Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36392e3133302e302f32342d3234203d3e203231373536.roa
File:                     3230302e36392e3133302e302f32342d3234203d3e203231373536.roa (raw, json)
Hash identifier:          NnECtWqRsoaHZw+af7gknLyqW+Xo5guC+R6oHz7QE/Q=
Subject key identifier:   FF:18:23:E6:4B:E5:8B:81:17:F0:65:39:48:B6:25:B1:ED:13:26:2A
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       35CD81FB714F2006BB554B366D20C76062386470
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36392e3133302e302f32342d3234203d3e203231373536.roa
Signing time:             Wed 26 Aug 2026 12:50:00 +0000
ROA not before:           Wed 26 Aug 2026 12:45:00 +0000
ROA not after:            Wed 25 Aug 2027 12:50:00 +0000
asID:                     21756
IP address blocks:        200.69.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cd:81:fb:71:4f:20:06:bb:55:4b:36:6d:20:c7:60:62:38:64:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Aug 26 12:45:00 2026 GMT
            Not After : Aug 25 12:50:00 2027 GMT
        Subject: CN=FF1823E64BE58B8117F0653948B625B1ED13262A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:15:13:04:de:bc:09:c9:e1:7e:9f:f0:83:
                    a6:fe:54:c3:72:d7:33:a5:20:d7:c1:62:15:2d:43:
                    79:8e:f3:ed:86:5f:a7:cd:b8:a3:6f:2b:6f:54:6e:
                    75:ca:f1:ae:b5:55:dc:5c:c6:53:9b:5d:e0:47:41:
                    64:dd:c5:6b:02:b1:56:68:16:be:56:6c:e5:37:81:
                    65:84:5b:27:8f:59:c8:a4:59:e7:f0:a9:ad:91:d3:
                    00:84:c1:70:59:57:1b:a3:83:c7:2d:5a:ee:d3:9d:
                    1d:54:a4:46:f6:59:11:d9:ee:d2:7d:73:4e:bb:06:
                    11:d5:e1:51:b1:5a:2e:de:c9:7b:dc:13:da:b0:51:
                    1e:ba:7d:cc:43:6f:c6:4a:a5:2c:45:07:8b:45:b9:
                    9d:ca:e9:3d:09:5e:8e:ba:2a:bd:14:de:6b:86:97:
                    eb:c1:ab:f8:7e:a4:db:48:6a:ca:ce:a4:ae:ea:8e:
                    c2:1f:3b:dd:4a:80:c8:d2:c1:49:3b:02:d3:e9:12:
                    75:1d:4f:93:9f:f0:3a:40:07:18:ff:b4:d4:b7:a0:
                    91:17:73:87:a0:1d:f2:7e:82:7e:cd:6c:23:57:ff:
                    ec:3d:16:e4:23:44:ba:93:26:bc:74:4c:58:1b:92:
                    0b:7c:46:0f:74:60:cd:5c:59:22:61:ca:25:c1:44:
                    4d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:18:23:E6:4B:E5:8B:81:17:F0:65:39:48:B6:25:B1:ED:13:26:2A
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36392e3133302e302f32342d3234203d3e203231373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:0f:b2:54:f6:cd:fb:8a:87:25:41:9d:cc:19:b2:37:f2:
         69:c1:f0:68:0b:98:27:a1:78:1d:46:b6:9e:c5:e9:41:47:a7:
         39:c9:08:c5:f1:70:bd:03:b1:54:e6:00:e1:43:9b:a0:24:6e:
         74:54:0c:21:c3:f6:f3:ab:dd:55:29:52:49:26:82:30:52:16:
         e0:aa:a0:e5:6e:3d:a4:e5:7b:03:09:ea:4d:40:0f:ed:2c:14:
         6b:07:49:c7:72:1b:e5:32:b3:68:9f:09:0b:3c:fe:49:2a:69:
         59:83:50:3c:ec:fc:8b:88:d0:29:60:6d:89:54:4b:85:cf:42:
         a2:6e:b9:08:2d:ce:db:56:43:93:95:e0:fb:dd:f0:27:42:7b:
         73:12:ee:d5:a4:2b:f4:e8:a0:74:e2:4b:3a:2e:10:d2:10:71:
         32:f6:c5:94:8c:88:50:43:60:ae:bc:0d:23:30:dc:c4:51:2e:
         58:a1:ae:54:86:a6:f4:23:84:d9:ea:d1:a6:73:ff:d2:16:90:
         3b:dc:d1:33:77:9e:72:83:5e:a8:fb:1d:80:3d:8d:8b:0f:86:
         d8:92:39:6a:c7:a1:eb:c2:0b:65:dc:60:13:00:80:ec:9d:e7:
         1b:65:96:e7:fc:70:41:b7:4f:1e:b3:de:da:69:0e:e2:17:b4:
         04:2e:93:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:57:39 2026 by rpki-client