Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3234203d3e203230333035.roa
File:                     3230302e36312e33382e302f32342d3234203d3e203230333035.roa (raw, json)
Hash identifier:          P8IGCn+rF/L67WZJVDaVFdn+4L86F1H171FXI0rurvo=
Subject key identifier:   CF:69:8B:18:59:44:B8:E6:E6:A3:30:5B:6D:C1:E4:18:09:DF:0E:46
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       7B63D163F070D2881FF76F52C54B07920B132F85
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3234203d3e203230333035.roa
Signing time:             Thu 14 May 2026 19:42:35 +0000
ROA not before:           Thu 14 May 2026 19:37:35 +0000
ROA not after:            Thu 13 May 2027 19:42:35 +0000
asID:                     20305
IP address blocks:        200.61.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:63:d1:63:f0:70:d2:88:1f:f7:6f:52:c5:4b:07:92:0b:13:2f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: May 14 19:37:35 2026 GMT
            Not After : May 13 19:42:35 2027 GMT
        Subject: CN=CF698B185944B8E6E6A3305B6DC1E41809DF0E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:35:75:db:11:5b:45:46:70:52:42:32:a6:
                    d9:43:56:d9:df:8e:ab:4a:b5:56:44:e2:26:c5:89:
                    11:12:e4:c4:d7:79:7a:64:62:c3:3b:2e:c7:01:1f:
                    87:2c:16:e7:24:44:19:9d:1d:3d:c9:b8:b3:eb:02:
                    d7:48:f9:11:4a:fe:fc:b5:df:b7:71:f8:f8:06:4a:
                    f6:d5:1f:a4:c3:7a:fe:f4:09:7f:8e:1e:5d:76:a3:
                    5b:f3:d6:32:68:c7:49:b4:6d:2e:f6:53:1a:ac:61:
                    77:7d:d1:5f:43:f5:2f:6c:00:be:50:ee:11:1f:0c:
                    ee:da:0c:80:9d:c1:90:64:59:e2:25:74:1f:c9:ef:
                    fd:0c:84:5e:11:07:ca:dd:d5:a0:7c:b8:3a:7f:79:
                    e0:61:b6:85:cb:06:0d:7a:4b:91:64:8d:8c:ea:03:
                    83:8c:77:b3:27:be:40:cf:0f:d6:48:0c:35:30:28:
                    15:81:20:0c:d4:76:71:6d:2e:6e:c5:95:a2:20:da:
                    80:38:e3:a2:01:81:18:ed:05:91:7d:86:90:3f:49:
                    3e:bc:ed:39:68:c4:aa:34:75:a3:00:55:f3:0f:90:
                    66:07:0b:24:0e:68:f2:2c:3a:ac:d7:d0:37:c4:38:
                    bd:b9:fd:be:28:e1:c7:c6:40:ca:25:89:8f:42:dd:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:69:8B:18:59:44:B8:E6:E6:A3:30:5B:6D:C1:E4:18:09:DF:0E:46
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3234203d3e203230333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:0f:6f:a8:f9:17:b2:ca:f3:45:a4:76:7d:49:40:14:b7:
         c6:3b:49:bc:11:27:2a:d1:7a:a5:96:d0:54:b1:16:ca:ee:18:
