Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/3230302e392e3132382e302f32342d3234203d3e20323138363438.roa
File:                     3230302e392e3132382e302f32342d3234203d3e20323138363438.roa (raw, json)
Hash identifier:          Vs1LvzA4gvp7Nx/+9v/52S/S9SzgNQtGjBBltFauMeU=
Subject key identifier:   FF:98:73:80:A3:74:17:86:60:AF:46:0D:5B:EB:32:DC:F3:31:1D:EA
Certificate issuer:       /CN=BB9F58AE70D6FEE0088AE976C8A0F64807E1799E
Certificate serial:       77FF60BA38A9AC92DDF015E6028C79DD82118018
Authority key identifier: BB:9F:58:AE:70:D6:FE:E0:08:8A:E9:76:C8:A0:F6:48:07:E1:79:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/3230302e392e3132382e302f32342d3234203d3e20323138363438.roa
Signing time:             Thu 17 Sep 2026 14:00:00 +0000
ROA not before:           Thu 17 Sep 2026 13:55:00 +0000
ROA not after:            Thu 16 Sep 2027 14:00:00 +0000
asID:                     218648
IP address blocks:        200.9.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ff:60:ba:38:a9:ac:92:dd:f0:15:e6:02:8c:79:dd:82:11:80:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB9F58AE70D6FEE0088AE976C8A0F64807E1799E
        Validity
            Not Before: Sep 17 13:55:00 2026 GMT
            Not After : Sep 16 14:00:00 2027 GMT
        Subject: CN=FF987380A374178660AF460D5BEB32DCF3311DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:c0:10:96:0e:c7:35:47:c6:c2:d2:51:35:
                    e9:6a:f8:9a:05:08:20:7f:bf:a5:46:96:ec:97:5f:
                    cf:8e:da:0b:ad:9c:b2:b6:1f:f0:92:7f:c5:e8:a6:
                    6c:d0:95:5c:43:a7:dd:84:95:5e:eb:1d:66:d9:2b:
                    81:75:b4:eb:1a:24:c6:a3:3f:fc:7c:e5:d4:8a:ba:
                    5e:f5:51:d8:25:55:54:83:72:54:fc:1d:2d:c2:14:
                    c2:50:ae:e1:c8:a9:6f:f8:12:af:27:e8:e8:b7:5a:
                    7b:be:1f:f9:b2:1f:fc:fd:97:68:c3:12:96:99:bb:
                    e8:5c:e9:f4:6d:68:1a:11:c1:94:0e:85:86:f9:18:
                    e8:2a:5f:f4:d1:8f:4e:98:14:54:c0:cc:18:80:43:
                    98:0f:e0:7c:28:00:b9:39:d2:c9:13:ef:56:a1:c8:
                    e7:43:19:6a:17:26:2c:8e:61:3d:07:f6:f6:dd:16:
                    e8:0e:24:05:64:08:eb:c3:91:9d:18:2d:14:82:18:
                    1c:c5:17:ca:82:65:4d:82:41:99:53:66:f9:70:97:
                    53:0d:52:13:28:b5:a4:40:ae:36:d8:8b:8f:80:e8:
                    15:9d:cb:bd:20:d9:2c:64:ed:77:9a:68:85:87:c0:
                    97:c9:37:46:24:c2:9f:d9:b4:2b:59:a6:90:e6:9c:
                    f7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:98:73:80:A3:74:17:86:60:AF:46:0D:5B:EB:32:DC:F3:31:1D:EA
            X509v3 Authority Key Identifier:
                keyid:BB:9F:58:AE:70:D6:FE:E0:08:8A:E9:76:C8:A0:F6:48:07:E1:79:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB9F58AE70D6FEE0088AE976C8A0F64807E1799E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2AC5EE1DD083724E86C5C94B754C117392700A0D837B84AF99B3F08B14F28665/0/3230302e392e3132382e302f32342d3234203d3e20323138363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:89:97:94:b0:44:c0:9b:c5:57:79:e2:f2:b6:5e:f8:28:47:
         f6:c7:42:de:d8:b9:e6:a3:12:03:da:11:12:8b:fa:f9:d8:02:
         cd:cb:3e:0b:55:70:72:07:d5:be:8c:c8:1c:01:e5:44:fb:fb:
         df:54:d2:2c:23:6e:55:f5:95:61:a7:8f:fd:83:07:b4:38:04:
         02:e8:97:32:13:30:67:e7:3d:f6:6d:ec:d7:29:1d:90:11:0b:
         a5:89:92:fa:18:80:e4:a9:7c:c3:54:e1:d6:13:ec:46:d0:20:
         fc:63:2e:c3:69:99:6b:6f:67:17:b2:1a:ff:19:0b:0e:64:8a:
         8b:2c:3a:1b:5b:90:12:7a:e0:3d:db:50:4b:3e:3a:5b:52:d1:
         f0:43:f6:4d:d1:a5:3f:42:f8:36:95:e0:3b:0f:1b:b4:5f:27:
         f6:cb:ca:83:c6:77:12:00:a1:bc:25:18:93:da:c6:9c:f2:b3:
         83:38:68:05:d6:68:1f:28:a0:f8:96:26:31:5d:b8:3f:cf:c6:
         46:e8:3a:15:d3:d7:dc:e4:58:fd:31:56:ea:76:38:a6:df:4b:
         5a:09:7a:b1:3d:15:46:5a:58:eb:62:86:83:7c:2c:da:d2:5c:
         b4:72:7d:2e:d8:47:f6:2b:d6:1d:6c:43:13:d0:30:af:4e:1e:
         30:1e:40:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:05:41 2026 by rpki-client