Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3138362e302f32332d3234203d3e203130363137.roa
File:                     3230302e3131322e3138362e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          FyfFFaVB+oCYoMWbqUlGdVu4sx3jtE/0SWfgm+Ceegg=
Subject key identifier:   7B:24:DD:49:3A:76:41:47:E1:E4:CF:89:F4:13:AE:46:FF:9F:DA:E4
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       6C22A0EFCB37A5069CD971EE4BEA09887931A245
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3138362e302f32332d3234203d3e203130363137.roa
Signing time:             Thu 21 May 2026 15:10:00 +0000
ROA not before:           Thu 21 May 2026 15:05:00 +0000
ROA not after:            Thu 20 May 2027 15:10:00 +0000
asID:                     10617
IP address blocks:        200.112.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:22:a0:ef:cb:37:a5:06:9c:d9:71:ee:4b:ea:09:88:79:31:a2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: May 21 15:05:00 2026 GMT
            Not After : May 20 15:10:00 2027 GMT
        Subject: CN=7B24DD493A764147E1E4CF89F413AE46FF9FDAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:5e:84:75:31:59:96:19:87:b2:14:75:0b:
                    d5:81:4e:b8:a1:0d:f8:df:2f:72:0a:f8:1d:49:c4:
                    2b:ec:39:da:91:a0:5f:ac:46:b0:4a:ab:83:4f:e4:
                    51:3b:97:92:43:22:16:cc:7b:3c:ba:bb:69:84:5e:
                    0d:38:f7:6b:33:60:ab:70:97:bd:ef:6d:a5:c5:e8:
                    38:ee:9d:11:98:e8:96:37:ba:eb:9f:ec:ba:f3:4d:
                    60:f6:29:6c:19:26:79:8b:4b:dc:0e:75:52:6e:d0:
                    2a:f8:1b:1e:15:39:9a:08:10:05:fc:4b:75:ce:be:
                    82:51:64:01:9a:02:ba:46:c7:60:d4:18:1e:20:86:
                    56:43:c2:69:27:82:73:ae:bb:b5:42:bb:c9:26:f2:
                    1d:9b:2b:06:11:fc:d7:3d:3a:6d:70:13:ab:a3:2e:
                    f5:ca:b9:18:e9:6a:73:c1:a8:d4:e1:27:7f:d5:8f:
                    d5:f5:9e:65:16:40:6a:51:cc:c0:19:f4:cf:dc:0b:
                    e5:b2:05:d9:e2:93:aa:f8:95:d8:3e:7b:bb:ae:6d:
                    a6:9c:ce:5e:97:e0:37:f5:8e:98:78:b0:94:b7:64:
                    05:d0:3b:59:32:df:14:95:9c:b2:75:b3:48:67:30:
                    f2:70:5b:3c:13:6a:6c:8e:b5:80:96:32:51:86:a0:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:DD:49:3A:76:41:47:E1:E4:CF:89:F4:13:AE:46:FF:9F:DA:E4
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3138362e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:40:9a:9e:c5:c0:51:87:ee:5f:e4:9a:4d:cf:f0:6d:33:34:
         84:9e:b4:71:7d:dc:dc:9c:15:02:e9:44:6c:81:b9:31:46:54:
         7e:43:74:05:70:20:09:c5:d6:f5:98:42:34:ed:0d:10:5e:a0:
         9d:b2:19:8d:26:e4:1f:00:b6:d5:cc:b8:9c:bc:75:12:2d:81:
         c7:f4:25:6a:02:f7:49:08:f1:d7:80:45:da:79:0b:50:ae:37:
         4d:2b:7b:dd:1a:61:30:de:41:16:59:c7:b1:8c:36:f6:91:47:
         8c:a1:c0:f9:5e:d6:25:75:58:52:ad:3e:1e:f0:50:e5:03:92:
         1d:39:02:c2:7a:d1:7f:45:c8:fd:36:77:97:6a:69:4a:71:c7:
         db:ef:9d:d5:18:78:24:a8:e2:ef:6d:ed:be:2f:24:56:4b:2e:
         da:24:f3:39:59:0f:2f:00:5a:db:76:76:40:48:2f:9b:ab:47:
         1c:54:1f:98:cf:37:64:91:4e:99:28:79:0a:b8:ed:f3:e6:76:
         94:8b:20:e9:53:3a:c3:e9:ef:2d:47:de:5a:08:e8:dc:ce:ea:
         87:52:7f:17:ac:8d:65:b5:52:1f:12:49:15:36:73:39:90:72:
         a2:24:c1:a4:3b:bd:2e:e1:fa:80:67:0e:99:16:d5:77:1d:90:
         5d:b5:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:45 2026 by rpki-client