Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134332e302f32342d3234203d3e203130363137.roa
File:                     3230302e3131322e3134332e302f32342d3234203d3e203130363137.roa (raw, json)
Hash identifier:          VRYiRbQC3r1BTRx2ZTVSwdNusI579SNElxmG2PCe7kc=
Subject key identifier:   07:F3:5B:D9:C2:88:14:2C:82:AB:E0:D1:BA:CC:4D:C7:00:C1:20:0B
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       56A31E7C5BB6822CA276F0145D62C570A16327D0
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134332e302f32342d3234203d3e203130363137.roa
Signing time:             Wed 20 May 2026 19:00:01 +0000
ROA not before:           Wed 20 May 2026 18:55:01 +0000
ROA not after:            Wed 19 May 2027 19:00:01 +0000
asID:                     10617
IP address blocks:        200.112.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a3:1e:7c:5b:b6:82:2c:a2:76:f0:14:5d:62:c5:70:a1:63:27:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: May 20 18:55:01 2026 GMT
            Not After : May 19 19:00:01 2027 GMT
        Subject: CN=07F35BD9C288142C82ABE0D1BACC4DC700C1200B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:09:da:7b:a3:34:b1:89:ab:05:cd:20:96:
                    96:4f:6d:31:c0:ba:8d:69:d7:cb:70:89:20:ee:c7:
                    89:60:fc:4d:5e:99:a6:11:6f:6b:81:75:21:d0:00:
                    96:10:a8:9c:2b:e5:6a:9d:b5:2b:55:5c:34:b8:29:
                    c8:93:9d:a8:7f:3d:e2:29:03:e9:e6:6b:9a:fa:24:
                    8a:6a:d2:9e:89:a6:50:ba:50:35:a8:41:1d:05:48:
                    0f:77:bf:25:77:bf:52:35:ca:39:4f:fc:4a:9c:0c:
                    50:ba:0d:51:54:ac:ac:a7:1e:b1:da:35:02:22:4c:
                    bb:cf:f6:b6:e3:a2:f0:03:cb:21:de:25:ce:83:56:
                    6b:e6:27:8c:71:72:26:0f:1c:b1:00:a4:29:ea:38:
                    a1:8e:a5:ef:94:47:b5:78:2b:77:e0:24:d9:cf:c6:
                    07:e6:9c:8f:b9:f9:cf:57:9c:b8:2d:51:49:a1:87:
                    67:52:48:04:5e:e8:97:93:92:7d:21:31:4c:0d:97:
                    d2:4d:88:b8:98:d6:6d:78:38:aa:48:61:aa:00:17:
                    df:32:b8:3a:56:5c:22:0b:32:63:ab:a7:ff:de:ba:
                    f9:3b:cc:b9:a3:1d:b4:ca:e6:d8:79:c0:9f:6a:19:
                    0f:80:6c:b5:e9:fc:91:f6:1b:be:53:1c:d0:e1:23:
                    11:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:5B:D9:C2:88:14:2C:82:AB:E0:D1:BA:CC:4D:C7:00:C1:20:0B
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3134332e302f32342d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:2a:2d:d1:47:be:5b:68:5c:b9:0b:36:4e:21:ba:1d:68:43:
         e7:a6:37:02:5b:84:65:24:f0:0b:ad:b4:98:38:ef:ed:a5:3c:
         c5:0c:14:6b:77:ca:eb:d9:ac:62:e6:5b:17:6c:7d:d4:f9:55:
         e9:6b:69:a9:88:87:4f:65:0a:57:98:2e:1c:62:39:87:a6:78:
         a7:3b:e1:10:ed:eb:95:97:93:64:8e:27:b8:3c:90:58:b7:7f:
         10:7b:6f:2f:1a:3e:d1:29:1b:3f:a3:ca:c5:72:81:ac:95:f2:
         b2:f0:46:3b:31:8d:b9:7a:da:48:b3:32:d3:fd:b4:24:ca:11:
         1c:92:7e:0d:1e:83:ef:f3:da:7f:92:74:19:e7:ce:52:c0:b8:
         2c:cf:c4:8b:82:6b:88:b4:0c:09:24:61:d8:ab:84:63:9c:ed:
         dc:81:cd:32:f9:88:8e:97:81:ff:72:42:ca:35:ba:e4:9a:ba:
         30:43:58:48:3b:ae:90:85:68:72:0f:31:49:18:c0:b5:b5:ee:
         b8:0e:69:68:54:1a:d5:f1:55:f9:fc:68:53:4c:fe:86:71:29:
         9a:0d:ea:25:0c:73:7f:14:74:5d:43:c4:9c:a7:51:a8:bc:97:
         d0:75:79:46:da:0f:70:15:91:e6:8f:ec:d7:8d:e9:2f:d0:46:
         fb:b5:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:45 2026 by rpki-client