Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139382e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3139382e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          fh/TfIf4umWwTNIHW4XD0/tzcGNCXCdGHajNBvfHei8=
Subject key identifier:   92:19:4C:0C:26:5A:CA:76:45:E2:81:D7:74:E4:1C:18:7D:EF:A3:5C
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       6C7EAF73011FE176731C2B1FEB6A0A658F27C4DB
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139382e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:16 +0000
ROA not before:           Mon 07 Sep 2026 22:29:16 +0000
ROA not after:            Mon 06 Sep 2027 22:34:16 +0000
asID:                     41347
IP address blocks:        200.13.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7e:af:73:01:1f:e1:76:73:1c:2b:1f:eb:6a:0a:65:8f:27:c4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:16 2026 GMT
            Not After : Sep  6 22:34:16 2027 GMT
        Subject: CN=92194C0C265ACA7645E281D774E41C187DEFA35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:89:16:66:6d:3c:0a:c2:e9:a6:82:34:4c:
                    ff:a9:93:4d:44:30:d9:fd:0d:b6:98:b4:1c:9b:61:
                    0d:2d:8a:b5:66:21:4a:85:8a:ac:f9:16:67:01:a4:
                    dd:2e:99:fc:fe:bf:13:68:85:ee:b4:d0:97:e9:62:
                    02:c1:2e:49:ff:26:06:c4:1f:a9:fc:f8:d3:4c:ce:
                    3b:68:42:fa:e2:f6:4e:88:a0:11:c8:4e:6b:81:21:
                    f9:a1:63:df:a1:7e:6f:fa:dc:f9:6e:db:64:6b:f0:
                    e9:11:37:d4:86:c2:24:6d:00:8d:89:06:68:1d:e7:
                    65:77:2f:6b:c0:c4:52:ce:de:6f:fb:74:77:ce:81:
                    d9:62:a3:fa:33:68:05:68:74:71:57:30:40:21:b2:
                    37:2b:b2:b4:4e:d8:c7:6d:71:a1:97:a9:f8:32:42:
                    fe:4e:22:53:f2:3d:14:9d:e1:f0:85:e2:9b:48:1a:
                    28:e6:e6:12:a0:84:8f:af:10:b6:af:1b:cd:d6:4f:
                    6e:fc:0c:4a:22:b3:e8:4b:31:0c:aa:70:77:22:c0:
                    77:02:d3:74:3b:35:e0:de:c5:c6:17:8a:c4:d9:db:
                    74:e6:50:62:66:66:7f:17:88:6c:6a:e6:8c:6c:ce:
                    1f:bb:69:41:63:0d:bc:39:e6:25:2e:f4:e0:82:37:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:19:4C:0C:26:5A:CA:76:45:E2:81:D7:74:E4:1C:18:7D:EF:A3:5C
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139382e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:48:69:33:0d:3d:20:71:8c:ff:94:03:5c:67:e8:f0:90:44:
         62:90:14:21:2c:37:fa:a6:03:aa:cd:cc:7f:29:e6:1f:9f:e6:
         67:0b:98:4b:d7:67:8b:d8:48:45:5d:bc:ac:a1:16:dd:93:6d:
         94:d9:af:5b:95:76:08:20:a3:75:53:97:8a:5f:be:10:7e:4e:
         fc:5e:eb:ba:8f:ac:5a:f2:31:01:83:28:79:28:f5:ec:a9:92:
         82:03:99:45:2c:ec:f6:c2:09:d4:dc:66:5a:61:96:2d:f5:87:
         0f:be:5a:06:75:68:7b:c2:d1:8b:a4:56:58:5c:fb:71:74:42:
         a9:b1:00:d4:08:5e:15:b2:06:42:6b:ee:32:9f:ff:04:66:97:
         bb:6f:39:17:76:3e:86:df:79:13:cc:50:91:93:41:93:76:06:
         53:3e:c0:bf:80:e0:2e:cc:41:1d:85:72:6a:dc:24:4c:99:06:
         f0:fb:ff:56:a8:53:96:b4:ee:47:5b:df:87:38:b8:cb:e5:29:
         60:7e:86:69:c3:34:73:a7:b6:dc:2b:ba:3e:df:bd:28:8d:ad:
         e0:00:c2:23:b8:04:87:53:4f:f6:84:3b:25:ec:94:ee:69:e1:
         a0:20:8c:b3:74:05:ee:24:13:92:4a:48:61:91:1f:af:59:9e:
         ca:78:ac:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:03:26 2026 by rpki-client