Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139392e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3139392e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          Go4g2O/X0AS21T/t2b8ezvP1dBuIv+yJAjCvjyB/IFM=
Subject key identifier:   DB:B0:D8:44:65:76:54:E2:5F:9D:9B:07:3B:4E:F5:99:28:44:A2:24
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       54ED4D4D429D15351FC49718B09884E2F4F04387
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139392e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 30 Mar 2026 20:36:46 +0000
ROA not before:           Mon 30 Mar 2026 20:31:46 +0000
ROA not after:            Mon 29 Mar 2027 20:36:46 +0000
asID:                     22313
IP address blocks:        200.35.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ed:4d:4d:42:9d:15:35:1f:c4:97:18:b0:98:84:e2:f4:f0:43:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 30 20:31:46 2026 GMT
            Not After : Mar 29 20:36:46 2027 GMT
        Subject: CN=DBB0D844657654E25F9D9B073B4EF5992844A224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:28:f3:5e:a3:10:45:e6:d6:2c:44:80:6e:
                    50:37:b2:bf:4e:38:53:0c:75:59:c9:5c:56:27:a5:
                    bd:ed:63:bd:e4:44:9f:48:83:cf:35:c6:b4:57:b1:
                    01:ee:a6:b1:f9:66:6d:a0:1f:60:79:af:a3:64:d1:
                    6a:c0:1f:fd:d7:2c:08:6b:c5:19:4a:b5:f3:e8:a5:
                    d5:35:a5:29:0d:b2:64:7d:55:d2:cf:e6:22:a4:61:
                    65:12:63:09:98:5a:56:0b:cf:79:f7:8e:61:43:06:
                    5b:dd:92:6b:33:ed:2c:02:16:d4:3b:cf:06:25:76:
                    16:3b:e9:5e:7b:39:21:92:2a:c2:f5:7b:e2:d3:2a:
                    54:71:cf:70:10:89:9d:2e:14:21:d4:d3:1f:4e:da:
                    93:76:d1:cd:11:b6:4f:58:e4:71:ec:33:2c:d4:81:
                    84:63:9a:75:f8:c5:fa:79:01:b5:20:80:2e:8e:63:
                    c7:14:b3:ca:34:59:ef:8e:66:69:f4:63:06:07:ce:
                    32:0a:af:76:b6:bd:b8:61:24:20:c5:50:4d:f9:62:
                    fa:0a:eb:62:ce:6f:d2:57:cb:c1:1a:2c:23:2f:8f:
                    39:95:e8:31:1b:47:28:9f:48:b4:58:bd:27:c6:a7:
                    f8:9e:d3:06:d9:fb:bb:d4:c5:2a:89:c6:23:84:b5:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B0:D8:44:65:76:54:E2:5F:9D:9B:07:3B:4E:F5:99:28:44:A2:24
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139392e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:2d:a1:1e:e1:08:2c:5e:d9:a3:66:0e:9a:0c:92:bb:7a:59:
         86:ca:72:b7:74:da:d2:96:1e:83:cf:0c:29:8c:5e:b8:2a:bb:
         05:2e:87:25:7e:d2:68:d3:fe:7a:56:04:63:0e:5e:94:36:9f:
         2e:b7:8e:97:9d:ea:0a:1b:cb:02:3c:a8:c7:74:bb:b6:7a:ed:
         5b:03:ee:ab:53:0e:df:63:8d:ac:4e:08:e1:41:d3:cd:49:b7:
         d6:b6:cd:df:b3:65:59:7e:66:ab:d0:7e:ad:e1:f7:12:21:9b:
         de:f0:9a:47:7c:76:cf:17:66:cd:91:e5:3d:d0:18:3c:f4:fa:
         c7:17:74:68:bc:0a:94:d4:80:89:27:1c:35:ef:66:9c:fa:de:
         76:e9:e9:ca:fe:84:3b:59:76:cd:cf:43:62:b3:02:0d:73:dd:
         53:bf:2b:a8:59:71:9e:db:b8:59:73:b2:93:11:ed:54:b9:f7:
         ed:49:4e:7d:19:ef:3e:b3:fa:c0:e6:45:be:92:a3:3f:a6:6e:
         43:7f:bf:56:d2:70:51:2c:16:df:f8:6b:32:af:40:0a:cb:08:
         89:a0:3c:ff:0c:ce:85:5c:39:3a:75:a0:06:02:ae:1c:1b:4d:
         19:7d:7e:60:30:2c:54:69:76:77:9f:5b:9b:89:1f:13:ed:31:
         5d:d8:bc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:09:20 2026 by rpki-client