Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139352e302f32342d3234203d3e20323633373831.roa
File:                     3230302e3132332e3139352e302f32342d3234203d3e20323633373831.roa (raw, json)
Hash identifier:          wtWZWzQqpFQWQ7OUEWUOxD8LzunKrC+4Kh25UvGiCCM=
Subject key identifier:   52:B1:11:4F:3A:CB:86:AE:62:60:D4:19:6C:CA:FD:72:EA:0C:F6:49
Certificate issuer:       /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial:       7D7F1A77F126F3FAA7B60D64B41FC1FF2A535C35
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139352e302f32342d3234203d3e20323633373831.roa
Signing time:             Thu 23 Apr 2026 16:39:45 +0000
ROA not before:           Thu 23 Apr 2026 16:34:45 +0000
ROA not after:            Thu 22 Apr 2027 16:39:45 +0000
asID:                     263781
IP address blocks:        200.123.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 23:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7f:1a:77:f1:26:f3:fa:a7:b6:0d:64:b4:1f:c1:ff:2a:53:5c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
        Validity
            Not Before: Apr 23 16:34:45 2026 GMT
            Not After : Apr 22 16:39:45 2027 GMT
        Subject: CN=52B1114F3ACB86AE6260D4196CCAFD72EA0CF649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:3d:67:ad:09:d8:a2:a1:f0:72:b3:6b:02:
                    77:c1:59:ba:7c:90:af:d1:f0:01:60:15:2c:71:20:
                    21:6c:95:d5:2f:c4:29:0f:9c:df:70:9b:14:f5:76:
                    e6:d3:ce:35:3a:a7:80:7a:4e:91:a1:70:b1:d7:43:
                    33:42:10:06:e8:ee:a2:ad:11:f9:57:35:57:45:a9:
                    4b:49:5c:40:13:c5:5f:52:44:fb:9f:33:b1:43:86:
                    f9:7c:47:a7:39:76:1c:9d:86:4d:53:11:18:af:91:
                    a9:0a:49:5b:01:95:a7:dc:95:8e:80:63:1a:b4:50:
                    0b:22:c5:40:0f:43:b2:69:b9:c3:6b:21:ab:bd:05:
                    48:57:45:b2:c5:d3:70:1a:07:94:ab:c2:d1:9d:21:
                    1e:b2:cf:4a:3c:f0:89:67:a9:0d:e2:83:50:2b:14:
                    75:ad:8e:b9:95:1c:39:6a:d1:74:de:2d:53:b9:ef:
                    67:23:2c:b9:5b:19:e9:56:77:a2:5a:9b:a3:0f:2e:
                    f6:a0:ab:d1:2f:4e:4c:06:91:92:8b:a2:5e:5c:7a:
                    21:3b:5b:13:b0:e9:d0:8b:a3:01:d8:28:ce:4a:00:
                    5e:e3:da:e3:f1:46:2c:03:50:84:24:e7:dc:df:00:
                    ae:0c:3a:c5:f7:23:71:1a:ef:e1:9b:fc:88:9e:de:
                    65:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B1:11:4F:3A:CB:86:AE:62:60:D4:19:6C:CA:FD:72:EA:0C:F6:49
            X509v3 Authority Key Identifier:
                keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139352e302f32342d3234203d3e20323633373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:98:f8:7a:c6:2e:c7:d2:d6:47:69:f0:38:5e:92:06:87:
         64:9a:ae:8b:1b:1b:75:1d:33:e5:3b:09:d9:da:d4:19:a8:be:
         0a:1d:7a:74:2a:90:af:88:37:8b:52:6e:d1:6b:04:6b:12:8d:
         42:92:63:51:cb:57:65:36:ea:94:1f:c8:47:9d:39:c3:33:d6:
         46:c7:76:55:11:13:44:16:e9:fe:7b:fd:fc:99:00:0c:9d:01:
         2b:48:2a:30:5b:b4:f7:7f:a8:60:92:c1:3f:dd:89:1f:3f:93:
         bd:1c:13:9a:5a:59:85:4e:a6:88:37:58:b5:1c:39:05:86:74:
         26:a5:1d:ed:85:2f:eb:ac:91:50:8b:0e:23:d4:b2:44:ef:d2:
         60:95:fe:30:73:fe:0d:d2:9f:44:ae:d0:c6:cc:31:a9:11:56:
         c7:db:a8:f1:16:93:e7:d3:60:f6:27:f7:ed:4a:cb:f5:13:e0:
         b6:d2:f4:39:31:d9:92:44:d8:54:ef:fa:70:78:48:03:41:15:
         b7:c0:1e:b6:9d:53:42:11:f9:4e:21:b8:a6:a8:bc:09:3d:fb:
         fd:2e:6a:4b:59:4b:22:3f:90:77:fd:33:7f:d7:4e:f4:c0:90:
         6d:77:f1:6c:2e:4a:54:8b:7a:02:c3:ea:4f:da:77:58:9f:73:
         bf:d5:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 11 16:18:44 2026 by rpki-client