Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3137342e302f32332d3234203d3e203130363137.roa
File:                     3230302e3131322e3137342e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          8xWOa3bj/oXxaOtHczUmGqn818+JXCCgXur8EzvoSMQ=
Subject key identifier:   73:FA:36:31:02:D1:2F:BF:F7:AA:92:CF:B4:AE:43:8D:43:F1:F2:1F
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       19CC4C9CF156CEF704FF01F5BA6919C4B2AA905A
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3137342e302f32332d3234203d3e203130363137.roa
Signing time:             Thu 21 May 2026 14:55:00 +0000
ROA not before:           Thu 21 May 2026 14:50:00 +0000
ROA not after:            Thu 20 May 2027 14:55:00 +0000
asID:                     10617
IP address blocks:        200.112.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cc:4c:9c:f1:56:ce:f7:04:ff:01:f5:ba:69:19:c4:b2:aa:90:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: May 21 14:50:00 2026 GMT
            Not After : May 20 14:55:00 2027 GMT
        Subject: CN=73FA363102D12FBFF7AA92CFB4AE438D43F1F21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:86:d1:18:df:1b:44:c5:a7:4d:d4:7c:a4:de:
                    dc:34:87:c6:99:b6:64:00:7e:f7:f8:07:b6:1b:6e:
                    9e:9f:b4:63:2b:f3:77:57:59:37:74:50:ef:84:21:
                    3f:6f:32:4a:da:9f:ce:88:8b:c5:9f:7c:ed:69:2f:
                    96:31:60:03:bb:76:a2:99:c8:c5:cb:84:be:74:8c:
                    79:86:58:4b:46:d6:8e:a4:ab:da:fe:29:f2:a3:35:
                    89:1c:0d:e9:65:c4:b7:0b:8e:28:ff:fa:09:d9:41:
                    2b:13:70:f3:94:fb:56:d6:fc:2a:37:7d:1c:c8:57:
                    01:c4:77:b5:52:78:5d:a3:a5:55:5b:68:9a:1d:fd:
                    70:28:ff:f0:21:f9:25:d4:5c:d1:89:b9:37:f3:f7:
                    ca:40:bf:1e:c4:0b:3a:49:4d:35:a6:0b:90:b3:67:
                    65:af:23:74:ed:b5:9f:8c:9b:c6:12:63:2d:db:a9:
                    ab:96:1a:a5:5b:e7:5b:fa:38:0b:e5:a9:39:53:7b:
                    81:86:64:9b:50:2f:53:34:93:c0:59:46:f6:54:f4:
                    85:69:0c:3d:e6:b8:de:c5:1b:27:c1:5c:fb:30:7d:
                    c5:46:93:5a:b1:23:46:6b:39:4d:b3:5a:f6:4f:78:
                    43:32:c3:42:c0:c6:14:52:b1:0e:c9:2d:dd:61:fe:
                    60:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FA:36:31:02:D1:2F:BF:F7:AA:92:CF:B4:AE:43:8D:43:F1:F2:1F
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3137342e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:58:f3:43:de:77:21:43:26:8d:57:47:f3:35:b1:70:ce:d7:
         61:02:75:be:d4:5f:ec:3a:ba:07:5f:55:e1:69:7f:92:6b:6d:
         35:1f:71:e6:a2:c4:62:b2:ca:2c:65:44:b1:c1:46:1e:20:f2:
         f7:ec:1f:08:3e:8a:16:c7:c7:52:f5:15:21:2e:0c:4f:b3:8b:
         60:8b:f7:25:fd:9d:70:15:44:dd:06:dd:a5:4b:cc:b6:e4:72:
         ac:f2:a6:7a:48:42:ce:f0:7b:35:e4:19:e2:47:cc:fb:fb:b5:
         43:67:61:ab:20:2d:2e:01:f4:2f:68:1a:0c:44:cc:4d:66:86:
         e6:31:cb:80:ad:77:12:81:df:d3:9b:16:40:40:68:0b:a6:34:
         f2:c6:69:21:b6:9e:3d:c8:a6:2c:b5:d6:15:14:71:9d:a4:60:
         a8:03:57:de:fd:28:7f:2a:88:e7:db:a3:e9:a6:91:8a:78:ed:
         ea:d9:0d:f2:98:d0:e2:3e:22:0b:6d:9c:33:27:be:62:86:54:
         92:1d:f6:1b:f8:fb:92:81:9a:20:99:ce:43:18:b5:41:df:ff:
         f3:c9:5e:a1:ae:50:92:e3:9d:4d:97:fe:3e:ae:b7:3a:46:40:
         77:07:f8:30:83:54:05:03:c9:f2:e8:a7:66:85:3a:46:b0:ef:
         f0:8f:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:45 2026 by rpki-client