Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e33302e302f32342d3234203d3e20323730303735.roa
File:                     3230302e31302e33302e302f32342d3234203d3e20323730303735.roa (raw, json)
Hash identifier:          D7NScXb9nOLGigzLdBvVmq5TC2JkwHf89eHa6cT8/uY=
Subject key identifier:   1B:65:A2:9C:5F:1F:8F:02:CA:7F:D8:1A:55:3A:74:BD:99:A9:BF:4B
Certificate issuer:       /CN=304D8AC906FC4A87A162240815C8C2D4224130CB
Certificate serial:       2DEE6BFB5486A8BBEFAFA4EEEBE5FE2A01D2DCD5
Authority key identifier: 30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e33302e302f32342d3234203d3e20323730303735.roa
Signing time:             Thu 28 May 2026 22:44:36 +0000
ROA not before:           Thu 28 May 2026 22:39:36 +0000
ROA not after:            Thu 27 May 2027 22:44:36 +0000
asID:                     270075
IP address blocks:        200.10.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ee:6b:fb:54:86:a8:bb:ef:af:a4:ee:eb:e5:fe:2a:01:d2:dc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304D8AC906FC4A87A162240815C8C2D4224130CB
        Validity
            Not Before: May 28 22:39:36 2026 GMT
            Not After : May 27 22:44:36 2027 GMT
        Subject: CN=1B65A29C5F1F8F02CA7FD81A553A74BD99A9BF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fe:db:31:50:9d:55:db:1e:ab:e7:7f:11:4f:
                    d7:39:b0:12:40:f5:8f:76:f3:57:f0:12:cd:22:32:
                    9e:4b:ad:89:0c:ff:57:5c:09:1f:e3:05:8e:c0:62:
                    3a:1a:60:04:3f:61:33:7e:e8:6c:e9:44:17:c8:fd:
                    67:b1:57:0c:ec:bd:56:9b:e9:cd:5a:7c:a8:95:48:
                    a7:5e:07:38:38:58:84:15:fc:6f:bf:23:4b:c3:6e:
                    61:c0:a8:88:50:ba:bc:90:76:fe:09:52:d9:8d:14:
                    e8:37:cd:39:13:9d:15:13:67:ef:de:f6:15:de:10:
                    3e:05:23:94:c7:64:f0:77:bb:ee:de:96:d8:4c:43:
                    e6:bc:55:58:bd:b5:ab:62:cb:79:cd:de:af:7d:3e:
                    f2:38:4d:53:45:7c:69:2d:a9:25:50:8f:ec:80:9f:
                    a0:be:6f:58:21:2c:16:6e:78:15:5d:9b:64:e0:4f:
                    a1:14:5a:a1:52:b3:f3:96:d8:a4:97:2e:c4:dc:e7:
                    71:65:7f:e3:40:e5:6f:fa:33:a4:48:2c:9f:5f:ad:
                    89:80:a4:92:9a:21:8c:cd:d5:d8:c9:44:e4:fd:05:
                    8d:12:cb:e6:2b:90:e0:53:2e:b5:d4:59:c6:28:83:
                    de:b6:14:f4:80:26:9a:32:41:e0:01:81:44:5a:1d:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:65:A2:9C:5F:1F:8F:02:CA:7F:D8:1A:55:3A:74:BD:99:A9:BF:4B
            X509v3 Authority Key Identifier:
                keyid:30:4D:8A:C9:06:FC:4A:87:A1:62:24:08:15:C8:C2:D4:22:41:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/304D8AC906FC4A87A162240815C8C2D4224130CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/304D8AC906FC4A87A162240815C8C2D4224130CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DAD3318A534D8ABB80195FF3669CE16A04A07F4B8F25636BD2ABF36C837AD7D/0/3230302e31302e33302e302f32342d3234203d3e20323730303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:fc:dd:0a:6f:13:44:a5:5c:15:04:e1:37:c7:4e:f8:d8:3e:
         a3:9c:fb:03:82:31:09:55:39:77:49:e8:28:50:48:77:4c:18:
         0f:fc:7d:f1:4e:54:2b:f7:ad:a9:fc:55:74:23:e5:9a:82:79:
         78:f1:d2:d3:26:6b:be:7a:5f:92:52:6e:d4:f1:37:49:ee:79:
         52:8b:29:57:67:09:91:75:0a:cd:05:55:22:3a:14:f8:41:a7:
         8c:2c:d8:75:17:fc:74:6f:30:73:f8:35:11:12:3d:4a:87:8d:
         1b:24:87:d4:94:9f:b9:0b:b2:9b:55:62:26:40:bb:7a:cd:72:
         a9:2d:13:13:3c:05:24:3e:be:bf:80:c6:61:b3:fa:32:c6:d5:
         1f:c7:11:60:1e:c6:72:20:da:5d:ce:bc:fa:1e:32:46:81:12:
         74:60:81:3c:06:5e:4a:76:b8:b6:99:5f:6d:01:ed:9c:fd:dc:
         d7:eb:0d:9f:d6:75:3a:60:4e:50:5b:2c:4a:40:28:ca:33:d3:
         04:37:ab:49:d9:d9:2a:2f:80:56:34:a8:c7:74:e4:02:de:6b:
         25:2c:30:a4:23:67:9d:b6:02:d5:a5:12:3a:29:81:fe:90:bf:
         dc:10:12:03:b5:06:03:9a:d5:0e:01:4e:94:6d:5d:aa:85:6f:
         35:c3:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:17:31 2026 by rpki-client