Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233362e302f32342d3234203d3e203133393939.roa
File:                     3230302e39352e3233362e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          jgMRWb9HKTP8+Lzi0geFMbxQXCaSFfTAzl6yifBZjWQ=
Subject key identifier:   BA:F2:3F:C7:B4:F8:28:4A:73:DC:B2:2A:46:46:44:FF:1F:22:6D:2F
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       096EDBB4492BBB14185A09AF98ED310F3FDB8D8E
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233362e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 25 Aug 2026 11:26:26 +0000
ROA not before:           Tue 25 Aug 2026 11:21:26 +0000
ROA not after:            Tue 24 Aug 2027 11:26:26 +0000
asID:                     13999
IP address blocks:        200.95.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Sep 2026 08:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6e:db:b4:49:2b:bb:14:18:5a:09:af:98:ed:31:0f:3f:db:8d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Aug 25 11:21:26 2026 GMT
            Not After : Aug 24 11:26:26 2027 GMT
        Subject: CN=BAF23FC7B4F8284A73DCB22A464644FF1F226D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e0:40:a6:5f:25:66:8e:96:b2:6c:07:3a:92:
                    d9:4a:eb:0d:5f:a5:7f:e0:12:1d:03:6d:60:a2:17:
                    82:52:b2:29:79:08:66:85:82:37:9f:36:07:15:da:
                    86:62:c9:db:a8:e8:ab:f8:14:34:70:f4:84:75:2b:
                    a5:ae:6d:33:de:65:bc:07:a9:db:41:24:93:b9:80:
                    c9:78:49:8b:ce:75:ef:17:21:69:aa:97:2d:05:ba:
                    9e:87:01:6c:a6:7d:2f:11:ac:3d:0e:e5:6f:e9:6f:
                    2e:22:89:96:31:66:08:28:2a:aa:5a:ac:91:ce:80:
                    53:cf:1d:c6:9a:f3:c0:3b:38:c7:55:10:92:9b:b9:
                    ea:82:7d:67:9d:ce:c8:22:84:73:8f:6c:c3:14:68:
                    83:1d:d0:88:fa:a0:e0:1f:30:f3:44:38:60:1b:c9:
                    21:ee:c7:a4:d4:1c:37:ef:77:92:61:f6:2d:dc:2f:
                    a8:1a:85:11:bd:b8:a7:e0:f5:25:1d:ad:57:f9:b0:
                    ee:7a:32:4a:2c:ff:f1:4a:ad:41:b7:20:c9:56:34:
                    bc:99:e7:41:f8:66:16:bc:e0:6e:29:df:d9:76:cb:
                    5f:a9:06:e9:46:a2:81:44:f7:86:2b:68:52:fb:72:
                    5e:0b:ba:6d:04:13:ed:f0:52:79:9f:48:35:88:3c:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F2:3F:C7:B4:F8:28:4A:73:DC:B2:2A:46:46:44:FF:1F:22:6D:2F
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233362e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:10:cd:cd:fe:2e:43:48:29:93:be:c1:33:f5:56:8f:58:cc:
         05:10:11:eb:6f:c7:cf:86:a1:a3:ea:22:8b:ce:59:c4:72:28:
         cb:4a:f3:f7:a4:62:69:2c:7f:1b:76:d4:d7:5a:96:57:0e:94:
         9c:a8:1a:74:d1:a1:f5:22:18:da:3e:94:d5:e2:04:08:99:df:
         a6:28:36:7d:99:37:0d:7d:c5:2a:7b:5e:4b:86:7d:12:c4:e0:
         03:c9:d6:ba:8d:b7:32:44:c2:5c:9a:ab:ca:49:40:18:a3:d6:
         0a:06:8b:68:b0:76:83:84:87:95:28:b9:de:70:05:2e:ce:03:
         bf:7d:52:bd:75:02:4c:ce:be:e3:35:61:79:83:09:83:00:bd:
         83:36:40:9b:08:15:73:6d:32:f0:48:6f:3d:89:b2:07:ca:09:
         6f:8b:03:24:9f:50:d7:26:d6:46:e3:cf:a6:28:49:06:ae:7e:
         8b:0b:95:18:cd:a7:08:83:b3:05:65:90:60:60:e0:81:5c:6c:
         ab:ab:97:92:06:ae:c7:c6:05:27:30:02:b1:a9:07:27:87:b1:
         04:a8:5e:05:dc:45:c8:70:e0:a6:dd:8a:fa:27:5b:1a:c1:02:
         cb:e2:02:26:eb:12:be:e8:29:0b:81:c4:18:9b:e0:32:37:bb:
         c8:d6:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:05:31 2026 by rpki-client