Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DAF6D4EF48F6B13D740A8C7423D0988C74BC5D29CCC050B1E85671F4C4B41C2/0/3230302e332e31302e302f32332d3234203d3e20323639393239.roa
File:                     3230302e332e31302e302f32332d3234203d3e20323639393239.roa (raw, json)
Hash identifier:          GQYk85ivwL0pJdbx94+pld1tXmut5xfLTSb2ryUMskA=
Subject key identifier:   80:35:84:BA:15:E4:D5:C4:84:70:49:9D:85:11:B9:80:59:BC:A0:08
Certificate issuer:       /CN=11EF0F3155B1ACEDB3C3A662954F8D179DAE9144
Certificate serial:       117C55CEF7A91F5A3C878B8E646B270FE5752AEF
Authority key identifier: 11:EF:0F:31:55:B1:AC:ED:B3:C3:A6:62:95:4F:8D:17:9D:AE:91:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11EF0F3155B1ACEDB3C3A662954F8D179DAE9144.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DAF6D4EF48F6B13D740A8C7423D0988C74BC5D29CCC050B1E85671F4C4B41C2/0/3230302e332e31302e302f32332d3234203d3e20323639393239.roa
Signing time:             Fri 06 Mar 2026 19:50:00 +0000
ROA not before:           Fri 06 Mar 2026 19:45:00 +0000
ROA not after:            Fri 05 Mar 2027 19:50:00 +0000
asID:                     269929
IP address blocks:        200.3.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DAF6D4EF48F6B13D740A8C7423D0988C74BC5D29CCC050B1E85671F4C4B41C2/0/11EF0F3155B1ACEDB3C3A662954F8D179DAE9144.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DAF6D4EF48F6B13D740A8C7423D0988C74BC5D29CCC050B1E85671F4C4B41C2/0/11EF0F3155B1ACEDB3C3A662954F8D179DAE9144.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11EF0F3155B1ACEDB3C3A662954F8D179DAE9144.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7c:55:ce:f7:a9:1f:5a:3c:87:8b:8e:64:6b:27:0f:e5:75:2a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11EF0F3155B1ACEDB3C3A662954F8D179DAE9144
        Validity
            Not Before: Mar  6 19:45:00 2026 GMT
            Not After : Mar  5 19:50:00 2027 GMT
        Subject: CN=803584BA15E4D5C48470499D8511B98059BCA008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:d3:72:ef:0d:b3:ec:a8:01:39:75:45:e7:
                    05:86:ef:83:ff:d2:e6:db:24:7b:73:49:ee:16:7c:
                    ee:13:f7:12:f0:d2:61:0b:00:c2:2c:c9:6d:89:e5:
                    8e:6b:99:c5:8d:37:30:3b:c6:24:d8:99:db:8a:08:
                    69:56:b9:03:8d:6b:eb:33:ce:55:d6:5c:59:fe:b6:
                    49:7b:5e:a0:49:93:a0:61:52:bb:96:b1:4c:68:fa:
                    b9:94:61:86:6d:2b:64:bf:e0:5f:b9:e5:80:54:ed:
                    ac:76:19:02:18:07:be:79:c1:63:43:2e:40:88:ef:
                    e3:bc:46:f4:42:a0:0a:0c:9f:03:f7:d0:91:bb:f7:
                    43:7d:ef:e1:a2:b0:db:c5:a7:4d:08:55:16:5b:b1:
                    f8:fb:f7:7a:70:19:c6:ab:3b:7d:ee:88:cf:a2:12:
                    1e:24:f2:ab:44:ef:21:de:c9:e8:b5:a3:a9:bb:e0:
                    f7:4e:96:3f:3b:40:fc:be:5a:6c:a8:44:e9:e9:ac:
                    4d:f1:fa:e2:87:b4:16:7b:4c:af:68:26:5f:05:45:
                    8d:22:d2:87:ce:bb:e7:3e:6d:19:af:71:57:fa:ff:
                    4d:8e:99:77:26:2c:0a:ae:5d:c2:c9:6c:91:bb:a9:
                    16:54:c0:e3:8b:82:ce:e2:8d:a7:e0:30:89:94:04:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:35:84:BA:15:E4:D5:C4:84:70:49:9D:85:11:B9:80:59:BC:A0:08
            X509v3 Authority Key Identifier:
                keyid:11:EF:0F:31:55:B1:AC:ED:B3:C3:A6:62:95:4F:8D:17:9D:AE:91:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DAF6D4EF48F6B13D740A8C7423D0988C74BC5D29CCC050B1E85671F4C4B41C2/0/11EF0F3155B1ACEDB3C3A662954F8D179DAE9144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11EF0F3155B1ACEDB3C3A662954F8D179DAE9144.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DAF6D4EF48F6B13D740A8C7423D0988C74BC5D29CCC050B1E85671F4C4B41C2/0/3230302e332e31302e302f32332d3234203d3e20323639393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:43:05:22:11:53:6f:8e:f9:bb:95:44:a6:a5:e4:3b:5f:ab:
         c5:8d:55:4f:8d:28:2a:81:64:16:81:60:05:7e:8c:ee:f3:3d:
         4c:98:b8:ad:45:f1:14:1a:18:1a:5e:a7:9d:27:58:dd:5a:aa:
         38:b5:ad:1c:1c:40:9d:7d:c8:2d:b2:08:f2:50:6d:46:33:c1:
         57:17:40:90:30:7b:ba:ce:89:be:38:20:fd:1f:16:ed:e3:d9:
         e0:c1:13:cb:ed:2e:f2:6b:f9:d4:4b:98:2f:4a:4d:9b:56:92:
         a4:b9:74:6f:77:1a:d0:6c:70:e1:aa:13:95:b3:af:ed:12:9c:
         95:45:43:e4:3f:9e:bd:14:ef:18:f4:71:14:be:c0:39:9f:8c:
         c8:5c:db:ac:9a:9a:14:10:37:3f:10:ef:7d:d8:69:b2:3a:97:
         2e:ec:8a:5c:0d:53:97:76:d8:e8:c5:e5:d8:5f:fc:59:cc:e2:
         f3:5d:48:37:fc:e6:d9:6f:5c:d7:96:af:f4:aa:47:e6:bd:20:
         8d:71:4f:62:94:50:58:a6:cb:d1:aa:cc:de:37:e3:2b:85:34:
         ab:80:73:79:90:21:2a:7a:32:ae:48:d3:0b:04:14:12:9b:bf:
         ce:06:49:af:24:c3:20:8c:aa:31:0c:01:75:e3:67:8f:2b:53:
         17:80:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 04:53:50 2026 by rpki-client