Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232312e302f32342d3234203d3e20323636393034.roa
File:                     3230302e3131322e3232312e302f32342d3234203d3e20323636393034.roa (raw, json)
Hash identifier:          GkrkZ3CjzTFBSG0hIDlefgiuDxd1Oh9jRvcZ8f7ePeA=
Subject key identifier:   F5:54:E4:AB:8C:47:4C:EE:D6:AA:6D:FC:3C:C9:E4:5F:64:41:B1:41
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       750CF24CA587567BAB7DE19B57F8F764BA1BF3ED
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232312e302f32342d3234203d3e20323636393034.roa
Signing time:             Fri 31 Jul 2026 18:19:25 +0000
ROA not before:           Fri 31 Jul 2026 18:14:25 +0000
ROA not after:            Fri 30 Jul 2027 18:19:25 +0000
asID:                     266904
IP address blocks:        200.112.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Sep 2026 13:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0c:f2:4c:a5:87:56:7b:ab:7d:e1:9b:57:f8:f7:64:ba:1b:f3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Jul 31 18:14:25 2026 GMT
            Not After : Jul 30 18:19:25 2027 GMT
        Subject: CN=F554E4AB8C474CEED6AA6DFC3CC9E45F6441B141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:39:f5:5d:fd:71:72:9c:0a:81:4a:cb:19:
                    76:f3:34:f8:c2:8f:1b:ee:87:ea:02:9d:0f:b5:da:
                    ce:9e:18:66:aa:dc:e9:ce:20:e1:12:c6:d2:1d:c3:
                    ee:35:60:d5:d1:8c:39:38:42:f0:16:b3:59:6b:97:
                    38:99:6a:86:ad:ee:ef:ac:0c:54:ac:ab:f7:91:7e:
                    07:30:d7:8b:a1:cb:ea:d7:9d:1a:a2:01:9a:44:cd:
                    0c:57:46:96:52:bd:62:8f:50:6e:52:9d:18:2d:bf:
                    68:32:29:2d:39:28:35:bc:5e:f3:9b:b3:cd:66:6b:
                    b3:3c:c1:b8:2a:3d:b4:d7:cd:ad:36:04:2c:7b:ee:
                    e4:6b:8f:3b:92:16:47:77:60:22:ae:4c:b5:c2:30:
                    f8:73:d9:c6:54:f6:4a:b3:20:56:9f:1a:2f:0b:05:
                    8c:13:15:84:d4:a1:d9:03:47:82:8f:58:19:a9:d3:
                    0a:c3:43:33:2f:aa:c5:67:11:79:21:37:35:a2:49:
                    dd:d9:95:99:5a:10:eb:8b:0e:bd:db:9f:ce:c3:87:
                    d5:44:83:3c:be:b8:e4:a7:6d:1f:0a:1e:df:1b:d7:
                    39:bc:a2:b5:7d:46:28:d3:c1:fa:84:12:1c:e3:d7:
                    64:50:0c:00:e9:68:8f:d0:53:4d:49:56:44:9b:18:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:54:E4:AB:8C:47:4C:EE:D6:AA:6D:FC:3C:C9:E4:5F:64:41:B1:41
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232312e302f32342d3234203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:91:39:ea:b0:8f:33:28:d2:ed:86:77:d5:34:22:b1:ce:45:
         46:46:89:8f:c7:30:aa:45:2d:78:e4:79:43:17:f0:e8:8f:70:
         8e:56:5e:31:24:72:9f:64:d4:a5:59:f3:59:bc:b8:df:8b:5e:
         f3:6c:a2:8e:a9:7e:f2:9f:31:ca:00:76:9e:56:19:91:78:73:
         fc:2c:0b:f8:3c:e3:67:43:ce:03:eb:68:76:9f:bf:da:0f:4a:
         62:c2:ac:cb:49:fe:3d:63:57:2a:48:bb:9b:34:9e:2f:e9:c9:
         09:85:da:85:de:0c:1c:3a:1a:cb:04:da:0a:68:b1:cb:9b:a5:
         ca:70:18:b9:ba:af:4a:1e:ef:5d:58:aa:41:55:79:93:4c:fa:
         a7:37:31:a0:db:bf:65:08:18:3e:64:31:de:25:9a:d7:e9:f3:
         41:46:de:93:54:50:43:e4:f5:fe:e5:05:20:5c:d6:ac:42:af:
         03:23:32:29:36:89:b0:11:de:ed:24:9e:be:2e:90:7c:12:a1:
         c0:a6:5d:fd:bd:2f:df:6a:c4:23:7e:20:93:9d:6c:00:37:47:
         0f:94:31:e9:e2:19:44:70:21:ea:bd:a1:29:e1:9f:c3:af:a0:
         48:ec:de:81:cb:cb:ba:d6:51:3b:f7:0d:bf:c5:32:0a:d7:6b:
         6c:8f:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:46:48 2026 by rpki-client