Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3138382e302f32332d3234203d3e203130363137.roa
File:                     3230302e3131322e3138382e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          n+fiEfxhTqOwgU9cgOqIx5ZrxBiIZ43IHp3FTR9sgp8=
Subject key identifier:   D9:C7:70:80:9B:AE:12:AF:00:14:07:8B:2E:FB:83:6D:08:75:6D:1A
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       33DBE08B201EBB070C9B89795A16A896D2D0BB2C
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3138382e302f32332d3234203d3e203130363137.roa
Signing time:             Thu 21 May 2026 15:10:00 +0000
ROA not before:           Thu 21 May 2026 15:05:00 +0000
ROA not after:            Thu 20 May 2027 15:10:00 +0000
asID:                     10617
IP address blocks:        200.112.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:db:e0:8b:20:1e:bb:07:0c:9b:89:79:5a:16:a8:96:d2:d0:bb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: May 21 15:05:00 2026 GMT
            Not After : May 20 15:10:00 2027 GMT
        Subject: CN=D9C770809BAE12AF0014078B2EFB836D08756D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a1:ff:57:b0:61:df:96:27:8b:ab:ae:e6:d8:
                    19:97:13:75:22:ee:d2:e9:77:70:3f:29:23:e0:01:
                    fb:f9:0e:b7:d2:a7:a3:e6:ba:0b:9d:c5:a3:cb:e3:
                    be:c3:34:86:8d:78:c4:c2:24:69:89:69:27:33:70:
                    c5:a9:62:00:a7:74:91:d6:22:0f:93:69:8a:e0:90:
                    81:49:e9:15:7c:14:12:17:92:e0:1c:f2:a2:79:78:
                    db:09:1c:42:a2:73:be:68:5b:36:07:44:09:7b:ce:
                    e2:35:1a:ea:c0:7c:14:41:70:23:29:e5:28:0a:46:
                    a1:0b:d4:85:a2:65:8c:ec:d9:3d:e8:f0:a0:1d:e0:
                    3c:16:f0:72:76:2a:d0:b1:73:cc:46:05:28:31:9b:
                    3b:ba:f9:ce:57:5a:0a:08:c0:15:db:48:d8:77:47:
                    11:ea:91:9c:88:9d:0b:08:a3:6e:bc:4d:f8:d6:ff:
                    df:70:50:39:0f:88:e5:22:8b:e6:e6:80:c6:5e:d5:
                    c6:f9:ee:00:db:91:48:75:e8:a6:5e:31:e1:dd:1a:
                    13:dd:b0:5a:21:50:2f:b3:2e:e2:c2:93:c0:00:8b:
                    4f:58:4b:19:e8:1b:a6:01:cb:b2:68:bd:19:9f:57:
                    10:1f:fe:7a:64:8d:7a:5e:88:d7:41:65:d4:42:15:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C7:70:80:9B:AE:12:AF:00:14:07:8B:2E:FB:83:6D:08:75:6D:1A
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3230302e3131322e3138382e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:ea:49:5a:6f:ad:f6:bb:64:81:15:ec:3b:ba:1f:e4:d6:12:
         ed:71:09:ac:5a:df:02:e7:86:6f:d6:48:34:c1:19:71:c3:82:
         80:3c:7f:65:4e:3d:31:d4:c2:ae:14:af:9f:a8:7b:a1:b1:c3:
         1e:9f:8a:8f:15:de:23:26:d6:b4:6f:21:11:b5:76:73:4f:92:
         8c:12:5c:cf:1b:14:e1:7a:fd:68:e4:d7:bc:15:64:cf:73:62:
         21:76:97:a0:89:46:3d:ad:1f:63:72:db:54:30:b7:fa:25:e0:
         44:a3:13:8c:66:a1:cd:37:9c:30:17:78:d4:13:40:90:34:30:
         66:a1:5e:f2:7c:82:c9:92:d2:e3:f8:ba:1f:6d:f0:65:44:19:
         90:2d:80:b7:ac:77:a3:3a:30:9f:c0:42:12:62:5d:27:1f:5d:
         35:00:94:a8:33:34:6c:91:d8:65:15:72:74:04:f8:08:cd:82:
         69:fd:04:c0:b7:ac:0b:a3:15:7d:46:fb:32:ff:f8:ff:5f:8f:
         8a:30:4e:3f:0a:18:42:8b:e3:59:0b:aa:16:98:68:8b:7b:07:
         b3:fe:76:59:c8:b3:41:ae:10:68:90:0c:d4:d5:a7:e5:44:bc:
         c8:48:9d:0f:3b:71:bb:5b:f6:27:be:65:93:2c:42:28:d5:67:
         87:a2:23:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:44 2026 by rpki-client