Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234332e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234332e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          egK9DzdWq1mHb5M06M5l7eeQL3FqrsonwGx0zDxQeU4=
Subject key identifier:   08:DF:1D:7D:F7:0D:BE:82:5E:F0:ED:BF:9F:E1:3A:A5:D1:D3:83:06
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       2811864E590DD818C796C09059C4FA4511B821B3
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234332e302f32342d3239203d3e203634313230.roa
Signing time:             Thu 25 Jun 2026 00:49:41 +0000
ROA not before:           Thu 25 Jun 2026 00:44:41 +0000
ROA not after:            Thu 24 Jun 2027 00:49:41 +0000
asID:                     64120
IP address blocks:        200.49.243.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:11:86:4e:59:0d:d8:18:c7:96:c0:90:59:c4:fa:45:11:b8:21:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Jun 25 00:44:41 2026 GMT
            Not After : Jun 24 00:49:41 2027 GMT
        Subject: CN=08DF1D7DF70DBE825EF0EDBF9FE13AA5D1D38306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:26:c0:95:ce:44:e2:94:ec:f8:fd:39:3e:
                    33:8b:c8:84:60:27:14:1e:0d:a3:50:1e:ba:80:ad:
                    3b:44:32:3a:82:37:b3:82:86:3c:57:ae:da:73:72:
                    4d:da:ad:8c:23:66:72:99:f7:86:07:66:7c:49:c7:
                    94:82:ec:96:1e:2b:6c:6f:05:aa:7d:4f:8c:40:1e:
                    f7:06:9f:58:1b:b3:89:7c:cf:7c:7f:45:6f:1e:15:
                    2e:84:d1:d1:22:49:f0:3a:eb:fd:45:b9:b5:c6:94:
                    40:c6:b2:86:ca:07:ba:fa:9f:8d:54:90:19:06:f6:
                    29:4e:71:1d:a6:93:49:66:1b:70:b9:25:2e:45:c1:
                    73:45:35:38:e9:02:93:09:da:33:b5:07:92:37:47:
                    a8:04:31:23:3f:2a:cc:c5:58:3b:6b:0d:6c:6e:72:
                    51:4e:fe:16:a3:d0:48:98:94:67:89:2c:73:d2:ea:
                    f3:b5:68:5e:5c:36:1f:29:42:83:61:e3:11:c1:50:
                    08:b5:0b:40:aa:5e:8c:de:6d:4f:86:3a:b4:0b:80:
                    03:a8:e2:3c:6b:fc:70:12:95:dc:c5:92:30:91:37:
                    18:49:3b:d3:5e:8c:99:f5:70:de:77:61:f9:17:58:
                    d9:61:a0:02:39:ed:9a:66:fb:40:b7:12:ea:32:73:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DF:1D:7D:F7:0D:BE:82:5E:F0:ED:BF:9F:E1:3A:A5:D1:D3:83:06
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234332e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:6e:fd:d2:bc:89:ec:1c:68:e1:c5:34:f4:df:de:9e:45:b4:
         7c:2d:a2:21:0d:8e:5b:04:f7:d5:52:25:76:5f:ee:d1:dd:e1:
         c9:75:cc:80:04:22:33:31:36:b3:fb:3a:63:58:bd:69:23:e5:
         d3:24:b5:91:cb:aa:4f:65:d5:3a:e9:09:c2:4e:4d:4d:3f:ff:
         da:ad:b7:c5:01:69:e5:2e:67:84:dc:64:3b:8e:46:cd:ff:57:
         ef:35:8b:f3:a6:0c:db:00:69:e2:96:0e:4c:4c:50:a0:53:9d:
         a6:9a:c3:de:e1:1d:9d:2e:28:39:40:a0:fa:e8:10:19:37:c8:
         1c:73:b3:99:0d:93:6a:0a:d6:77:7e:03:4a:b3:f7:e0:c9:8e:
         31:f4:96:18:73:5f:2a:f0:c2:6c:e3:68:41:09:94:b0:c8:75:
         e5:ac:8d:c3:ee:34:7a:fa:57:c3:56:8d:52:86:fe:e2:b2:ee:
         02:2a:de:a1:ea:ab:9c:57:72:1a:ec:23:be:93:d9:31:50:a6:
         31:a2:ae:06:3f:2d:a2:dc:28:c1:f1:6f:cc:43:22:f9:3c:05:
         75:91:46:09:88:0a:9a:79:63:64:05:dd:52:73:47:0f:29:61:
         22:19:51:20:66:24:69:b2:67:8b:f9:8a:86:a2:29:56:18:ac:
         f1:29:36:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:39:54 2026 by rpki-client