Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/3230302e33342e34382e302f32332d3234203d3e203236353935.roa
File:                     3230302e33342e34382e302f32332d3234203d3e203236353935.roa (raw, json)
Hash identifier:          gM8PEfbxf6SiAOSxTH8Qg6G/h6jKsnkl8AKTIAOtupU=
Subject key identifier:   F2:EA:E8:0B:14:20:D5:F9:0C:4E:00:04:9F:E6:0E:EA:31:7C:F5:52
Certificate issuer:       /CN=E64A847F14F2062EFFE646F0620A3C39EAC5FD6A
Certificate serial:       71583A2EDFC6F74E13999EE059AE8043963E77CC
Authority key identifier: E6:4A:84:7F:14:F2:06:2E:FF:E6:46:F0:62:0A:3C:39:EA:C5:FD:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/3230302e33342e34382e302f32332d3234203d3e203236353935.roa
Signing time:             Thu 13 Aug 2026 22:30:00 +0000
ROA not before:           Thu 13 Aug 2026 22:25:00 +0000
ROA not after:            Thu 12 Aug 2027 22:30:00 +0000
asID:                     26595
IP address blocks:        200.34.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:58:3a:2e:df:c6:f7:4e:13:99:9e:e0:59:ae:80:43:96:3e:77:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E64A847F14F2062EFFE646F0620A3C39EAC5FD6A
        Validity
            Not Before: Aug 13 22:25:00 2026 GMT
            Not After : Aug 12 22:30:00 2027 GMT
        Subject: CN=F2EAE80B1420D5F90C4E00049FE60EEA317CF552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:17:e2:13:d6:89:52:9e:5b:8f:ff:c6:c5:
                    ed:1e:3f:94:c1:99:95:8b:0b:37:0c:ba:bf:d1:d6:
                    a9:be:03:63:f9:c4:c7:77:06:dc:dc:70:30:ba:d9:
                    b2:9e:bf:d6:8e:62:47:cd:1e:35:99:c0:6a:76:19:
                    fb:bf:e0:e4:0c:4d:61:4a:aa:01:ee:42:a4:1d:b8:
                    5e:6f:08:98:f2:6d:b2:1b:e7:17:94:14:44:4a:9e:
                    4a:9e:10:4d:e2:16:d1:2f:6e:ac:5b:6d:ee:f3:c1:
                    18:04:ac:a3:76:88:4c:f6:26:77:d2:3f:55:f6:07:
                    1e:e1:44:d4:1c:44:01:37:be:7b:7a:84:07:63:24:
                    57:ae:a3:97:41:b5:3c:f8:c7:8a:97:60:df:14:73:
                    da:2d:c3:16:92:99:55:46:54:03:0e:b9:bb:a2:a2:
                    22:2c:d5:a9:a9:da:1c:bf:d9:81:98:f3:55:c8:c1:
                    6e:d7:1f:17:a5:04:f4:d5:d0:22:85:bd:64:1a:98:
                    0f:92:a7:83:47:49:9d:6d:82:b5:68:56:7f:a8:ac:
                    91:11:59:b1:2e:96:8c:cf:40:5c:cd:b1:f5:29:ae:
                    c6:29:71:74:2a:c0:10:cb:77:ce:1a:dc:30:b9:43:
                    ba:01:3c:54:8e:26:19:7f:c3:e4:d4:8a:2a:a7:4a:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EA:E8:0B:14:20:D5:F9:0C:4E:00:04:9F:E6:0E:EA:31:7C:F5:52
            X509v3 Authority Key Identifier:
                keyid:E6:4A:84:7F:14:F2:06:2E:FF:E6:46:F0:62:0A:3C:39:EA:C5:FD:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/3230302e33342e34382e302f32332d3234203d3e203236353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         db:23:27:55:f5:4a:79:42:4f:b4:53:ad:62:e0:21:79:c4:0b:
         a5:41:f7:63:7a:f8:52:16:ff:ea:af:63:9b:2c:7d:47:09:d0:
         01:a9:de:af:ff:7c:f1:73:79:cb:27:36:36:a4:51:31:30:9e:
         da:56:63:11:c8:09:b5:b6:f4:38:e7:9c:68:8b:62:1d:a3:07:
         a4:4d:d9:21:af:b6:77:e9:0f:07:03:6d:ca:f1:84:26:bd:e7:
         6e:80:04:59:53:7f:c2:5b:f1:4e:88:91:e3:c8:c0:cf:d8:21:
         ad:7d:9c:83:2e:82:ed:0e:50:a6:99:ff:bc:e6:2e:ed:7e:e1:
         ed:ee:a7:70:49:f2:db:d7:ba:d6:64:9d:2f:2c:4f:f1:f4:6d:
         ac:77:d7:2f:2d:79:d3:d8:9d:a6:c4:f8:95:1f:f6:cb:05:1e:
         c8:95:2b:23:04:c3:de:c0:5f:e5:04:5e:ca:9d:48:02:d9:ae:
         69:3d:6b:c5:b3:04:1a:e8:d4:1f:d5:f1:d4:52:1c:96:4a:29:
         fd:ef:1f:00:e1:2e:e8:ad:c2:d3:32:b9:7c:b1:f2:3e:dc:17:
         2a:57:ea:75:b9:d9:f4:71:d3:d4:31:43:92:77:da:ca:2b:81:
         9e:54:42:57:3c:7f:90:d6:3f:a3:d5:10:df:9b:da:8d:ec:1e:
         e4:ce:d7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:03:51 2026 by rpki-client