Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3230312e3233382e302e302f31382d3234203d3e203237383839.roa
File:                     3230312e3233382e302e302f31382d3234203d3e203237383839.roa (raw, json)
Hash identifier:          pIJqjrSG4TCtSRiH3wAj3otTx140QOO0cVLqkTI1xlQ=
Subject key identifier:   1E:65:AF:8F:C0:9D:0F:76:93:C1:90:63:B7:E2:17:69:30:E3:E2:5D
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       59ADC9BF7F807642CF5088D172162AFF801A8576
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3230312e3233382e302e302f31382d3234203d3e203237383839.roa
Signing time:             Fri 13 Mar 2026 13:33:43 +0000
ROA not before:           Fri 13 Mar 2026 13:28:43 +0000
ROA not after:            Fri 12 Mar 2027 13:33:43 +0000
asID:                     27889
IP address blocks:        201.238.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 06:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ad:c9:bf:7f:80:76:42:cf:50:88:d1:72:16:2a:ff:80:1a:85:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Mar 13 13:28:43 2026 GMT
            Not After : Mar 12 13:33:43 2027 GMT
        Subject: CN=1E65AF8FC09D0F7693C19063B7E2176930E3E25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:33:72:f3:b9:e8:a1:90:1e:ba:c7:12:90:
                    a0:76:02:1a:8d:b5:38:4c:ac:54:42:f7:ff:e5:4e:
                    4f:96:94:b6:a5:3d:44:0d:0d:6c:1f:ee:02:07:4e:
                    34:32:97:16:4b:f7:16:2a:ab:6e:68:57:7e:1e:d2:
                    cf:86:25:54:ac:ef:2f:2d:b9:e0:80:59:bc:33:75:
                    85:cf:ff:a1:5d:55:60:8d:34:91:97:ac:42:53:2b:
                    7a:c5:c5:4a:72:28:00:2d:7f:51:84:ef:26:11:4d:
                    1d:59:a8:8e:5d:a5:bb:83:32:0a:6e:c6:3c:6a:f1:
                    94:c8:90:35:51:ae:a9:55:bd:68:5c:a1:d9:71:9e:
                    19:b5:99:b3:b9:9e:2a:d5:48:79:17:70:03:44:0b:
                    fc:5f:15:dc:9e:49:f8:86:88:a9:53:b1:42:73:85:
                    3c:90:af:7b:3d:32:ae:5c:10:a0:f1:6c:21:eb:70:
                    c1:da:07:94:c9:4a:55:3a:7f:ca:01:40:d2:6b:99:
                    b5:27:2d:74:c3:18:ec:1a:1d:a6:4c:e7:51:59:f0:
                    48:61:f6:fe:f4:db:3b:58:9e:bc:37:c0:2b:62:21:
                    62:b3:ed:3a:6b:80:f0:2e:48:d6:64:e8:c0:fc:da:
                    86:fb:29:64:c0:cd:0d:95:58:ee:1d:88:fa:33:ea:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:65:AF:8F:C0:9D:0F:76:93:C1:90:63:B7:E2:17:69:30:E3:E2:5D
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3230312e3233382e302e302f31382d3234203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         33:34:93:7c:a4:71:3d:7b:3d:2d:6f:94:94:42:61:fb:bf:ab:
         60:5b:d6:4f:d1:49:ce:55:9a:57:4b:87:59:fb:bf:e3:b6:56:
