Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231372e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3231372e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          pqNp2Ub8mrB81cy5gJ2pcSY1jn2hK9IScM3JoAD5eEU=
Subject key identifier:   E1:AA:79:D5:D5:A9:F7:C6:AD:69:6E:1C:2D:83:32:9A:97:6C:18:35
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       6557B5DFBCC691BEA4041A314F6A20D5158CFAF0
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231372e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:15 +0000
ROA not before:           Mon 07 Sep 2026 22:29:15 +0000
ROA not after:            Mon 06 Sep 2027 22:34:15 +0000
asID:                     41347
IP address blocks:        200.13.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 09:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:57:b5:df:bc:c6:91:be:a4:04:1a:31:4f:6a:20:d5:15:8c:fa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:15 2026 GMT
            Not After : Sep  6 22:34:15 2027 GMT
        Subject: CN=E1AA79D5D5A9F7C6AD696E1C2D83329A976C1835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:47:e6:78:f3:fc:50:fb:98:2b:2b:34:f4:
                    1e:95:85:ca:0b:71:ec:6e:e7:e1:e3:fe:6b:e9:9e:
                    73:2d:ff:d3:72:fb:65:3b:56:26:30:94:b4:4e:a9:
                    1f:b8:91:2c:a8:67:4f:8d:67:9d:bd:29:47:bc:36:
                    7d:6c:f6:ab:cf:8b:39:46:4d:c5:e4:48:92:45:38:
                    b3:e7:e8:77:25:ab:a2:8d:c9:79:6c:36:47:3f:73:
                    51:ab:31:2e:33:5d:c9:24:e8:e5:70:df:73:76:41:
                    2c:14:ea:18:f8:a7:db:f5:33:50:c1:c9:68:2d:2a:
                    b1:1c:82:0d:a6:e1:50:82:e8:fd:56:30:3b:09:d8:
                    43:5a:49:4b:f6:51:e4:50:92:92:82:4b:50:9f:91:
                    cb:f1:cc:c8:17:a5:8c:21:7d:b2:9e:15:9f:b1:0e:
                    25:8e:94:65:14:f3:c9:49:ba:88:3c:69:8f:87:86:
                    b4:20:9b:f0:ca:1d:15:e5:c1:79:9f:70:cd:94:22:
                    84:b6:69:46:8d:4a:92:cf:5d:72:cd:6c:a8:57:98:
                    50:05:71:a9:77:0d:60:cf:09:0c:8b:ab:16:1a:8a:
                    94:18:41:fe:74:1e:64:38:aa:22:63:c5:df:bb:ef:
                    f4:bf:e9:4d:1e:f3:5c:2f:cb:58:23:18:2b:7e:26:
                    26:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AA:79:D5:D5:A9:F7:C6:AD:69:6E:1C:2D:83:32:9A:97:6C:18:35
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231372e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:7d:8a:00:86:6e:be:22:b1:dc:5f:bf:c1:b7:5b:0f:dc:96:
         f3:37:e2:e1:d1:17:84:f9:6e:76:b9:19:6a:83:c4:32:5c:13:
         d4:26:e6:e4:96:60:d3:39:60:bb:b4:5f:68:41:f2:09:fe:0a:
         8d:b6:70:fe:34:07:54:7c:53:8a:e9:6a:c7:0c:e7:3b:0b:58:
         c1:84:44:39:d7:03:af:4b:16:e7:1f:a5:5d:80:7c:b8:ab:eb:
         6e:96:9e:d2:9c:60:45:c9:89:1c:73:a3:47:4a:17:01:50:84:
         2a:ad:b4:ce:14:27:6c:ba:b1:57:2f:6a:13:00:43:0d:6a:02:
         0a:3b:d0:8b:2b:61:21:2f:18:67:47:27:a2:a8:48:4a:c7:65:
         53:c6:e8:9e:71:c4:c8:9c:5f:4a:02:b0:8f:82:3e:1b:b5:81:
         43:1a:19:ab:6c:4c:7e:87:fe:2c:b7:65:f0:e6:ad:d0:36:ed:
         d4:8f:32:07:0e:de:e4:5b:55:24:03:da:26:e6:bb:6a:0e:07:
         96:1e:13:37:21:f8:dd:e2:10:38:53:fe:92:7c:cf:43:b0:20:
         a8:35:9e:bb:56:20:59:86:f9:dc:9e:a7:64:ec:a6:13:e9:a2:
         a9:ee:eb:51:96:e9:9b:c3:d9:aa:5b:38:9a:27:17:ec:6b:80:
         3c:f7:5b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:46:59 2026 by rpki-client