Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3135362e302f32332d3234203d3e203130363137.roa
File:                     3230302e3131322e3135362e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          549pTeCTNLjVUVPx/QKetq19UWu2yDv40kIx4hdVE84=
Subject key identifier:   FA:65:BA:80:7E:9A:FD:D6:62:86:E2:15:EC:6E:1B:89:76:C7:49:2B
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       6C82F17FAA88451246A310A362BB02210839BE6D
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3135362e302f32332d3234203d3e203130363137.roa
Signing time:             Wed 20 May 2026 19:00:00 +0000
ROA not before:           Wed 20 May 2026 18:55:00 +0000
ROA not after:            Wed 19 May 2027 19:00:00 +0000
asID:                     10617
IP address blocks:        200.112.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:82:f1:7f:aa:88:45:12:46:a3:10:a3:62:bb:02:21:08:39:be:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: May 20 18:55:00 2026 GMT
            Not After : May 19 19:00:00 2027 GMT
        Subject: CN=FA65BA807E9AFDD66286E215EC6E1B8976C7492B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:21:bb:e7:51:32:28:a1:2c:c2:c3:21:e9:
                    31:1e:a5:97:76:5a:09:50:69:ea:03:05:58:64:f5:
                    15:64:e6:5e:9e:f9:a0:e3:ff:16:93:c7:39:51:ae:
                    a9:b0:7c:07:08:53:66:e2:bf:49:af:a1:4c:ce:c9:
                    17:e5:98:65:03:ae:94:a2:97:24:5d:5f:d7:89:b5:
                    84:ea:2a:73:4f:d7:ad:9a:72:f0:a7:ee:8b:a5:cd:
                    a7:50:da:df:0d:44:93:66:1f:9a:71:f2:07:c8:14:
                    7b:e2:5a:f7:e3:20:9d:bc:2c:b3:dc:93:bc:3f:b4:
                    ae:45:28:e2:77:cc:81:34:0e:5e:85:3b:cf:56:6a:
                    d9:d0:75:ea:48:0e:dc:ca:dc:24:f6:27:67:f1:fc:
                    fc:b1:e2:9d:74:fb:30:e2:a8:c8:62:6b:fc:ca:60:
                    89:8d:2f:1a:db:02:99:4a:8e:e0:cf:fb:9e:d0:6e:
                    c3:da:c2:d3:ba:1e:97:21:0e:0e:b3:36:c4:35:90:
                    60:16:de:fc:ed:1f:c2:0c:c1:37:d4:63:35:ac:d3:
                    1f:cf:93:c8:c3:34:59:90:3c:46:0c:9a:64:97:ef:
                    cc:e6:3b:bd:5f:d0:00:9b:e4:2d:cc:b9:11:27:a6:
                    01:80:f0:ee:c6:e6:cc:40:2b:c8:d5:2d:56:ff:0f:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:65:BA:80:7E:9A:FD:D6:62:86:E2:15:EC:6E:1B:89:76:C7:49:2B
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3135362e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:ca:49:e4:0d:9d:7f:30:8c:8b:ea:0a:85:98:24:3b:a8:
         02:87:9b:69:b1:ec:99:9f:67:81:80:e9:8f:60:11:dd:02:62:
         ad:89:e9:79:c6:b8:31:d0:5c:27:24:4a:c6:6d:28:86:4a:a9:
         a8:76:08:7d:43:b5:52:8a:34:cf:a8:41:e2:75:b3:a9:3e:5f:
         4d:6e:ad:b2:34:13:6c:bf:f4:4f:1e:f2:7a:2b:ec:8b:ca:57:
         39:4e:ec:49:26:25:8b:58:b1:29:84:bb:03:15:ab:06:66:e7:
         bd:80:ba:74:61:6b:fc:9a:84:34:c5:eb:b6:ab:d7:07:49:10:
         1f:fe:36:cf:48:fe:b0:c2:e0:5e:54:57:9c:97:c2:e2:3f:63:
         83:51:ed:e3:3d:4c:bb:4c:31:28:54:6d:73:fe:d6:e1:90:73:
         3f:37:84:f7:d0:9b:6f:90:2b:54:f9:58:aa:54:3e:31:3c:54:
         c5:bb:9f:99:d9:63:e5:f7:a8:c7:64:0f:e5:f8:44:82:9b:8b:
         cb:80:e4:e7:fb:37:39:12:55:08:79:d5:2b:1f:8c:00:e9:a3:
         ba:c1:4d:15:6a:32:35:c7:5d:bd:aa:a6:a6:e0:48:3a:77:66:
         cd:f4:c9:2e:9f:80:27:de:83:1c:29:b6:ff:ad:8f:89:7e:f4:
         9a:18:f7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:45 2026 by rpki-client