Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139392e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3139392e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          1bi573XuFlt4s0jousXO0rCT23+FhRc49azMKqenkQA=
Subject key identifier:   25:8C:88:AC:84:4B:75:6F:34:69:11:56:03:3A:52:D3:9C:39:48:FE
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       1998187B91DB671987BCE247C20E7801CD30E25D
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139392e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:23 +0000
ROA not before:           Mon 07 Sep 2026 22:29:23 +0000
ROA not after:            Mon 06 Sep 2027 22:34:23 +0000
asID:                     41347
IP address blocks:        200.13.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 05:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:98:18:7b:91:db:67:19:87:bc:e2:47:c2:0e:78:01:cd:30:e2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:23 2026 GMT
            Not After : Sep  6 22:34:23 2027 GMT
        Subject: CN=258C88AC844B756F34691156033A52D39C3948FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:27:1a:75:32:a6:36:e5:af:55:95:31:7f:
                    60:5e:b8:3f:fe:61:d7:68:73:37:c9:c9:41:3a:00:
                    57:40:79:9e:ff:f2:4a:18:30:8d:f9:80:46:a1:94:
                    ff:9e:32:a3:06:2d:07:84:86:44:e0:67:9e:de:52:
                    a2:53:d2:8f:f6:b4:c6:8f:ca:bf:91:96:7b:82:1d:
                    33:13:f5:5a:3c:7a:36:b2:85:7e:43:7f:3b:1e:e0:
                    95:0f:39:3a:4a:19:2b:e7:7d:50:07:16:80:ea:f7:
                    07:61:c6:dd:ac:55:15:5a:35:d2:2e:43:25:be:e9:
                    ec:ec:23:55:4d:64:a2:2b:99:80:9b:d9:3c:4e:5e:
                    cc:0c:6b:2c:3e:50:dd:84:38:ce:40:46:47:27:95:
                    af:b1:30:3d:c4:7f:b0:a9:1e:d2:6a:95:97:0a:47:
                    45:e7:12:09:ae:c8:00:33:d0:3f:d7:ec:ff:3f:dd:
                    c3:4f:fb:8b:bb:3a:f8:5b:fb:29:4c:33:74:f2:63:
                    2e:54:78:ef:67:f1:30:e2:f6:29:04:32:e0:b8:4b:
                    df:90:3f:6f:87:41:c8:06:55:33:9e:79:c8:ba:8d:
                    c6:b6:ca:06:df:52:b2:02:18:52:c7:fa:5c:95:e2:
                    2c:2e:63:26:20:dc:ee:15:ae:7b:62:64:e3:0c:00:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8C:88:AC:84:4B:75:6F:34:69:11:56:03:3A:52:D3:9C:39:48:FE
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139392e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:cb:cb:1c:3c:7b:a5:4e:d1:aa:de:60:9c:75:a2:24:71:b8:
         90:30:bd:e0:12:d6:da:e4:44:ea:c9:55:1b:15:38:49:8c:a5:
         e2:ea:78:ef:df:3d:34:7c:8b:fa:9f:d4:41:35:8d:6a:62:d9:
         41:3b:e7:9d:a3:e5:56:a6:f3:2d:66:db:e4:43:23:09:57:db:
         7d:4e:9e:ba:18:6e:1d:92:17:b9:96:f0:e0:6c:f7:2f:7a:69:
         39:d7:0c:6e:11:7a:15:e8:fb:35:40:8e:9a:46:c4:ed:e1:fe:
         1e:80:d7:7e:24:6b:c7:13:3a:01:4f:5f:7f:ce:c3:4f:dc:f1:
         7e:d2:b9:15:d5:f1:f9:40:8f:96:8d:09:a5:14:52:30:0d:1e:
         3d:70:82:0b:35:52:25:c2:ed:42:73:8d:74:30:da:8d:b6:5a:
         98:06:cb:47:68:30:2d:b7:bc:1e:0d:c8:33:46:2e:35:c6:d5:
         dc:b2:87:2e:ab:78:09:67:c9:f1:28:c7:9c:a1:76:24:a8:c2:
         97:33:d1:2b:44:a8:00:6a:87:ce:9b:37:b2:97:74:d5:01:02:
         50:12:81:41:12:d4:22:d2:b1:77:2c:88:84:76:7d:63:c8:d7:
         e1:41:aa:64:b3:98:16:99:00:32:36:4b:30:76:12:ea:fb:94:
         7b:70:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:48:50 2026 by rpki-client