Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139382e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3139382e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          5RA3zMPoTtV5SNOyFDXJPwJre9teUEKsB+qq+6i+OZw=
Subject key identifier:   96:85:C6:48:40:F1:BE:D7:12:A6:17:E3:B1:E9:26:5B:02:76:0A:5A
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       1F6928CF9753CC109F9B486C9327F4785F6FD5E3
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139382e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 30 Mar 2026 20:36:48 +0000
ROA not before:           Mon 30 Mar 2026 20:31:48 +0000
ROA not after:            Mon 29 Mar 2027 20:36:48 +0000
asID:                     22313
IP address blocks:        200.35.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:69:28:cf:97:53:cc:10:9f:9b:48:6c:93:27:f4:78:5f:6f:d5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 30 20:31:48 2026 GMT
            Not After : Mar 29 20:36:48 2027 GMT
        Subject: CN=9685C64840F1BED712A617E3B1E9265B02760A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:36:5e:36:5f:58:c0:69:db:08:00:90:9f:ff:
                    f7:c4:5e:f7:6e:39:56:8c:38:5e:34:c9:20:d9:90:
                    83:6a:90:22:e0:b0:11:28:1b:41:87:32:12:fc:fe:
                    a4:83:59:04:cd:bc:93:84:f8:15:47:3d:db:a0:0f:
                    8d:da:b3:53:26:11:c7:98:a5:a6:31:32:01:c7:9f:
                    e1:ea:a3:24:07:99:e0:6e:35:0d:19:4d:78:c2:e9:
                    b7:de:de:f6:20:33:2e:00:f3:6c:38:3a:22:08:ef:
                    42:4b:b8:ea:9d:bd:52:8e:0e:0a:bf:f3:3c:b4:90:
                    5e:92:0c:34:fc:26:99:c9:5a:32:03:2c:99:04:2e:
                    67:9e:fe:c1:40:4e:2b:54:61:48:c5:70:73:cf:e5:
                    d9:2e:15:ac:ae:2e:eb:32:c0:ac:2f:68:0c:12:7d:
                    fb:62:8c:8c:9f:b3:5d:c2:b6:5d:b4:d0:72:96:06:
                    8c:31:eb:3e:9c:8e:c0:29:13:30:4f:ac:01:db:6b:
                    e8:7e:fe:94:56:e2:e7:0d:a9:ae:fa:c1:4d:7c:1b:
                    28:09:a6:8c:4a:2a:10:6c:50:b6:f5:3a:33:ad:5f:
                    82:c6:8d:00:65:a6:6b:cd:67:e0:44:a4:f1:ce:50:
                    28:9a:bc:22:db:f6:40:11:35:b1:15:bb:4d:aa:9d:
                    4a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:85:C6:48:40:F1:BE:D7:12:A6:17:E3:B1:E9:26:5B:02:76:0A:5A
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139382e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b1:a6:60:c7:d2:0f:e1:9a:cb:ba:60:e8:a9:be:db:9a:7c:
         59:02:67:63:b1:57:4a:fe:27:14:89:7a:2d:26:17:ea:bf:80:
         32:df:b8:08:89:84:e4:25:39:7c:ac:67:21:07:4e:ab:d9:0f:
         2e:cc:33:3b:02:c2:c6:74:c1:b6:c1:de:df:4b:d5:52:7d:5c:
         e6:4d:d4:3e:39:8a:a3:62:7b:ea:c2:36:fc:36:d4:f5:10:ae:
         df:14:fb:4e:cb:ff:5c:c9:0f:81:ef:37:b0:30:68:f2:7e:dc:
         c1:e7:48:26:7e:44:fe:9a:0d:a4:49:11:d7:41:a4:7b:08:ca:
         9c:2a:4a:31:8e:54:76:74:d6:cf:bb:78:be:bd:bd:bf:7f:ec:
         b9:f0:e4:8d:6c:bd:93:99:57:4a:38:2e:ea:cf:fd:6e:35:e0:
         a0:52:ac:f4:fc:f9:fb:8a:9a:20:8f:b5:3b:71:1d:ef:c8:3b:
         8a:ea:7d:7c:fc:d7:cd:8d:ce:3b:74:3c:6b:eb:1b:e6:0f:27:
         82:70:6a:9a:e9:2d:4f:3d:21:de:4b:d5:eb:29:af:18:d0:53:
         34:dd:1d:89:90:bd:6c:31:bd:26:70:d2:82:71:81:c1:a5:89:
         8d:11:9f:b1:af:b6:19:56:3a:66:49:b5:8d:fb:7a:e1:30:d0:
         bb:fd:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:09:26 2026 by rpki-client