Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3230302e3131302e3136302e302f32312d3232203d3e203237383737.roa
File:                     3230302e3131302e3136302e302f32312d3232203d3e203237383737.roa (raw, json)
Hash identifier:          lk99D27gdekjNfhUMswGqRO+y+UuR7K2bXkWbi9W24M=
Subject key identifier:   DE:67:85:76:A1:73:47:83:09:4C:CB:3F:A0:05:55:A8:56:AC:81:14
Certificate issuer:       /CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
Certificate serial:       2621701D49324FDFF87678759E8F35EACB0139FF
Authority key identifier: 1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3230302e3131302e3136302e302f32312d3232203d3e203237383737.roa
Signing time:             Tue 30 Jun 2026 12:50:19 +0000
ROA not before:           Tue 30 Jun 2026 12:45:19 +0000
ROA not after:            Tue 29 Jun 2027 12:50:19 +0000
asID:                     27877
IP address blocks:        200.110.160.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 11:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:21:70:1d:49:32:4f:df:f8:76:78:75:9e:8f:35:ea:cb:01:39:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
        Validity
            Not Before: Jun 30 12:45:19 2026 GMT
            Not After : Jun 29 12:50:19 2027 GMT
        Subject: CN=DE678576A1734783094CCB3FA00555A856AC8114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:3b:65:4b:fd:43:6c:b1:43:16:17:a1:d5:
                    38:14:02:f9:bf:4d:86:fa:b5:15:85:87:f2:53:28:
                    68:44:4c:00:21:2e:77:21:39:ac:5f:9f:e4:eb:c4:
                    c8:1f:ad:25:b5:e1:ab:16:f6:f8:33:0c:e7:71:22:
                    54:7c:27:4a:70:7a:f4:9e:7c:65:b6:d2:e3:1b:55:
                    b7:77:a9:33:d3:34:b1:1a:1e:0f:95:54:25:ae:fa:
                    d9:eb:2a:04:fc:49:16:58:d1:b0:1c:21:02:3f:fc:
                    06:05:6e:9c:f7:62:8c:59:cd:48:30:f8:a6:88:d6:
                    c8:43:9b:c1:31:e5:7e:74:45:9f:41:e1:06:ae:32:
                    fd:18:54:d1:3b:4f:d1:8f:19:99:46:4e:14:41:9b:
                    42:3c:b0:88:b3:98:de:e6:ab:70:e5:d4:c0:76:32:
                    9f:f9:c0:58:1e:e9:77:9f:0e:a0:da:6b:d0:38:d4:
                    17:bc:92:09:7a:2d:f5:3f:9a:f6:57:bd:0a:c9:e3:
                    32:a9:22:d4:e2:fc:fa:fb:dd:fb:9d:cf:a2:da:f1:
                    7f:f9:21:13:1a:da:e5:e8:34:a4:54:79:82:fc:89:
                    93:7e:de:15:ed:eb:42:6a:a6:52:ba:48:d1:50:f8:
                    3d:37:27:08:b8:2d:ca:25:a3:8f:63:08:70:2d:77:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:67:85:76:A1:73:47:83:09:4C:CB:3F:A0:05:55:A8:56:AC:81:14
            X509v3 Authority Key Identifier:
                keyid:1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3230302e3131302e3136302e302f32312d3232203d3e203237383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:3f:0e:a7:7d:40:bd:ad:f8:40:a3:44:fe:2e:f0:1a:ae:56:
         35:e0:40:25:8a:9f:f5:76:9f:09:36:d1:46:dc:bf:d9:6c:20:
         3e:23:35:ea:d4:4c:cc:a8:44:f0:11:0a:93:94:15:64:70:51:
         06:61:45:7c:ab:4f:68:ba:3f:01:70:c8:43:cc:4d:58:87:83:
         b4:7d:d4:d1:e4:d9:b9:43:5e:c9:ff:e1:09:91:c1:72:c6:39:
         ac:72:93:b8:a4:c1:4d:18:01:ce:92:bf:29:98:58:4d:0b:54:
         8a:e1:ee:81:3e:d3:6b:4b:5a:7c:e4:b4:1e:f8:88:b7:4b:7b:
         ea:61:fc:61:c5:0a:a1:00:d5:f5:41:6e:31:e2:fa:fb:d6:45:
         ca:78:2f:32:2c:d1:2c:55:e7:3a:9c:04:6b:8b:72:48:bc:5a:
         b6:af:5d:3a:f4:e2:e7:8d:ce:39:2a:98:73:78:1f:99:3c:4f:
         cf:bf:37:83:f2:8a:a3:c8:7e:3a:97:ee:0e:c2:f7:0b:c6:a0:
         81:79:81:29:3e:25:28:39:f8:6f:83:75:67:24:60:f6:1f:29:
         3c:30:b3:60:1d:64:e1:77:e8:5c:e9:05:9f:e9:6e:2c:d5:0b:
         ca:b2:f4:43:ea:98:67:8b:b3:d3:a4:6b:a0:45:43:9f:97:d4:
         f7:a1:60:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:56:18 2026 by rpki-client