Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/3230302e3232392e3231392e302f32342d3234203d3e20323733323333.roa
File:                     3230302e3232392e3231392e302f32342d3234203d3e20323733323333.roa (raw, json)
Hash identifier:          imaneIN7t6brMWvPSdERrq8LuZweXVy5ZGRuLDHAsaw=
Subject key identifier:   AE:64:29:78:49:DF:EA:9E:B0:98:25:87:EC:B0:AE:BE:FD:54:3F:8E
Certificate issuer:       /CN=CC24D90254A41274A8A8BFBB503CD1112D6EF1D8
Certificate serial:       50E85E69B6F525D434AF26A93C94B9A20AF21613
Authority key identifier: CC:24:D9:02:54:A4:12:74:A8:A8:BF:BB:50:3C:D1:11:2D:6E:F1:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/3230302e3232392e3231392e302f32342d3234203d3e20323733323333.roa
Signing time:             Fri 17 Jul 2026 22:03:43 +0000
ROA not before:           Fri 17 Jul 2026 21:58:43 +0000
ROA not after:            Fri 16 Jul 2027 22:03:43 +0000
asID:                     273233
IP address blocks:        200.229.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e8:5e:69:b6:f5:25:d4:34:af:26:a9:3c:94:b9:a2:0a:f2:16:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC24D90254A41274A8A8BFBB503CD1112D6EF1D8
        Validity
            Not Before: Jul 17 21:58:43 2026 GMT
            Not After : Jul 16 22:03:43 2027 GMT
        Subject: CN=AE64297849DFEA9EB0982587ECB0AEBEFD543F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:f9:e9:c1:df:64:1a:be:57:90:d7:2a:79:
                    66:49:22:cc:9e:47:3b:55:f2:33:d6:c8:22:76:1e:
                    42:ba:26:b1:55:97:ba:da:21:74:ba:ca:36:34:b5:
                    f0:d2:e4:e2:f9:68:3c:51:51:04:fa:38:49:1b:12:
                    f8:f7:4c:7b:b5:90:b8:15:11:6a:9c:38:03:6d:0c:
                    d1:26:bb:17:58:04:35:56:c1:39:e0:6a:af:4d:c6:
                    a3:e1:64:c4:dc:5e:43:2a:bc:ba:bb:45:3e:a6:d7:
                    cd:be:e4:64:1b:a1:52:c3:c9:68:90:f8:a0:87:d4:
                    b9:5e:b3:38:29:16:19:51:29:a8:c7:25:4b:82:95:
                    64:df:e1:d5:21:dc:0e:38:88:22:cb:61:74:e5:14:
                    84:4c:9a:1b:20:45:d4:f1:4f:d5:a5:4f:97:78:60:
                    60:25:8d:63:ba:d1:46:8f:6a:62:f7:02:1b:c9:ea:
                    2b:75:d8:81:a4:5e:f8:02:9d:eb:1d:eb:7e:7b:4b:
                    40:1d:e5:e7:8a:0f:80:d0:64:ba:f4:42:b3:81:c6:
                    09:28:40:29:ad:07:cd:a7:28:92:f9:5a:81:27:6e:
                    a9:e6:19:50:d7:e4:f9:ba:1e:a4:6c:80:78:47:ef:
                    2f:46:f5:7e:e7:64:61:09:04:cb:60:e0:d2:71:ac:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:64:29:78:49:DF:EA:9E:B0:98:25:87:EC:B0:AE:BE:FD:54:3F:8E
            X509v3 Authority Key Identifier:
                keyid:CC:24:D9:02:54:A4:12:74:A8:A8:BF:BB:50:3C:D1:11:2D:6E:F1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC24D90254A41274A8A8BFBB503CD1112D6EF1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3F18CB68B6A1FC5A58BF9A29DEAD2D84DE031EDB02D255B7D5A45004F3C7F10/0/3230302e3232392e3231392e302f32342d3234203d3e20323733323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ac:eb:12:ca:e4:86:d3:8b:08:2f:ab:c3:cb:fe:f5:eb:b5:
         3f:4a:c6:11:f4:e0:c8:ca:60:8e:ff:f0:de:0d:71:be:97:b4:
         76:d5:00:14:5f:6c:6a:44:11:19:c7:ee:be:b9:55:f0:e0:b1:
         49:30:d2:91:18:21:83:0a:78:95:a7:6a:67:0c:10:ee:cc:1b:
         f3:d0:d6:22:b4:f4:aa:5b:3f:8f:66:2c:28:9e:64:ff:1f:32:
         f3:41:59:56:da:8c:1b:4d:ef:ac:1b:65:35:1f:6d:26:bc:16:
         f5:5f:bf:f8:e5:d5:b8:b2:d9:8c:a9:d4:56:03:df:29:40:3b:
         28:cd:37:76:ac:02:8e:58:ce:2a:0a:31:89:3f:12:6a:92:14:
         87:1e:c4:87:5c:e2:d1:83:35:7a:e1:94:57:ed:5c:72:ab:f6:
         ed:0c:0e:99:45:ef:9e:2a:9e:a7:87:ef:a5:7c:fa:94:ac:70:
         50:23:00:c9:32:40:18:a8:3b:d0:b8:02:6a:a0:9e:f2:5b:8e:
         20:f3:9a:bf:08:09:f0:1e:fb:e4:33:da:ca:8f:b2:37:0c:9a:
         fa:f6:cd:a5:53:73:d8:8b:34:32:f3:7e:a1:68:a5:04:73:82:
         0b:6a:c1:17:7a:b6:47:b5:10:11:ae:b5:ad:1d:46:1a:15:80:
         5c:64:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:50:09 2026 by rpki-client