Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32322d3232203d3e20323730303735.roa
File:                     3230302e31302e32382e302f32322d3232203d3e20323730303735.roa (raw, json)
Hash identifier:          hJiH827rgoMExvX7RGC0PolQlJVGlBK4RuROGryBjSg=
Subject key identifier:   CC:67:72:6C:00:05:61:71:F4:81:83:BD:B8:4B:98:C1:60:44:33:3D
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       D14D6C575A452D0E8C218E2F10C78D35EBBC86
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32322d3232203d3e20323730303735.roa
Signing time:             Thu 28 May 2026 22:44:37 +0000
ROA not before:           Thu 28 May 2026 22:39:37 +0000
ROA not after:            Thu 27 May 2027 22:44:37 +0000
asID:                     270075
IP address blocks:        200.10.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d1:4d:6c:57:5a:45:2d:0e:8c:21:8e:2f:10:c7:8d:35:eb:bc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: May 28 22:39:37 2026 GMT
            Not After : May 27 22:44:37 2027 GMT
        Subject: CN=CC67726C00056171F48183BDB84B98C16044333D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:89:f5:d7:f4:3f:bb:aa:8d:79:4e:47:f6:
                    ce:6e:4c:28:b9:2d:f4:bf:20:6c:f1:74:8b:18:d9:
                    09:b6:55:29:ee:3a:db:40:9b:ba:96:51:4f:35:30:
                    02:09:40:6a:5c:bd:ee:a7:54:90:92:4c:02:1b:17:
                    4c:f9:18:00:d9:bd:ad:08:a6:68:0d:f0:40:8b:6e:
                    33:73:63:26:b0:88:d9:69:a7:8e:fb:26:fb:2a:1a:
                    dc:01:ce:f5:4e:96:8b:ac:26:4d:4f:d8:1d:df:4b:
                    6e:bc:27:a6:f9:81:b4:95:39:cc:dd:0c:18:2d:52:
                    26:35:aa:38:37:37:fa:28:db:ef:39:db:98:5c:31:
                    b2:0a:d8:13:17:d0:2b:32:61:41:27:1e:be:a0:63:
                    5f:1b:2e:17:1e:67:62:3e:7c:d6:d6:14:31:4e:29:
                    e7:38:6c:eb:9e:78:76:cb:91:cc:bb:7b:56:17:62:
                    f2:06:9d:6a:3d:48:37:ce:97:0a:5a:e1:ed:8f:23:
                    44:d5:c9:c5:9e:c0:74:be:07:a2:64:89:d7:70:36:
                    f2:a5:88:b4:d8:3a:3b:8a:bc:76:50:2c:8c:fc:7f:
                    b7:d0:a0:38:c7:6a:83:c8:7c:79:91:9e:71:dd:b8:
                    4f:0e:a4:07:a9:ea:59:70:b1:72:d9:71:69:49:b5:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:67:72:6C:00:05:61:71:F4:81:83:BD:B8:4B:98:C1:60:44:33:3D
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e32382e302f32322d3232203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:7f:39:12:c0:8a:8b:ce:5d:94:bc:f4:9f:d1:d6:35:ca:a4:
         b4:ba:25:53:1f:82:0f:86:17:7f:9d:7e:e9:af:f8:85:42:33:
         65:25:06:4c:bc:44:3b:22:68:50:00:60:08:e4:5e:ac:0f:97:
         e9:03:12:c7:4b:74:0a:2f:c0:db:e1:1f:53:67:4e:f0:4d:98:
         c5:80:23:07:d4:0d:d6:a8:70:74:05:4a:48:79:38:4a:ab:b2:
         4e:ec:2b:52:58:9c:c5:9e:84:20:df:59:be:da:96:98:35:27:
         7e:ed:35:ff:b6:06:01:b0:38:87:ca:4a:b1:4a:e5:77:a7:91:
         c8:2d:a2:07:b2:82:a3:85:fc:a6:b6:a3:8a:5e:8e:92:81:19:
         6c:34:20:d5:b4:3e:67:f0:5d:ad:50:38:5b:70:34:ef:5a:9f:
         04:d7:80:9d:6f:53:ce:d5:27:dd:be:24:63:07:6b:a1:5d:16:
         0a:ea:d7:08:a1:3d:8d:da:d8:9e:e6:37:ee:03:ba:fa:40:8f:
         95:8d:ae:5f:db:e9:74:13:9c:1f:3a:2d:b7:a0:7e:5e:98:cd:
         ad:3e:a5:ce:64:95:77:eb:d3:4e:19:df:2f:19:45:4c:29:4d:
         e7:37:4f:01:0b:fa:77:69:e8:24:1b:af:42:fc:a8:a2:10:8c:
         34:64:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:17:02 2026 by rpki-client