Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/3230302e33342e35312e302f32342d3234203d3e203236353935.roa
File:                     3230302e33342e35312e302f32342d3234203d3e203236353935.roa (raw, json)
Hash identifier:          25u+3wbE7958NKkaLDipBzQT3ZMkxgbkiyLNXcbkRLc=
Subject key identifier:   67:EF:C1:07:6B:13:4C:D5:DB:7C:AE:43:E3:69:06:A8:1E:A2:EA:61
Certificate issuer:       /CN=E64A847F14F2062EFFE646F0620A3C39EAC5FD6A
Certificate serial:       1D9A450FC28902E10E24523C06701417C24B99A3
Authority key identifier: E6:4A:84:7F:14:F2:06:2E:FF:E6:46:F0:62:0A:3C:39:EA:C5:FD:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/3230302e33342e35312e302f32342d3234203d3e203236353935.roa
Signing time:             Thu 13 Aug 2026 22:30:00 +0000
ROA not before:           Thu 13 Aug 2026 22:25:00 +0000
ROA not after:            Thu 12 Aug 2027 22:30:00 +0000
asID:                     26595
IP address blocks:        200.34.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9a:45:0f:c2:89:02:e1:0e:24:52:3c:06:70:14:17:c2:4b:99:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E64A847F14F2062EFFE646F0620A3C39EAC5FD6A
        Validity
            Not Before: Aug 13 22:25:00 2026 GMT
            Not After : Aug 12 22:30:00 2027 GMT
        Subject: CN=67EFC1076B134CD5DB7CAE43E36906A81EA2EA61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:47:cd:52:84:6d:8a:50:0c:19:d0:5d:fd:85:
                    3e:4e:dc:a6:8b:39:7c:0e:d0:ea:63:a5:e8:3c:ff:
                    12:4c:bd:25:db:ff:b3:13:02:b9:7c:d9:3e:56:60:
                    85:3b:ed:66:d9:fa:14:31:ff:c2:88:b2:96:67:f7:
                    b2:35:c1:ef:7d:a7:06:33:ab:a9:8f:d4:5f:38:5a:
                    24:8d:5d:da:f8:da:d6:fd:00:c5:e9:50:8a:9e:5c:
                    a4:39:95:4c:96:8d:04:80:6b:29:be:57:8a:5e:b0:
                    4a:a9:96:b1:76:ea:e2:e8:83:51:01:4a:64:d0:49:
                    54:8e:51:c1:4f:d4:6d:3a:37:ba:5e:64:4d:a4:ea:
                    7e:01:12:db:02:fd:b6:00:f5:a2:89:24:84:02:c8:
                    3d:92:37:3f:21:c7:ff:4c:61:1f:fa:a1:bc:1c:0e:
                    40:f0:b9:33:f9:ab:f4:9f:13:4f:a7:30:e3:38:9f:
                    9d:dc:05:42:cb:7b:59:cb:7f:b0:20:08:98:d1:71:
                    8b:c6:7e:d1:46:32:5b:ce:5f:b2:65:12:14:0a:3d:
                    a3:6b:35:d7:6a:48:5d:2e:64:ce:57:4b:c5:36:5f:
                    b9:05:d8:6f:73:7a:8f:b5:c7:8f:f5:55:39:c6:07:
                    42:57:c5:d8:28:eb:59:13:f4:8d:40:e2:88:19:95:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EF:C1:07:6B:13:4C:D5:DB:7C:AE:43:E3:69:06:A8:1E:A2:EA:61
            X509v3 Authority Key Identifier:
                keyid:E6:4A:84:7F:14:F2:06:2E:FF:E6:46:F0:62:0A:3C:39:EA:C5:FD:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E64A847F14F2062EFFE646F0620A3C39EAC5FD6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C36CA4C2EE199F92BB067D7A7CAC2F918C2A594367D65F7D0FE3969099E77F2/0/3230302e33342e35312e302f32342d3234203d3e203236353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f1:e8:e8:d8:fb:50:99:55:65:27:a3:2c:2d:8f:49:24:2b:
         4c:a3:f2:c2:a8:aa:ee:e6:a8:de:f3:7d:fc:8d:f1:03:20:98:
         2f:ec:28:5a:bf:b4:b9:0f:22:4a:62:6a:07:c0:0a:ad:0a:68:
         8e:f2:cf:47:be:ee:ad:53:5d:5e:8c:7c:34:e2:68:65:33:49:
         bd:5b:8f:6e:3f:27:5a:d5:81:fd:92:ef:2d:81:8e:48:77:c6:
         38:ad:72:53:95:97:d5:ce:9a:81:8a:59:c3:6a:cc:ea:1b:31:
         7b:a3:0b:af:da:5d:c4:f1:34:db:fb:2b:26:f4:c7:23:27:cc:
         07:f2:88:3a:f2:94:0d:f5:59:00:88:e6:f2:76:5a:26:49:49:
         3e:ef:f0:1c:c9:d8:fd:88:0e:07:c0:fe:46:c4:a3:ca:b3:99:
         dc:dc:c1:5a:b6:45:27:ec:a9:52:7f:b0:92:79:d2:10:2d:69:
         f4:66:4f:34:33:5b:08:09:9f:24:36:35:28:4e:c4:f4:b6:8e:
         2f:fd:11:a5:a4:26:30:a9:dc:77:1a:95:87:df:e5:82:8a:e2:
         00:a2:6a:61:dc:39:ed:a0:4d:bd:d4:16:98:7d:00:d4:1c:8c:
         9a:5f:f8:77:c8:ad:ff:ab:57:aa:b6:76:10:31:55:73:43:ef:
         ef:8a:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:03:51 2026 by rpki-client