d:6e:ed:c6:c8:75:47:eb:d0:f1:aa:ff:e5:0e:35:
         15:1c:7a:cf:8b:01:5e:c7:b4:16:4b:91:79:b7:8d:c4:8c:80:
         8d:c8:45:d3:e1:a4:c8:6a:6c:90:2a:f1:2a:2d:8c:aa:ab:b5:
         51:e3:1e:ba:60:53:5e:59:dc:8c:9f:75:4a:60:78:26:4e:f3:
         9c:18:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:32:46 2026 by rpki-client