Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3233203d3e203635353639.roa
File:                     3230302e332e3134382e302f32322d3233203d3e203635353639.roa (raw, json)
Hash identifier:          eKkotAwQc4L5fyqePL8wgfAwAWw2wk2nh1tGqECIPjE=
Subject key identifier:   36:C3:C3:48:2A:2D:60:DF:75:F6:12:B0:A3:B7:75:37:73:DF:66:DE
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       0A7E9CA536F16A9BFF0646A7B449ED7E039E9608
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3233203d3e203635353639.roa
Signing time:             Fri 28 Aug 2026 15:32:51 +0000
ROA not before:           Fri 28 Aug 2026 15:27:51 +0000
ROA not after:            Fri 27 Aug 2027 15:32:51 +0000
asID:                     65569
IP address blocks:        200.3.148.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Sep 2026 03:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7e:9c:a5:36:f1:6a:9b:ff:06:46:a7:b4:49:ed:7e:03:9e:96:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Aug 28 15:27:51 2026 GMT
            Not After : Aug 27 15:32:51 2027 GMT
        Subject: CN=36C3C3482A2D60DF75F612B0A3B7753773DF66DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9e:4c:67:cf:22:26:54:fc:c0:01:98:15:fc:
                    4f:b5:1d:0e:57:6c:f6:df:12:32:d9:15:a7:a9:25:
                    28:a0:07:22:62:ba:f0:a2:5c:93:24:43:9f:44:3a:
                    44:35:c1:89:47:02:1e:a6:90:e2:eb:d4:14:1d:50:
                    43:f9:ac:b2:98:71:12:81:26:7c:a6:77:35:85:b5:
                    c8:55:18:89:a3:43:55:6d:f8:9b:6a:81:8c:cd:0a:
                    5c:c8:53:59:fd:1f:42:4f:5d:e1:ee:bc:a1:53:20:
                    8d:4e:6a:b1:00:67:24:63:50:dc:37:03:d8:36:62:
                    34:db:c8:04:93:7b:fc:50:b6:fc:09:f6:cc:78:47:
                    70:ea:2b:d3:d7:77:7e:48:fc:5c:6c:12:d8:e3:06:
                    77:72:9b:b1:fa:44:85:8d:33:01:9b:f7:0a:5d:bf:
                    0e:75:8a:fc:bb:3a:f4:7f:d3:8d:a8:24:32:7d:cc:
                    55:2d:07:c4:1b:47:77:7a:63:c7:3a:d7:6a:15:59:
                    87:8d:d1:20:fc:b7:3f:30:18:9d:bd:f9:9b:f3:e3:
                    72:3d:a7:f0:1c:98:0f:e4:5e:34:d5:d1:8a:6a:19:
                    e5:96:dd:b5:7a:78:28:14:8b:db:cb:62:f5:aa:11:
                    f3:29:97:7b:6d:ac:60:2a:56:20:50:8b:6c:e8:a1:
                    ee:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C3:C3:48:2A:2D:60:DF:75:F6:12:B0:A3:B7:75:37:73:DF:66:DE
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3233203d3e203635353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:46:22:9c:2a:07:c8:71:5a:de:43:4d:51:ab:a4:48:9a:0f:
         d3:e5:e1:6b:83:99:c5:98:e1:03:98:31:cf:4f:e7:98:3c:a5:
