Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3232332e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3232332e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          r0kl6uVm7BpVDuk4h9es3Z0ZLpqxqkkcDkH6OjUVZPA=
Subject key identifier:   10:AB:1F:A2:CB:C7:EB:9E:1F:B2:0A:FB:1D:6F:C3:16:D8:E5:33:C1
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       645030A05AA50DB9A18CBE9D8E7001E4A975F6BC
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3232332e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 30 Mar 2026 20:36:43 +0000
ROA not before:           Mon 30 Mar 2026 20:31:43 +0000
ROA not after:            Mon 29 Mar 2027 20:36:43 +0000
asID:                     22313
IP address blocks:        200.35.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:50:30:a0:5a:a5:0d:b9:a1:8c:be:9d:8e:70:01:e4:a9:75:f6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 30 20:31:43 2026 GMT
            Not After : Mar 29 20:36:43 2027 GMT
        Subject: CN=10AB1FA2CBC7EB9E1FB20AFB1D6FC316D8E533C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:8e:3e:7d:98:f6:8c:79:0a:74:fe:e7:e8:
                    6f:9f:ba:f3:89:40:34:6a:e0:76:b1:c0:92:ad:dd:
                    5a:05:80:6d:6c:7e:2d:34:ef:48:1e:d4:17:70:01:
                    82:ba:68:48:0f:0c:5f:97:ad:6d:9b:f9:5a:03:04:
                    66:f6:29:3d:4e:b2:99:60:24:b0:41:fd:81:64:03:
                    bf:61:92:97:73:da:d0:d9:bf:67:aa:7f:c6:7f:fe:
                    7d:72:3b:15:66:5d:1f:18:8e:10:d5:f1:fb:0a:9a:
                    28:89:67:ab:9a:4c:65:a1:f7:fa:47:69:4d:30:55:
                    fe:15:a8:83:0b:08:a0:e6:dc:8f:a5:37:22:b6:dc:
                    11:01:d7:de:c9:b3:45:40:9e:93:a6:41:d9:c5:f7:
                    4f:a1:2d:a4:9b:d5:09:67:3a:93:63:4c:9b:d5:7e:
                    fc:b9:eb:fe:6c:56:49:80:0f:72:4a:ea:ce:55:20:
                    42:d3:bb:6c:ed:dc:a5:b3:a9:75:37:01:27:05:eb:
                    63:39:89:82:5c:31:bc:a0:ec:79:80:02:5d:b9:cd:
                    ab:a8:c5:23:8f:32:ff:cb:70:c6:4a:6d:3a:55:29:
                    8c:bc:cd:73:1f:9f:e3:c5:3a:ea:f0:ed:b9:21:0f:
                    c4:88:7a:6d:30:44:4f:40:87:14:f6:f2:f0:5f:15:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AB:1F:A2:CB:C7:EB:9E:1F:B2:0A:FB:1D:6F:C3:16:D8:E5:33:C1
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3232332e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:bb:f2:87:e6:2c:d5:2b:a6:f1:26:5f:f8:2a:35:32:3f:56:
         24:c2:0e:3e:cf:ec:15:0b:8b:d6:d4:c3:0a:0f:e4:c4:aa:0c:
         41:ce:02:c4:e5:7a:f7:2b:6a:ce:b4:40:73:f9:98:a6:91:1d:
         f7:89:35:8a:5e:30:68:09:48:7d:38:c5:74:cd:55:ef:77:dc:
         69:6a:41:07:61:74:6d:68:b6:a7:71:5d:a1:98:13:5f:d0:6d:
         74:56:25:f9:a1:20:c1:84:a1:78:6d:86:e7:08:7d:80:17:97:
         b3:9f:5b:cf:ba:52:23:48:d8:66:07:4b:bf:d8:99:85:52:e7:
         6a:74:24:7f:88:c4:11:36:c3:78:50:b0:9d:8b:e9:17:ea:32:
         8c:c5:ac:65:87:7d:3d:6d:d9:e3:d1:ae:13:8b:cd:8f:94:3c:
         9a:3a:97:b4:7d:be:cf:72:fc:4e:60:d6:ba:f8:11:8c:14:50:
         4a:63:5a:b3:64:34:9b:b4:8f:0f:58:5e:64:6c:64:e7:7f:be:
         a7:ed:b6:b5:ae:c8:90:46:7f:90:5b:b0:23:60:7c:bc:94:45:
         27:7a:f2:9b:fc:8b:84:14:85:47:11:d8:94:65:83:89:13:7c:
         fe:65:f4:d3:7e:d9:3f:d3:44:6f:4a:fc:6f:1b:10:20:db:49:
         94:d6:f2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:08:08 2026 by rpki-client