         0a:a4:a2:11:68:f0:d8:c5:45:cb:1d:ed:16:7f:ef:84:78:df:
         1e:45:62:82:2c:ad:a4:f0:f3:7d:04:6a:9e:04:a8:83:82:38:
         07:c7:b3:84:3f:dd:be:db:ee:b8:13:70:27:db:73:51:14:59:
         39:78:50:6e:8c:b6:9f:0a:3b:f0:91:c4:66:b8:71:71:7e:de:
         57:39:8b:71:1d:d3:36:f9:2c:5d:8d:99:ba:ed:70:2c:11:a9:
         af:de:30:ce:cb:40:aa:8c:dd:03:ae:44:65:4b:b6:de:39:5b:
         dc:61:2e:7f:92:aa:6e:89:7f:a9:79:f1:f5:35:a3:8f:3e:74:
         b2:7c:c9:dc:21:b9:04:29:5b:68:91:6b:13:08:56:e8:19:88:
         5a:0e:60:6c:73:09:53:5f:a5:c8:b3:99:84:08:da:07:04:f9:
         1c:79:66:4d:96:90:a9:e5:71:55:6e:9b:39:f4:b3:9b:cf:e5:
         d4:63:f3:d8:4e:f5:75:65:3a:b1:d3:1f:4b:f3:72:ba:49:8a:
         a0:e3:82:40:ca:c1:f2:8c:ea:2d:83:0f:45:e7:84:46:8a:e9:
         b4:43:f1:20
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWa3Jv3+AdkLPUIjRchYq/4AahXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QyQzA2NUM5NzRFNzAwQjEzNjlFREY0QURCRTFCRDEx
MjcyQjA5QTAeFw0yNjAzMTMxMzI4NDNaFw0yNzAzMTIxMzMzNDNaMDMxMTAvBgNV
BAMTKDFFNjVBRjhGQzA5RDBGNzY5M0MxOTA2M0I3RTIxNzY5MzBFM0UyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViDNy87nooZAeuscSkKB2AhqN
tThMrFRC9//lTk+WlLalPUQNDWwf7gIHTjQylxZL9xYqq25oV34e0s+GJVSs7y8t
ueCAWbwzdYXP/6FdVWCNNJGXrEJTK3rFxUpyKAAtf1GE7yYRTR1ZqI5dpbuDMgpu
xjxq8ZTIkDVRrqlVvWhcodlxnhm1mbO5nirVSHkXcANEC/xfFdyeSfiGiKlTsUJz
hTyQr3s9Mq5cEKDxbCHrcMHaB5TJSlU6f8oBQNJrmbUnLXTDGOwaHaZM51FZ8Ehh
9v702ztYnrw3wCtiIWKz7TprgPAuSNZk6MD82ob7KWTAzQ2VWO4diPoz6lj/AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUHmWvj8CdD3aTwZBjt+IXaTDj4l0wHwYDVR0j
BBgwFoAUPSwGXJdOcAsTae30rb4b0RJysJowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjE3NDg3OEY2NUMzMDk5REVFMjZFQTI5NjUxODVERDJD
MDEwMTUzQzVEQzM0MzcyM0I1MEE0MDYwQThBMEVBLzAvM0QyQzA2NUM5NzRFNzAw
QjEzNjlFREY0QURCRTFCRDExMjcyQjA5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDJDMDY1Qzk3NEU3MDBCMTM2
OUVERjRBREJFMUJEMTEyNzJCMDlBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUYxNzQ4NzhGNjVDMzA5OURFRTI2RUEyOTY1MTg1REQyQzAxMDE1M0M1
REMzNDM3MjNCNTBBNDA2MEE4QTBFQS8wLzMyMzAzMTJlMzIzMzM4MmUzMDJlMzAy
ZjMxMzgyZDMyMzQyMDNkM2UyMDMyMzczODM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbJ7gAwDQYJ
KoZIhvcNAQELBQADggEBADM0k3ykcT17PS1vlJRCYfu/q2Bb1k/RSc5VmldLh1n7
v+O2VgqkohFo8NjFRcsd7RZ/74R43x5FYoIsraTw830Eap4EqIOCOAfHs4Q/3b7b
7rgTcCfbc1EUWTl4UG6Mtp8KO/CRxGa4cXF+3lc5i3Ed0zb5LF2NmbrtcCwRqa/e
MM7LQKqM3QOuRGVLtt45W9xhLn+Sqm6Jf6l58fU1o48+dLJ8ydwhuQQpW2iRaxMI
VugZiFoOYGxzCVNfpcizmYQI2gcE+Rx5Zk2WkKnlcVVumzn0s5vP5dRj89hO9XVl
OrHTH0vzcrpJiqDjgkDKwfKM6i2DD0XnhEaK6bRD8SA=
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:22:01 2026 by rpki-client