Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/3230302e392e3232362e302f32342d3234203d3e203532343130.roa
File:                     3230302e392e3232362e302f32342d3234203d3e203532343130.roa (raw, json)
Hash identifier:          sRpbpgniBdI7gZIrz0YkpPO35JM8GrIqSyNnwkUlisU=
Subject key identifier:   D1:97:02:FB:D3:33:B0:A1:8A:2A:90:D7:2D:53:6B:C5:D9:9D:FD:15
Certificate issuer:       /CN=B9A021876E416A2682854C32FF258B9643EE2BDB
Certificate serial:       30222BF4E572AA53EE2753795D9235F3A7FFE033
Authority key identifier: B9:A0:21:87:6E:41:6A:26:82:85:4C:32:FF:25:8B:96:43:EE:2B:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/3230302e392e3232362e302f32342d3234203d3e203532343130.roa
Signing time:             Thu 31 Jul 2025 15:34:26 +0000
ROA not before:           Thu 31 Jul 2025 15:29:26 +0000
ROA not after:            Thu 30 Jul 2026 15:34:26 +0000
asID:                     52410
IP address blocks:        200.9.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 06:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:22:2b:f4:e5:72:aa:53:ee:27:53:79:5d:92:35:f3:a7:ff:e0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9A021876E416A2682854C32FF258B9643EE2BDB
        Validity
            Not Before: Jul 31 15:29:26 2025 GMT
            Not After : Jul 30 15:34:26 2026 GMT
        Subject: CN=D19702FBD333B0A18A2A90D72D536BC5D99DFD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:44:65:bb:aa:40:0b:01:5e:ef:d4:97:1d:
                    98:8a:1c:86:ef:b9:a2:2b:13:7a:cc:aa:24:0c:d1:
                    e0:20:20:1d:ba:b6:dc:36:8d:68:a2:ad:9f:b7:38:
                    b5:44:91:56:91:0e:7e:32:64:46:87:47:4e:d2:b7:
                    35:6c:0e:50:7c:1f:76:50:fd:ed:02:fe:a0:b5:94:
                    10:d1:df:93:dd:81:f9:5c:35:00:2e:b0:99:37:6d:
                    b0:31:58:3c:b1:1e:59:6c:99:91:94:e6:53:37:2f:
                    ab:03:42:1f:f3:de:a1:a5:79:3e:e8:95:94:d1:9d:
                    19:fb:cf:58:a3:e9:76:41:1d:60:9c:88:ca:6b:b4:
                    6f:00:e6:33:4f:56:79:86:f6:e7:7c:b8:54:93:cc:
                    e7:18:91:98:04:93:8e:dc:ef:c4:f9:1b:d6:b7:ad:
                    c9:9a:5d:8e:3c:b0:d0:ca:fb:b3:a9:a0:69:e6:74:
                    c1:eb:9b:55:61:c4:e6:3d:35:53:b0:cd:e9:d1:25:
                    1c:4f:32:90:af:54:c2:9a:1d:27:5c:d1:a0:ce:e0:
                    63:5d:82:d3:59:7d:65:61:8e:11:a8:47:14:eb:c5:
                    70:5a:4a:aa:e4:40:c2:cf:29:26:a8:05:33:77:9c:
                    89:d7:d4:b5:ff:e2:1c:6d:b5:2d:58:54:ef:50:7e:
                    20:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:97:02:FB:D3:33:B0:A1:8A:2A:90:D7:2D:53:6B:C5:D9:9D:FD:15
            X509v3 Authority Key Identifier:
