Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/3230302e302e3136302e302f32332d3234203d3e203133373734.roa
File:                     3230302e302e3136302e302f32332d3234203d3e203133373734.roa (raw, json)
Hash identifier:          cgeVphgACYigX6i9DGTfYvOSUYmZtmeAnzC5gkjTRsE=
Subject key identifier:   01:41:7A:A6:71:0A:50:02:6C:A8:CB:6A:DD:16:E9:3C:C4:4A:3F:83
Certificate issuer:       /CN=9E0418640D343DF276C373FC40288E6ABD81458E
Certificate serial:       3F27CF599762F651FF0A88D5AE1C246DCCF82844
Authority key identifier: 9E:04:18:64:0D:34:3D:F2:76:C3:73:FC:40:28:8E:6A:BD:81:45:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E0418640D343DF276C373FC40288E6ABD81458E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/3230302e302e3136302e302f32332d3234203d3e203133373734.roa
Signing time:             Sun 15 Mar 2026 07:33:55 +0000
ROA not before:           Sun 15 Mar 2026 07:28:55 +0000
ROA not after:            Sun 14 Mar 2027 07:33:55 +0000
asID:                     13774
IP address blocks:        200.0.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/9E0418640D343DF276C373FC40288E6ABD81458E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/9E0418640D343DF276C373FC40288E6ABD81458E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E0418640D343DF276C373FC40288E6ABD81458E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:27:cf:59:97:62:f6:51:ff:0a:88:d5:ae:1c:24:6d:cc:f8:28:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0418640D343DF276C373FC40288E6ABD81458E
        Validity
            Not Before: Mar 15 07:28:55 2026 GMT
            Not After : Mar 14 07:33:55 2027 GMT
        Subject: CN=01417AA6710A50026CA8CB6ADD16E93CC44A3F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:a1:b1:f5:ad:45:ef:25:c5:2d:e4:20:5d:
                    e5:b4:b5:dd:84:5f:45:50:4f:c5:4b:e0:59:a5:e9:
                    1c:61:79:53:e9:0b:7b:37:87:42:83:9e:67:ce:f8:
                    50:f3:d7:d8:f6:89:e7:e5:89:18:f2:2e:cc:09:09:
                    64:d4:6d:1d:66:06:16:53:10:0d:45:96:86:d5:35:
                    1e:97:33:cb:02:b4:4d:0e:78:3f:e9:ac:57:3c:6c:
                    ed:ba:c5:9c:4d:ed:58:b1:6b:69:8a:b1:f5:c1:9d:
                    fd:c5:15:04:fd:32:74:ed:b6:f0:fc:09:a2:89:20:
                    67:ce:3d:a0:40:d4:0d:81:49:f4:d4:84:ba:8a:29:
                    74:dc:87:39:2b:91:c4:48:2f:5e:5d:5c:46:e8:42:
                    89:87:ae:32:7a:b9:c3:af:3c:75:b6:ae:32:4e:ad:
                    36:d6:8d:e6:49:94:5e:01:bc:33:a2:3f:c3:2f:99:
                    a2:22:3d:b7:d1:0a:41:2a:18:f0:2b:b8:24:38:77:
                    a8:4a:11:da:5a:3e:36:d0:cf:37:ff:26:34:76:67:
                    99:bf:53:dc:d0:de:a0:e5:d4:2f:ac:48:f8:b7:69:
                    6d:18:6f:3f:87:e7:f9:0c:7d:49:00:3b:e6:a7:d9:
                    f3:af:1f:69:1d:c9:79:52:24:0b:33:97:5a:f4:99:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:7A:A6:71:0A:50:02:6C:A8:CB:6A:DD:16:E9:3C:C4:4A:3F:83
            X509v3 Authority Key Identifier:
                keyid:9E:04:18:64:0D:34:3D:F2:76:C3:73:FC:40:28:8E:6A:BD:81:45:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/9E0418640D343DF276C373FC40288E6ABD81458E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E0418640D343DF276C373FC40288E6ABD81458E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/807E78613C5FA352FB805943A1B091206C6F619EE3DE9CB89FC38C612C477D5B/0/3230302e302e3136302e302f32332d3234203d3e203133373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:8d:f0:2b:c9:a8:82:bf:90:51:9e:86:a2:14:7e:9a:66:c2:
         1c:62:b3:c8:62:9b:79:f6:69:f1:4f:74:61:f7:ae:77:1e:0b:
         9f:59:4d:39:23:c6:38:36:78:aa:40:51:f6:0e:4d:1d:a6:10:
         1c:c0:e5:ca:30:2e:6e:46:76:2c:3e:e1:1d:31:c8:a8:d5:3b:
         c9:2b:c2:85:5c:ea:75:1c:bf:a9:ce:44:17:76:8f:b9:18:e4:
         6e:6d:8d:b5:3d:9d:42:82:28:7b:fe:7e:61:bd:ef:ae:05:32:
         30:3e:f5:b4:ff:57:89:7d:df:a3:13:c6:94:4c:db:6a:ac:42:
         2d:d0:91:7d:8e:8e:f9:6f:8a:3a:4b:dd:53:bd:34:ab:08:46:
         cd:7a:26:03:1a:3a:5a:cf:e3:f7:e0:79:9c:5a:cd:4b:74:02:
         2f:52:a7:70:fc:09:61:3f:7b:c8:9c:69:57:a1:d9:79:cd:9d:
         6c:98:e7:f2:d2:57:f4:1f:bc:a3:ea:be:68:c1:4d:80:0f:94:
         5d:68:0e:0f:e7:9d:0b:a0:49:05:4c:8c:84:11:ee:c9:be:ef:
         73:43:51:8f:a8:75:74:03:2f:51:85:cd:33:f7:13:3d:9d:10:
         f6:69:88:45:10:71:d6:9c:47:4b:a3:4b:bd:49:09:ca:e1:ce:
         6d:5f:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:01:40 2026 by rpki-client