Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3230302e362e3135322e302f32312d3231203d3e203439393135.roa
File:                     3230302e362e3135322e302f32312d3231203d3e203439393135.roa (raw, json)
Hash identifier:          UWxS2XwGzuPhNy1ws01qINkiR0BcQbVdgsExh+e/F2c=
Subject key identifier:   91:D9:5B:D2:A2:C5:8E:A5:5E:68:06:70:4B:48:5D:16:72:FA:38:45
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       179FFE1E276F1C2240794BB257AA10C0014A4F82
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3230302e362e3135322e302f32312d3231203d3e203439393135.roa
Signing time:             Fri 22 May 2026 20:40:02 +0000
ROA not before:           Fri 22 May 2026 20:35:02 +0000
ROA not after:            Fri 21 May 2027 20:40:02 +0000
asID:                     49915
IP address blocks:        200.6.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 17:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9f:fe:1e:27:6f:1c:22:40:79:4b:b2:57:aa:10:c0:01:4a:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: May 22 20:35:02 2026 GMT
            Not After : May 21 20:40:02 2027 GMT
        Subject: CN=91D95BD2A2C58EA55E6806704B485D1672FA3845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:54:6f:31:9a:f4:ea:91:20:55:37:00:4d:
                    6a:b4:24:40:79:5e:21:dc:8b:dd:9f:27:25:7e:f9:
                    a9:47:1e:61:36:d4:e3:d7:3d:3f:12:78:4b:22:42:
                    d4:e1:a1:87:15:c5:25:38:50:47:33:40:0e:a7:88:
                    49:0f:35:12:d5:ee:3b:34:17:8c:2c:b5:44:a0:05:
                    6d:2a:1b:a3:17:1b:8f:55:69:32:65:97:79:ab:4c:
                    e8:28:d7:cb:21:65:15:3c:48:9b:35:a8:55:60:ce:
                    e2:f1:7a:44:4e:53:92:89:6e:5c:2c:8d:16:d4:47:
                    30:d0:53:f5:0b:8f:b0:dc:c9:63:c7:53:48:d3:e1:
                    eb:ee:78:1c:fa:ee:23:16:f1:e7:98:02:70:50:4a:
                    04:a4:72:7f:24:93:0c:3a:3d:37:27:a9:07:b5:01:
                    95:0f:c6:c9:57:0f:e3:96:60:87:50:f7:bd:6e:56:
                    d0:da:90:45:58:4d:77:95:11:cc:ba:b0:9c:ad:de:
                    df:b1:0b:a0:b2:07:26:9b:d7:6f:06:b8:7e:40:96:
                    34:3a:1e:44:1a:99:b4:f0:fb:58:8e:30:bd:d0:4c:
                    c6:b5:7a:d2:6d:99:fb:2b:29:83:71:5b:3e:f2:fc:
                    ce:4c:d3:3a:79:b7:8d:90:ea:cf:4b:56:68:51:0e:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D9:5B:D2:A2:C5:8E:A5:5E:68:06:70:4B:48:5D:16:72:FA:38:45
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3230302e362e3135322e302f32312d3231203d3e203439393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ca:03:bf:00:18:50:d2:34:6a:de:5f:1d:83:9e:87:4d:4e:30:
         78:04:bb:46:e7:12:ba:cb:2e:57:53:0c:22:b0:59:e4:8f:07:
         2f:69:e3:28:32:1d:b9:3e:7b:85:e4:24:58:9d:35:aa:ec:22:
         10:a3:79:60:74:04:95:77:00:55:c7:dd:d4:58:f0:10:a7:43:
         3e:48:69:d2:09:f3:c5:ad:62:32:e7:22:02:92:45:06:67:d5:
         79:e3:75:01:53:74:96:2a:da:ab:2a:7b:15:d4:03:02:91:36:
         73:1a:47:2b:a9:01:7e:8f:16:48:08:d7:b1:8c:8b:f7:82:da:
         26:98:45:c3:9c:26:84:fe:ab:c7:9c:5a:b9:ed:60:b9:e2:64:
         c9:7c:18:9c:02:49:33:12:bd:d9:e3:0a:75:29:ae:ea:1f:59:
         fe:e3:ef:9f:ee:b0:30:34:05:98:0e:20:15:50:f6:d0:a7:86:
         66:33:b4:c3:8d:b2:84:a4:af:1b:bb:bb:70:02:c2:c1:8d:f0:
         d9:4f:7a:a1:dd:a7:05:ee:0e:38:d9:c8:de:ac:13:bc:08:17:
         68:65:8a:ae:d0:5a:f2:03:8b:f9:93:1d:99:23:b7:ca:09:6a:
         a9:68:0f:ff:c4:0f:5a:36:b3:cc:79:83:08:35:d8:09:d6:70:
         bf:4f:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:35:59 2026 by rpki-client