                keyid:B9:A0:21:87:6E:41:6A:26:82:85:4C:32:FF:25:8B:96:43:EE:2B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/3230302e392e3232362e302f32342d3234203d3e203532343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:52:6c:b6:8b:d5:dd:0e:f4:61:24:80:2f:49:ba:42:2c:f1:
         00:41:de:3b:e4:cb:4b:98:eb:f9:48:47:ee:80:d7:84:28:31:
         0b:86:3b:b0:94:65:04:ca:05:f1:1f:83:d2:ae:a8:e7:80:ff:
         9c:ba:2a:3d:b8:e9:c0:98:66:c8:b4:1c:67:be:5e:8e:cf:95:
         f0:1f:70:5a:7d:c4:97:b5:b2:3d:f2:90:11:aa:7d:b3:6f:8e:
         46:5f:44:05:02:00:91:bf:27:42:e5:8b:e2:83:ed:e7:be:24:
         1d:74:65:84:5b:01:77:5d:65:18:2c:29:16:09:63:cd:bd:a3:
         aa:49:32:f2:48:47:30:1b:32:6c:a5:7a:52:c7:76:af:92:fd:
         ac:0c:91:c2:3c:92:30:56:91:d4:49:77:8f:3c:37:d0:45:d9:
         2a:e4:43:48:67:ed:7c:1e:dc:e6:cd:9e:6c:9b:96:54:10:e9:
         0f:b6:69:ac:5e:94:59:57:10:81:85:aa:6c:b0:ac:74:52:6f:
         27:bc:49:31:94:08:86:48:08:c1:50:03:7f:68:71:d2:d6:2c:
         b6:a3:df:d0:90:61:13:e5:67:42:1b:2c:78:5a:23:39:c7:7e:
         c1:02:fb:c0:e4:b9:98:77:a5:5b:a6:48:e8:5b:50:f6:2f:6a:
         98:c4:cf:28
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMCIr9OVyqlPuJ1N5XZI186f/4DMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlBMDIxODc2RTQxNkEyNjgyODU0QzMyRkYyNThCOTY0
M0VFMkJEQjAeFw0yNTA3MzExNTI5MjZaFw0yNjA3MzAxNTM0MjZaMDMxMTAvBgNV
BAMTKEQxOTcwMkZCRDMzM0IwQTE4QTJBOTBENzJENTM2QkM1RDk5REZEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbRkRlu6pACwFe79SXHZiKHIbv
uaIrE3rMqiQM0eAgIB26ttw2jWiirZ+3OLVEkVaRDn4yZEaHR07StzVsDlB8H3ZQ
/e0C/qC1lBDR35PdgflcNQAusJk3bbAxWDyxHllsmZGU5lM3L6sDQh/z3qGleT7o
lZTRnRn7z1ij6XZBHWCciMprtG8A5jNPVnmG9ud8uFSTzOcYkZgEk47c78T5G9a3
rcmaXY48sNDK+7OpoGnmdMHrm1VhxOY9NVOwzenRJRxPMpCvVMKaHSdc0aDO4GNd
gtNZfWVhjhGoRxTrxXBaSqrkQMLPKSaoBTN3nInX1LX/4hxttS1YVO9QfiAjAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU0ZcC+9MzsKGKKpDXLVNrxdmd/RUwHwYDVR0j
BBgwFoAUuaAhh25BaiaChUwy/yWLlkPuK9swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzdGRDhGMzMxRjlCMjIxMjA2OTdBOTc2MjM4RkU1QTIx
MDg2QUE3RDUxRDUxNzQyOEFDRTA3QkUyMEMzQThCLzAvQjlBMDIxODc2RTQxNkEy
NjgyODU0QzMyRkYyNThCOTY0M0VFMkJEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUEwMjE4NzZFNDE2QTI2ODI4
NTRDMzJGRjI1OEI5NjQzRUUyQkRCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3RkQ4RjMzMUY5QjIyMTIwNjk3QTk3NjIzOEZFNUEyMTA4NkFBN0Q1
MUQ1MTc0MjhBQ0UwN0JFMjBDM0E4Qi8wLzMyMzAzMDJlMzkyZTMyMzIzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADICeIwDQYJ
KoZIhvcNAQELBQADggEBAGxSbLaL1d0O9GEkgC9JukIs8QBB3jvky0uY6/lIR+6A
14QoMQuGO7CUZQTKBfEfg9KuqOeA/5y6Kj246cCYZsi0HGe+Xo7PlfAfcFp9xJe1
sj3ykBGqfbNvjkZfRAUCAJG/J0Lli+KD7ee+JB10ZYRbAXddZRgsKRYJY829o6pJ
MvJIRzAbMmylelLHdq+S/awMkcI8kjBWkdRJd488N9BF2SrkQ0hn7Xwe3ObNnmyb
llQQ6Q+2aaxelFlXEIGFqmywrHRSbye8STGUCIZICMFQA39ocdLWLLaj39CQYRPl
Z0IbLHhaIznHfsEC+8DkuZh3pVumSOhbUPYvapjEzyg=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:22:28 2025 by rpki-client