Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3133362e302f32322d3234203d3e203130363137.roa
File:                     3230302e3131322e3133362e302f32322d3234203d3e203130363137.roa (raw, json)
Hash identifier:          gpPkoUMeqiH3NjywR+gLZQ9LK5ZhBeTwscAokBqRI3g=
Subject key identifier:   A8:74:CD:C1:51:DD:B7:04:8A:F2:FE:DB:7A:15:2D:EA:74:DC:AB:6B
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       0EF9CBF0AB2A8409B8BB6E69EC6E199AA8695738
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3133362e302f32322d3234203d3e203130363137.roa
Signing time:             Wed 20 May 2026 19:00:00 +0000
ROA not before:           Wed 20 May 2026 18:55:00 +0000
ROA not after:            Wed 19 May 2027 19:00:00 +0000
asID:                     10617
IP address blocks:        200.112.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f9:cb:f0:ab:2a:84:09:b8:bb:6e:69:ec:6e:19:9a:a8:69:57:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: May 20 18:55:00 2026 GMT
            Not After : May 19 19:00:00 2027 GMT
        Subject: CN=A874CDC151DDB7048AF2FEDB7A152DEA74DCAB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:fd:6b:f4:80:76:cc:de:9d:0f:f9:3f:bf:
                    f3:ee:3f:f5:ea:85:ae:fe:e6:65:f5:d6:93:9a:47:
                    5f:46:0d:97:c2:36:c6:9a:d4:1e:f9:c8:ca:d8:49:
                    eb:81:8e:40:a2:9d:d7:61:94:e7:c3:65:84:44:aa:
                    c8:70:09:28:6c:1a:6b:eb:f4:1d:59:bb:ac:9b:89:
                    29:2f:db:8b:f1:dc:c8:02:3f:38:29:45:32:33:77:
                    e0:5f:53:8d:32:90:55:7d:3b:38:3d:4b:c4:d9:55:
                    7b:da:15:84:f5:54:5e:5f:5f:04:42:f3:36:27:3d:
                    a9:bd:b9:ad:d3:48:95:f0:99:98:b0:4f:f4:00:1c:
                    53:40:8b:97:91:4a:08:bd:24:9d:3f:d4:95:79:75:
                    74:74:83:a0:79:b7:72:46:15:d3:2e:dd:8c:bf:0d:
                    14:51:43:b5:c8:3b:ac:8d:f6:8b:47:77:be:8a:48:
                    0a:db:87:f0:cf:50:84:8c:cb:d1:3e:8f:74:85:f3:
                    b0:f2:0c:99:02:1d:17:b5:1e:74:30:c2:ac:58:b6:
                    89:ba:ab:20:7e:d4:a1:b4:bf:1c:23:15:c5:44:3a:
                    a8:73:01:4d:6f:21:9f:8f:67:aa:ab:5c:33:69:b0:
                    63:81:34:ad:7b:0a:00:6c:08:b0:1e:34:8f:b2:c5:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:74:CD:C1:51:DD:B7:04:8A:F2:FE:DB:7A:15:2D:EA:74:DC:AB:6B
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3133362e302f32322d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:46:8f:09:48:16:24:f9:46:87:3c:46:9e:93:54:72:42:1a:
         3a:ea:c3:7a:3c:23:c5:f6:07:05:d0:e5:3e:c2:ec:5f:ca:04:
         3a:d4:a2:23:97:9c:bc:81:37:3b:6a:3b:97:8d:d7:e3:25:17:
         d4:d5:1f:09:7e:ff:58:d9:f3:23:b2:39:62:b2:3a:49:7c:29:
         10:1a:be:50:fa:b3:a8:a7:9d:47:88:73:1b:c8:e5:f7:06:d2:
         c9:eb:d5:46:0a:ee:f8:7f:24:7d:86:6e:bf:0d:11:87:1b:ac:
         bb:01:cf:bc:b8:43:4e:10:08:8c:aa:71:09:44:49:26:0c:5a:
         e0:06:da:cf:2b:d3:40:44:37:ab:7d:7d:3c:2d:26:db:da:54:
         10:dd:1b:db:7a:9c:9d:48:c4:71:60:57:4a:03:fe:29:c1:59:
         e1:58:4a:94:56:b0:69:4d:99:87:6b:b8:4c:35:7c:1a:c2:00:
         b4:07:96:6f:38:c3:9c:51:7d:70:79:7b:02:ff:b7:ee:58:08:
         5a:5c:8a:6d:0a:4a:18:a2:cd:8d:91:81:69:e4:c4:59:fa:55:
         13:35:b0:c6:cd:3d:41:68:64:4d:58:dd:26:2f:bd:f9:c8:d4:
         32:ce:8c:fc:8e:8c:5d:55:3b:9b:29:d3:f2:97:a7:c7:9c:43:
         33:38:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:46 2026 by rpki-client