Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/3230302e35372e33322e302f32302d3234203d3e203232303131.roa
File:                     3230302e35372e33322e302f32302d3234203d3e203232303131.roa (raw, json)
Hash identifier:          ECZ868oID/3GknERv9B1GkM8Kjstu+89G/iyE+Ul3uQ=
Subject key identifier:   75:15:D1:3E:3C:FF:18:84:C4:8A:BB:1C:44:7B:2A:33:92:D4:20:73
Certificate issuer:       /CN=EED9740A57556413451C3DB2C7E611BB32EB036C
Certificate serial:       454D3A434C6A1410B5112909F288907363CD5A7A
Authority key identifier: EE:D9:74:0A:57:55:64:13:45:1C:3D:B2:C7:E6:11:BB:32:EB:03:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/3230302e35372e33322e302f32302d3234203d3e203232303131.roa
Signing time:             Fri 10 Jul 2026 18:30:02 +0000
ROA not before:           Fri 10 Jul 2026 18:25:02 +0000
ROA not after:            Fri 09 Jul 2027 18:30:02 +0000
asID:                     22011
IP address blocks:        200.57.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 23:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4d:3a:43:4c:6a:14:10:b5:11:29:09:f2:88:90:73:63:cd:5a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED9740A57556413451C3DB2C7E611BB32EB036C
        Validity
            Not Before: Jul 10 18:25:02 2026 GMT
            Not After : Jul  9 18:30:02 2027 GMT
        Subject: CN=7515D13E3CFF1884C48ABB1C447B2A3392D42073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:1f:93:06:1a:03:44:6e:90:87:d0:15:6f:
                    21:04:fa:e3:0b:3d:b4:46:d3:9d:f8:0a:fc:28:90:
                    61:09:8d:d8:c5:d7:62:bf:81:aa:de:77:51:3b:7b:
                    f4:73:40:d6:d0:ea:12:1a:d8:49:40:74:da:23:52:
                    d3:77:20:ae:07:d1:88:aa:10:3b:82:ba:07:2a:4c:
                    8b:de:e6:2b:33:d2:7e:ba:12:74:37:69:c8:45:61:
                    41:12:63:a1:06:01:76:e0:84:6b:d7:44:91:d6:e5:
                    d2:a5:5e:2d:e5:39:3c:4b:5b:5d:94:11:0b:c2:9a:
                    f9:72:d6:22:79:cb:12:34:66:de:9b:a5:87:7b:1a:
                    86:d9:3d:97:db:87:a7:1a:6f:d3:27:4b:52:4b:ff:
                    2f:55:5a:30:30:70:25:c9:8d:b1:0d:26:5b:ce:63:
                    e3:dd:e8:8b:13:33:f6:3e:86:5f:f5:a6:76:a9:e8:
                    0d:24:f3:da:40:ff:39:73:b8:92:83:fd:65:07:27:
                    da:5b:2d:d2:6f:a9:3b:f8:51:6d:4e:cb:7e:ab:02:
                    59:bc:bd:db:1c:77:a7:91:89:40:9d:21:69:7b:36:
                    5a:02:e4:61:5a:5d:15:48:33:dd:e0:0f:07:c3:77:
                    d6:b1:48:68:af:bd:b5:cf:ec:1d:e4:50:4f:02:cd:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:15:D1:3E:3C:FF:18:84:C4:8A:BB:1C:44:7B:2A:33:92:D4:20:73
            X509v3 Authority Key Identifier:
                keyid:EE:D9:74:0A:57:55:64:13:45:1C:3D:B2:C7:E6:11:BB:32:EB:03:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/EED9740A57556413451C3DB2C7E611BB32EB036C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EED9740A57556413451C3DB2C7E611BB32EB036C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3B720031C90A5B979E3D45AF9ECAAAED732F1B8B1CE90CE68917F173D88D3D1/0/3230302e35372e33322e302f32302d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:c2:2c:12:85:52:be:7b:74:12:e1:92:69:d0:48:da:c9:
         0c:97:c7:25:01:ff:ab:34:e4:03:69:c5:a9:cc:54:f1:b7:bd:
         6c:1a:f0:a1:7d:54:1e:67:bd:21:4b:32:c3:2b:29:a7:b7:d8:
         49:12:5f:e3:6c:e0:01:dd:1d:b1:2a:23:8d:11:06:55:10:1f:
         f1:ff:df:43:0a:be:b3:30:c8:0d:22:c3:19:23:7c:b5:1e:27:
         cb:f1:3f:24:c6:e7:f5:9a:c7:e0:63:d0:aa:f8:4a:5e:fb:65:
         53:28:78:fb:b9:ec:6c:f1:dc:00:42:53:56:5a:59:9d:20:d5:
         1c:11:f2:1f:0a:0d:d9:4f:85:36:07:24:0e:be:18:6a:d9:d6:
         91:fc:94:7b:06:d3:e1:d8:20:ae:f6:b1:19:93:d4:85:f3:d2:
         b1:0a:20:54:48:13:c0:41:71:25:04:43:d3:da:f5:fc:d7:2a:
         23:5b:3e:ee:4f:c7:4d:62:91:54:39:60:a1:87:19:a2:91:39:
         88:79:b2:88:e5:a0:2b:9b:c7:22:4b:a5:ce:4b:b5:0a:0f:7b:
         33:22:9c:44:76:8b:d9:0b:2c:03:9f:a7:4b:f2:ca:00:90:7c:
         64:bc:53:c2:28:c1:16:e3:d9:bb:8f:43:2e:96:ee:d1:3e:92:
         e6:b9:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:54:11 2026 by rpki-client