Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/AB82ACCD88AEAB473B35EB93CA2D63E8708ECAFFBA07F5D19BCA9F8A3FF2A4B8/0/3230302e312e3131372e302f32342d3234203d3e203231373536.roa
File:                     3230302e312e3131372e302f32342d3234203d3e203231373536.roa (raw, json)
Hash identifier:          gZDlVQ1FWKceh1oNh4UxUBiR5UJWMePUkg/TaZohSB8=
Subject key identifier:   D7:73:D2:C5:95:60:5B:A7:8E:94:AB:91:5C:FD:93:FD:7E:97:0A:25
Certificate issuer:       /CN=F96423B779A5F1FE37297ADC4D1568C15225A2F1
Certificate serial:       33719018F4FB64DCC42712ADF78F2DF2690CF3DB
Authority key identifier: F9:64:23:B7:79:A5:F1:FE:37:29:7A:DC:4D:15:68:C1:52:25:A2:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F96423B779A5F1FE37297ADC4D1568C15225A2F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB82ACCD88AEAB473B35EB93CA2D63E8708ECAFFBA07F5D19BCA9F8A3FF2A4B8/0/3230302e312e3131372e302f32342d3234203d3e203231373536.roa
Signing time:             Wed 26 Aug 2026 12:55:00 +0000
ROA not before:           Wed 26 Aug 2026 12:50:00 +0000
ROA not after:            Wed 25 Aug 2027 12:55:00 +0000
asID:                     21756
IP address blocks:        200.1.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB82ACCD88AEAB473B35EB93CA2D63E8708ECAFFBA07F5D19BCA9F8A3FF2A4B8/0/F96423B779A5F1FE37297ADC4D1568C15225A2F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB82ACCD88AEAB473B35EB93CA2D63E8708ECAFFBA07F5D19BCA9F8A3FF2A4B8/0/F96423B779A5F1FE37297ADC4D1568C15225A2F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F96423B779A5F1FE37297ADC4D1568C15225A2F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:71:90:18:f4:fb:64:dc:c4:27:12:ad:f7:8f:2d:f2:69:0c:f3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F96423B779A5F1FE37297ADC4D1568C15225A2F1
        Validity
            Not Before: Aug 26 12:50:00 2026 GMT
            Not After : Aug 25 12:55:00 2027 GMT
        Subject: CN=D773D2C595605BA78E94AB915CFD93FD7E970A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e0:62:e8:94:3a:4a:3e:62:97:24:79:9e:7f:
                    74:09:33:c6:5f:4c:99:b6:3c:8e:30:de:41:fa:9d:
                    d9:08:01:98:e5:42:e9:15:bb:aa:11:cb:2f:aa:0e:
                    85:05:ac:5e:e5:9f:0c:8a:94:54:d1:a8:07:c8:39:
                    04:ce:44:b4:c4:c6:34:72:9b:12:bd:08:2e:03:6a:
                    a7:ce:19:c2:ac:f9:27:d7:f9:ed:12:e2:0c:cd:cd:
                    3f:32:30:e6:0f:d3:25:11:87:1c:3c:fd:63:2f:93:
                    cc:2f:e3:ba:40:55:85:33:56:36:02:55:91:b8:3b:
                    81:06:ed:ae:71:a0:0a:69:40:81:1f:83:14:fb:88:
                    34:17:82:ca:a3:eb:ff:8c:51:3e:65:d8:6a:44:50:
                    54:5d:3b:07:a4:3f:ce:33:b2:59:d0:bf:a0:1f:18:
                    04:88:3e:0d:90:9c:46:a8:b9:f9:37:86:c8:a4:d0:
                    30:53:4a:17:1a:bd:9a:5b:18:a1:fe:59:21:63:3e:
                    37:5c:fd:7b:cb:7a:3e:a7:df:a6:ef:d0:9f:4b:56:
                    33:95:1a:48:d7:c8:66:c1:7e:c4:30:79:95:01:81:
                    8b:b2:5a:ab:7d:2d:90:a8:0c:67:0d:6c:26:f5:b4:
                    7d:fb:71:ee:ac:30:96:98:d7:13:68:60:ba:5b:b7:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:73:D2:C5:95:60:5B:A7:8E:94:AB:91:5C:FD:93:FD:7E:97:0A:25
            X509v3 Authority Key Identifier:
                keyid:F9:64:23:B7:79:A5:F1:FE:37:29:7A:DC:4D:15:68:C1:52:25:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB82ACCD88AEAB473B35EB93CA2D63E8708ECAFFBA07F5D19BCA9F8A3FF2A4B8/0/F96423B779A5F1FE37297ADC4D1568C15225A2F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F96423B779A5F1FE37297ADC4D1568C15225A2F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB82ACCD88AEAB473B35EB93CA2D63E8708ECAFFBA07F5D19BCA9F8A3FF2A4B8/0/3230302e312e3131372e302f32342d3234203d3e203231373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:3c:12:d3:d8:7d:f2:ff:33:a5:2e:9b:5b:7a:f4:b6:41:c1:
         01:b3:e3:2b:34:0c:74:e2:7a:f3:43:18:11:9e:42:4c:77:29:
         3b:a7:52:44:63:4b:c4:73:8a:04:c2:b7:82:44:cf:16:8f:7c:
         38:e5:83:c8:18:af:6f:7a:66:99:52:cd:6a:82:7d:e4:39:37:
         d0:5d:92:ec:99:7e:38:50:a1:d2:5e:31:42:a4:e4:a1:c7:89:
         71:60:2d:a6:1f:b5:dc:3e:e9:16:90:e7:d1:19:5a:4b:7c:d2:
         4c:49:fb:2b:9b:4d:5b:c6:9a:db:f4:d1:4e:64:fc:d3:2d:f5:
         26:8f:14:1e:62:e8:84:c0:e4:58:31:7f:d9:44:2b:e1:2c:4f:
         34:65:43:20:dc:7a:30:b2:f2:34:cf:75:27:0e:f8:2e:da:92:
         6a:7d:7f:32:34:4e:67:ef:36:a8:fa:72:d9:dd:73:44:08:e9:
         2f:6e:a2:59:19:de:37:1e:a7:9f:5a:2e:36:1b:0f:89:e5:c3:
         9a:f0:3b:4e:df:ff:66:aa:d2:7a:ff:a1:74:03:2c:3c:cb:64:
         d1:ef:51:d6:98:f0:8a:2f:b6:75:46:e8:b0:b9:cf:a3:6f:c5:
         d5:61:77:42:cf:43:25:c1:d6:e0:3e:47:4c:ec:1f:53:bc:86:
         a7:3f:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:57:34 2026 by rpki-client