         d0:ef:af:0a:13:dc:82:b5:54:a6:7a:f6:66:6f:28:45:f8:f0:
         1f:41:d4:be:30:ac:1a:56:23:23:53:ad:15:a3:69:0b:36:a3:
         86:14:ed:6c:c7:43:17:a9:b8:8e:b5:b6:b2:87:cd:67:82:b9:
         7f:98:d5:dc:d6:7f:b3:66:37:b4:a1:da:4b:20:a7:97:4a:ea:
         02:84:6c:eb:b3:37:8c:e6:75:6e:30:25:9c:5a:20:7e:72:d7:
         ef:20:20:f2:50:48:f6:2d:91:9e:10:e8:ff:09:a9:2b:1f:68:
         79:db:51:a1:4b:73:8d:be:d7:e3:ee:a0:53:c8:ca:15:d5:9a:
         c7:c2:e3:e9:43:c4:a6:d8:ca:c7:fd:bc:0a:e0:7c:76:06:f1:
         b6:11:78:e2:97:d1:8b:df:16:0d:12:98:b4:76:35:ad:01:16:
         91:4b:66:dd:28:94:52:3a:34:0c:bd:e4:8f:40:f2:54:9d:32:
         d4:4d:d6:9b:5a:26:3a:ce:08:da:7f:9e:a8:51:f8:b9:fe:7b:
         c6:31:a9:04:4f:cc:f3:e0:1e:f7:f2:c3:79:35:5e:1e:c3:46:
         16:28:60:52
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUe2PRY/Bw0ogf929SxUsHkgsTL4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxMEI2OUI3QTE2RTJDQjIyOTBBMzNFRUI3NERFMjc0
RjgzNzU3NTAeFw0yNjA1MTQxOTM3MzVaFw0yNzA1MTMxOTQyMzVaMDMxMTAvBgNV
BAMTKENGNjk4QjE4NTk0NEI4RTZFNkEzMzA1QjZEQzFFNDE4MDlERjBFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSojV12xFbRUZwUkIyptlDVtnf
jqtKtVZE4ibFiRES5MTXeXpkYsM7LscBH4csFuckRBmdHT3JuLPrAtdI+RFK/vy1
37dx+PgGSvbVH6TDev70CX+OHl12o1vz1jJox0m0bS72UxqsYXd90V9D9S9sAL5Q
7hEfDO7aDICdwZBkWeIldB/J7/0MhF4RB8rd1aB8uDp/eeBhtoXLBg16S5FkjYzq
A4OMd7MnvkDPD9ZIDDUwKBWBIAzUdnFtLm7FlaIg2oA446IBgRjtBZF9hpA/ST68
7TloxKo0daMAVfMPkGYHCyQOaPIsOqzX0DfEOL25/b4o4cfGQMoliY9C3S0ZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUz2mLGFlEuObmozBbbcHkGAnfDkYwHwYDVR0j
BBgwFoAUuxC2m3oW4ssikKM+63TeJ0+DdXUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOTAzNzRFQURDQTUxNzBBMzdGNkI0NzM1QTg1Q0UwODNF
QURBRkRGQjk2QUE5M0M5Q0EwNEZCNkUxNzEwQUVELzAvQkIxMEI2OUI3QTE2RTJD
QjIyOTBBMzNFRUI3NERFMjc0RjgzNzU3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQjEwQjY5QjdBMTZFMkNCMjI5
MEEzM0VFQjc0REUyNzRGODM3NTc1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzkwMzc0RUFEQ0E1MTcwQTM3RjZCNDczNUE4NUNFMDgzRUFEQUZERkI5
NkFBOTNDOUNBMDRGQjZFMTcxMEFFRC8wLzMyMzAzMDJlMzYzMTJlMzMzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIPSYwDQYJ
KoZIhvcNAQELBQADggEBAH6eD2+o+ReyyvNFpHZ9SUAUt8Y7SbwRJyrReqWW0FSx
FsruGNDvrwoT3IK1VKZ69mZvKEX48B9B1L4wrBpWIyNTrRWjaQs2o4YU7WzHQxep
uI61trKHzWeCuX+Y1dzWf7NmN7Sh2ksgp5dK6gKEbOuzN4zmdW4wJZxaIH5y1+8g
IPJQSPYtkZ4Q6P8JqSsfaHnbUaFLc42+1+PuoFPIyhXVmsfC4+lDxKbYysf9vArg
fHYG8bYReOKX0YvfFg0SmLR2Na0BFpFLZt0olFI6NAy95I9A8lSdMtRN1ptaJjrO
CNp/nqhR+Ln+e8YxqQRPzPPgHvfyw3k1Xh7DRhYoYFI=
-----END CERTIFICATE-----
Generated at Sun Jun 14 10:49:04 2026 by rpki-client