Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132332e302f32342d3234203d3e20323730323230.roa
File:                     3230302e37362e3132332e302f32342d3234203d3e20323730323230.roa (raw, json)
Hash identifier:          cWg0vqGLZfz6K85pwajfRDhKki7ERItLYTOFevm3nag=
Subject key identifier:   AA:1C:EE:1E:CC:3A:33:2D:C5:40:EF:6A:6A:54:11:E1:DC:E5:12:85
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       27EBC583EB705F76F711ED7EA60864A6A16C251F
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132332e302f32342d3234203d3e20323730323230.roa
Signing time:             Tue 25 Aug 2026 18:26:29 +0000
ROA not before:           Tue 25 Aug 2026 18:21:29 +0000
ROA not after:            Tue 24 Aug 2027 18:26:29 +0000
asID:                     270220
IP address blocks:        200.76.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 22:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:eb:c5:83:eb:70:5f:76:f7:11:ed:7e:a6:08:64:a6:a1:6c:25:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Aug 25 18:21:29 2026 GMT
            Not After : Aug 24 18:26:29 2027 GMT
        Subject: CN=AA1CEE1ECC3A332DC540EF6A6A5411E1DCE51285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:8a:56:68:a5:4f:8f:e6:d5:55:44:78:1c:
                    6b:50:d3:ab:20:7c:d7:b1:a8:07:52:ee:0c:63:1a:
                    40:10:8d:a1:5b:72:a5:97:3b:e2:e7:ab:26:46:2b:
                    96:a7:af:7f:65:57:ea:88:d9:8c:ca:59:99:e3:9f:
                    fa:a9:d8:59:7f:17:36:ce:52:83:b7:58:68:58:f2:
                    3e:54:63:00:23:5e:a7:20:3c:f8:da:53:7a:ec:73:
                    62:fe:ef:d4:97:c8:1e:4e:2e:ff:82:93:97:ab:58:
                    92:96:ab:20:bc:c2:5d:e1:60:9f:34:40:11:a5:74:
                    a2:d2:56:97:a4:9b:97:88:af:17:d4:0d:14:c4:a7:
                    e4:29:46:6e:24:90:c6:7c:e9:0c:97:1b:c1:24:56:
                    58:00:16:ce:d6:e2:6a:73:d3:a7:b0:84:c3:0c:f6:
                    0f:ef:c3:45:e7:1f:f8:a8:3a:81:11:4d:90:b2:c8:
                    50:51:60:0e:aa:44:75:96:31:21:e7:10:23:b5:a2:
                    e4:46:3d:a2:7a:51:df:15:42:6e:8e:1e:bf:1c:d4:
                    84:52:32:2c:31:89:c5:ee:92:a1:ff:82:b6:d1:28:
                    ef:6e:7c:3f:8b:d7:75:17:a3:c3:20:73:72:eb:99:
                    60:99:29:98:a2:1d:99:88:e1:6b:23:c0:61:f6:06:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1C:EE:1E:CC:3A:33:2D:C5:40:EF:6A:6A:54:11:E1:DC:E5:12:85
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132332e302f32342d3234203d3e20323730323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:49:c9:31:fb:f7:67:71:9a:45:83:8f:66:d0:94:a5:3e:9b:
         ab:c0:32:60:a0:52:a4:3e:96:5c:1d:99:ea:f1:11:ed:bd:d2:
         ff:cc:ca:5d:68:85:2c:56:ef:96:a3:10:ed:ea:9a:f9:6f:eb:
         82:a4:38:a6:ee:1e:51:3a:83:3f:d0:f1:d3:0f:4d:1e:3b:33:
         cb:e1:69:32:ab:3d:00:bb:f3:ac:60:2c:64:ca:49:9c:9a:e8:
         51:cd:a5:10:fd:98:04:61:80:ba:dc:67:4f:a3:39:b3:7f:61:
         a4:b6:96:84:38:b4:a3:6e:68:c8:71:38:14:c2:49:66:ae:58:
         a0:f4:96:f8:80:b7:0c:18:55:9b:7e:92:69:35:3e:b2:49:74:
         11:6b:70:43:e8:76:bf:4c:88:e7:ec:dd:2f:84:78:28:40:b8:
         41:9f:cf:d6:d6:ba:3c:52:63:02:36:25:e1:89:1f:16:22:95:
         38:42:30:f8:3d:c3:59:f6:4c:5d:34:b1:5f:94:8c:0e:ca:82:
         93:d1:54:65:4a:59:c2:d3:cb:a3:b4:0c:dc:10:2f:c2:0f:a4:
         50:dc:4c:0a:02:a1:d7:1e:67:d3:96:e3:46:1d:84:66:c2:01:
         3b:cd:3f:59:6f:65:2f:60:f3:7f:06:b4:0c:77:d8:43:17:c6:
         60:16:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 19:38:04 2026 by rpki-client