Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/CCC94F59018C304B6440503D6721F68D0A6333070F74FAED00E5E5241473E177/0/3230302e34392e3232342e302f32302d3230203d3e203134383435.roa
File:                     3230302e34392e3232342e302f32302d3230203d3e203134383435.roa (raw, json)
Hash identifier:          vHrdc3PHpIJY6Qu9kv0lq67eGg7XLt5j89a3STGcC4E=
Subject key identifier:   7E:60:A1:FF:3A:9E:18:D6:2F:73:FF:D9:02:CC:53:19:26:1A:F1:47
Certificate issuer:       /CN=0DB69261A9E4A773CD2998D585FDE2F0335C2B58
Certificate serial:       1ACE8B8441CD5D6A6873BBC20A7CF1C996491EF8
Authority key identifier: 0D:B6:92:61:A9:E4:A7:73:CD:29:98:D5:85:FD:E2:F0:33:5C:2B:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DB69261A9E4A773CD2998D585FDE2F0335C2B58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CCC94F59018C304B6440503D6721F68D0A6333070F74FAED00E5E5241473E177/0/3230302e34392e3232342e302f32302d3230203d3e203134383435.roa
Signing time:             Fri 21 Aug 2026 14:00:00 +0000
ROA not before:           Fri 21 Aug 2026 13:55:00 +0000
ROA not after:            Fri 20 Aug 2027 14:00:00 +0000
asID:                     14845
IP address blocks:        200.49.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CCC94F59018C304B6440503D6721F68D0A6333070F74FAED00E5E5241473E177/0/0DB69261A9E4A773CD2998D585FDE2F0335C2B58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CCC94F59018C304B6440503D6721F68D0A6333070F74FAED00E5E5241473E177/0/0DB69261A9E4A773CD2998D585FDE2F0335C2B58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DB69261A9E4A773CD2998D585FDE2F0335C2B58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 18:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ce:8b:84:41:cd:5d:6a:68:73:bb:c2:0a:7c:f1:c9:96:49:1e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DB69261A9E4A773CD2998D585FDE2F0335C2B58
        Validity
            Not Before: Aug 21 13:55:00 2026 GMT
            Not After : Aug 20 14:00:00 2027 GMT
        Subject: CN=7E60A1FF3A9E18D62F73FFD902CC5319261AF147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0a:35:a1:26:d9:77:42:af:5c:cf:c1:c6:ba:
                    3e:9c:e4:28:ca:db:96:87:6a:b8:fe:1a:0b:af:75:
                    2f:0a:43:35:f1:fc:2f:0d:55:9d:ab:30:ef:54:61:
                    e9:33:d3:f9:73:ac:82:75:df:6b:6e:61:1f:98:ec:
                    a4:91:a7:06:79:e8:fd:d5:b6:67:4a:95:11:fa:a2:
                    c3:d7:aa:4e:79:4a:f8:76:4c:c8:f3:e6:e4:5f:02:
                    65:ff:8f:27:0d:20:5a:70:cc:88:48:a3:66:ba:50:
                    60:d5:85:cf:c4:e8:a0:42:86:ee:4e:eb:ae:fe:e5:
                    08:78:c1:56:7d:51:33:53:98:16:27:2a:8b:ad:09:
                    b5:f0:9a:fd:d8:f7:b0:98:b7:ef:18:f7:2b:a9:a2:
                    33:11:7b:16:aa:6b:e1:d4:a8:26:d8:f3:5d:96:29:
                    4b:c7:21:64:06:bb:aa:9d:e2:3e:7c:9d:39:9e:4e:
                    b1:39:98:24:ad:c6:c3:44:5b:e5:68:33:ad:d4:24:
                    15:84:31:eb:d8:71:bf:29:37:b7:4c:e4:35:60:98:
                    de:eb:d8:ec:6e:54:a0:c2:3c:03:15:b7:68:5f:96:
                    2b:19:c9:37:17:4c:b1:d8:bb:22:02:1e:e8:65:51:
                    fe:a9:40:c7:e6:16:8b:d9:ed:cf:05:21:81:0b:a7:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:60:A1:FF:3A:9E:18:D6:2F:73:FF:D9:02:CC:53:19:26:1A:F1:47
            X509v3 Authority Key Identifier:
                keyid:0D:B6:92:61:A9:E4:A7:73:CD:29:98:D5:85:FD:E2:F0:33:5C:2B:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CCC94F59018C304B6440503D6721F68D0A6333070F74FAED00E5E5241473E177/0/0DB69261A9E4A773CD2998D585FDE2F0335C2B58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DB69261A9E4A773CD2998D585FDE2F0335C2B58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CCC94F59018C304B6440503D6721F68D0A6333070F74FAED00E5E5241473E177/0/3230302e34392e3232342e302f32302d3230203d3e203134383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:24:14:8e:51:a0:fa:b3:59:69:1a:4e:5f:c0:a1:95:a3:4e:
         1c:f3:23:12:b9:68:5b:d3:ac:5a:67:17:02:83:1b:04:88:5c:
         61:97:ad:d1:39:37:ab:f8:34:08:7a:9d:71:38:6e:7a:6e:60:
         6c:20:63:b2:21:e6:de:8d:27:d7:75:fc:6f:81:88:2e:cd:ca:
         b7:0d:36:35:60:a0:78:45:53:73:77:d4:ce:25:0c:e2:bd:3b:
         37:ad:b5:b0:d8:b0:b0:0b:85:6f:80:67:96:f9:6d:e3:a3:5f:
         48:62:fd:96:6c:ff:aa:6e:f8:dd:f8:ed:80:0b:ba:68:5f:60:
         48:36:6e:59:56:a3:23:46:e1:8a:7b:10:b6:8d:23:a2:8b:36:
         9d:54:61:94:f9:07:f1:35:04:20:a6:7b:84:6b:95:a8:b6:2a:
         7b:ec:a3:54:5e:1c:4a:c4:9c:86:1e:a5:6a:95:fb:2e:60:00:
         e3:48:05:3c:65:cd:b9:f8:0b:61:c3:e4:35:b2:31:c8:2d:d1:
         90:aa:21:17:33:d7:17:27:3d:41:12:54:fd:87:a3:5a:0c:60:
         ca:c5:a3:5d:83:36:86:32:04:66:37:19:1c:0a:8f:34:de:5a:
         46:e5:09:47:10:d6:de:bc:8a:a4:cf:a3:25:42:14:60:58:08:
         3c:03:3d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:29:51 2026 by rpki-client