         30:b1:5d:db:e1:7f:ac:2f:0a:db:e5:d7:3b:cb:09:77:15:cf:
         2b:db:2f:5c:d8:8c:82:19:7f:ef:70:73:09:d4:a7:f9:ce:f5:
         3b:d1:49:b5:e5:23:1d:0d:24:5b:a4:79:6c:03:6b:70:51:9e:
         2b:4b:74:1b:f9:7a:b7:3c:c3:5a:ad:15:0d:c5:00:4a:fc:db:
         11:72:30:2f:80:91:f5:29:8c:e6:00:36:1b:b8:f3:43:e6:be:
         b3:e9:72:11:7a:2f:10:f4:b2:d0:fd:c7:32:20:c2:68:eb:3d:
         91:13:c8:66:af:b0:57:22:0a:a2:89:4d:2d:f4:2a:2e:d1:8c:
         8d:85:2f:fb:cf:d7:8d:9e:b0:b3:4c:88:6a:f8:01:4d:56:73:
         e9:66:7f:dc:02:0f:44:70:27:fc:65:37:86:ac:c3:fc:3d:a7:
         4d:83:76:ea:e1:bf:9e:62:82:b1:bc:d6:71:e6:75:b3:9c:b6:
         c5:ed:8b:f3:27:4d:87:47:e0:c7:29:74:1f:46:79:02:33:c5:
         9b:bb:b2:24:43:ce:02:31:a8:1d:51:de:38:72:62:45:e8:0f:
         f0:78:e4:91
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUCn6cpTbxapv/BkantEntfgOelggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ2MDkwM0I4Mzc1RkM1QzJDQjg5MTYzNUUwRUE4N0I1
MERBMzU5NTAeFw0yNjA4MjgxNTI3NTFaFw0yNzA4MjcxNTMyNTFaMDMxMTAvBgNV
BAMTKDM2QzNDMzQ4MkEyRDYwREY3NUY2MTJCMEEzQjc3NTM3NzNERjY2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMnkxnzyImVPzAAZgV/E+1HQ5X
bPbfEjLZFaepJSigByJiuvCiXJMkQ59EOkQ1wYlHAh6mkOLr1BQdUEP5rLKYcRKB
JnymdzWFtchVGImjQ1Vt+JtqgYzNClzIU1n9H0JPXeHuvKFTII1OarEAZyRjUNw3
A9g2YjTbyASTe/xQtvwJ9sx4R3DqK9PXd35I/FxsEtjjBndym7H6RIWNMwGb9wpd
vw51ivy7OvR/042oJDJ9zFUtB8QbR3d6Y8c612oVWYeN0SD8tz8wGJ29+Zvz43I9
p/AcmA/kXjTV0YpqGeWW3bV6eCgUi9vLYvWqEfMpl3ttrGAqViBQi2zooe67AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUNsPDSCotYN919hKwo7d1N3PfZt4wHwYDVR0j
BBgwFoAUDWCQO4N1/FwsuJFjXg6oe1DaNZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Q0U1Q0Q5RTQyRjk4QUM3OTdENjVFOTZBOUQwOUUzMUY1
RkJDNTg4NEQxRjgwMkZBRTgwQ0Y4RkQ1MEZERjlELzAvMEQ2MDkwM0I4Mzc1RkM1
QzJDQjg5MTYzNUUwRUE4N0I1MERBMzU5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDYwOTAzQjgzNzVGQzVDMkNC
ODkxNjM1RTBFQTg3QjUwREEzNTk1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUNFNUNEOUU0MkY5OEFDNzk3RDY1RTk2QTlEMDlFMzFGNUZCQzU4ODRE
MUY4MDJGQUU4MENGOEZENTBGREY5RC8wLzMyMzAzMDJlMzMyZTMxMzQzODJlMzAy
ZjMyMzIyZDMyMzMyMDNkM2UyMDM2MzUzNTM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIA5QwDQYJ
KoZIhvcNAQELBQADggEBAAtGIpwqB8hxWt5DTVGrpEiaD9Pl4WuDmcWY4QOYMc9P
55g8pTCxXdvhf6wvCtvl1zvLCXcVzyvbL1zYjIIZf+9wcwnUp/nO9TvRSbXlIx0N
JFukeWwDa3BRnitLdBv5erc8w1qtFQ3FAEr82xFyMC+AkfUpjOYANhu480PmvrPp
chF6LxD0stD9xzIgwmjrPZETyGavsFciCqKJTS30Ki7RjI2FL/vP142esLNMiGr4
AU1Wc+lmf9wCD0RwJ/xlN4asw/w9p02Ddurhv55igrG81nHmdbOctsXti/MnTYdH
4McpdB9GeQIzxZu7siRDzgIxqB1R3jhyYkXoD/B45JE=
-----END CERTIFICATE-----
Generated at Sun Sep 13 14:55:21 2026 by rpki-client