Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3136322e302f32332d3234203d3e203130363137.roa
File:                     3230302e3131322e3136322e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          oygVs+GqDXajUw1IHLreFYbSN7dWODdHr9Dl3gbw2Bg=
Subject key identifier:   4D:6C:C1:F5:A1:86:82:42:38:47:3C:D7:05:97:11:A4:6D:4A:71:C9
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       209761BBACD44D402D43955AA8587402C637D5F1
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3136322e302f32332d3234203d3e203130363137.roa
Signing time:             Thu 21 May 2026 14:55:01 +0000
ROA not before:           Thu 21 May 2026 14:50:01 +0000
ROA not after:            Thu 20 May 2027 14:55:01 +0000
asID:                     10617
IP address blocks:        200.112.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:97:61:bb:ac:d4:4d:40:2d:43:95:5a:a8:58:74:02:c6:37:d5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: May 21 14:50:01 2026 GMT
            Not After : May 20 14:55:01 2027 GMT
        Subject: CN=4D6CC1F5A186824238473CD7059711A46D4A71C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:a9:0a:c8:b8:6d:b6:72:23:49:0a:60:47:
                    5d:83:ec:da:10:54:fc:ae:78:2f:44:ca:00:12:cb:
                    4a:30:a1:8a:29:f5:ca:8d:b9:0c:46:0e:79:c0:68:
                    3d:26:3f:cd:ce:1c:f4:f9:03:8b:64:15:2a:78:79:
                    a4:04:e7:f2:15:18:e8:89:72:d2:b8:2a:d8:e7:1f:
                    a4:20:40:4e:39:5d:f2:bf:58:1a:36:18:de:c6:60:
                    05:3a:ef:47:40:0f:02:5a:c2:83:e7:59:3a:bf:96:
                    18:37:57:28:03:e4:62:4a:23:85:c3:2a:20:de:0b:
                    98:8c:3d:00:a8:1f:d4:fe:96:96:25:95:b7:87:52:
                    3d:f3:af:15:a3:89:db:b4:ea:dd:3d:7e:07:dc:bb:
                    96:b5:b5:2f:d5:9d:00:79:51:eb:d3:e5:ae:14:dc:
                    d6:2d:9a:f4:64:58:64:a4:0c:47:9d:f5:3c:08:97:
                    21:6f:48:cb:cd:6b:07:ec:f9:62:75:e4:96:7e:00:
                    b3:3a:49:9e:e3:97:d9:c1:c8:5f:4b:5e:36:4b:fe:
                    17:54:26:3d:c4:99:ce:b6:64:59:ea:cf:dd:b7:9b:
                    a2:cd:99:b3:1d:23:8f:62:71:a7:57:44:46:94:e3:
                    f0:70:37:b0:39:a2:bc:f2:70:3a:66:0a:4f:e8:a8:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6C:C1:F5:A1:86:82:42:38:47:3C:D7:05:97:11:A4:6D:4A:71:C9
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3136322e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:60:a6:21:b2:7a:87:2b:dc:1b:58:8e:7f:b9:43:e6:51:ff:
         89:15:18:c3:7a:39:0f:b5:20:2e:90:4b:88:b0:84:70:e9:72:
         0d:60:7a:c1:a6:e9:ba:e5:26:39:59:7f:6f:c6:83:58:41:59:
         67:2a:21:17:73:c5:0d:0f:e3:e7:40:9a:9e:27:45:ca:a6:e9:
         73:4d:96:a6:5c:9b:df:84:55:89:cd:46:4e:df:68:27:a4:e7:
         36:79:7c:9b:b3:09:38:e1:82:43:a6:61:2f:22:35:4c:18:61:
         d9:fc:2a:70:66:56:36:9a:e8:57:c0:20:64:a1:6f:02:a5:ac:
         67:e7:e2:81:4c:cb:f4:1c:94:53:32:ab:44:17:91:36:ba:96:
         59:1a:fe:b9:1b:98:bf:4d:43:23:29:c2:67:6a:69:39:a1:86:
         44:7a:0c:d0:50:46:a8:22:52:10:6f:e4:13:bb:20:87:33:03:
         2e:7a:c8:57:bf:82:2d:86:c1:51:ce:78:7f:19:fc:51:7e:02:
         31:99:30:43:8b:93:48:7b:7d:27:4b:71:79:2f:15:02:9e:45:
         e4:ae:03:19:df:c1:61:65:fd:13:74:eb:51:d0:59:49:c2:75:
         17:8b:6b:b1:9c:be:c0:21:35:bf:cb:0f:89:4c:24:b7:97:82:
         81:c4:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:46 2026 by rpki-client