Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3139332e302f32342d3234203d3e20323733313730.roa
File:                     3230302e35392e3139332e302f32342d3234203d3e20323733313730.roa (raw, json)
Hash identifier:          l5RVIhLObeJCZKU6Fu9bnx7IdLVHLaQqr0Xew6DzL5o=
Subject key identifier:   18:F0:E7:13:CA:DD:3D:A5:10:D9:92:7B:27:ED:24:40:AB:F1:B0:3F
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       0E1FCA98CE6BCC5BCA0C073164FF6D6F66895728
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3139332e302f32342d3234203d3e20323733313730.roa
Signing time:             Sat 16 May 2026 19:40:00 +0000
ROA not before:           Sat 16 May 2026 19:35:00 +0000
ROA not after:            Sat 15 May 2027 19:40:00 +0000
asID:                     273170
IP address blocks:        200.59.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1f:ca:98:ce:6b:cc:5b:ca:0c:07:31:64:ff:6d:6f:66:89:57:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: May 16 19:35:00 2026 GMT
            Not After : May 15 19:40:00 2027 GMT
        Subject: CN=18F0E713CADD3DA510D9927B27ED2440ABF1B03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:a2:4a:29:c3:f2:67:15:29:cd:de:e9:3f:
                    0a:5c:c4:4b:07:12:9e:ff:f3:0e:77:4f:70:7b:88:
                    53:3c:96:d6:36:4c:ee:53:34:7c:76:17:67:bd:49:
                    df:d5:3a:c5:81:81:53:95:cc:58:53:62:fd:be:00:
                    90:76:7b:e4:ef:44:52:d9:c1:94:92:33:8d:8d:53:
                    56:e0:60:53:78:69:4c:e3:95:4a:e3:c4:17:36:32:
                    2b:90:cf:86:ae:a8:05:f3:82:1d:7c:7a:ce:e9:8c:
                    b6:7f:c1:9f:5e:ef:8d:4a:a3:a9:f7:3a:e6:40:09:
                    60:da:86:a9:7b:24:f2:18:10:20:b2:2f:44:43:fc:
                    d1:a2:f6:62:bc:dd:a3:15:6b:d9:bd:13:f9:60:37:
                    51:7a:1a:ab:24:75:80:29:08:44:06:6b:aa:ac:75:
                    0b:c2:0d:01:0c:3b:a7:f7:ac:c1:35:08:21:97:17:
                    7c:cf:02:dc:be:37:0f:f0:e4:0a:28:b6:15:de:9f:
                    a3:15:6f:23:88:8c:ae:be:5e:8b:31:bf:22:02:4b:
                    25:fc:98:00:51:4c:16:cc:43:8f:e3:9f:0c:0f:47:
                    a1:3b:a0:ed:50:15:a7:c8:50:9a:ef:7a:e2:5f:59:
                    7f:29:c3:2e:38:be:7a:f8:2e:86:03:89:d5:63:d3:
                    05:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F0:E7:13:CA:DD:3D:A5:10:D9:92:7B:27:ED:24:40:AB:F1:B0:3F
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3139332e302f32342d3234203d3e20323733313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:83:20:7c:78:14:cc:37:ff:38:d9:22:ed:01:c1:0d:8e:fe:
         7a:42:7a:6b:b7:8b:14:5c:00:84:18:a6:de:34:64:53:ca:3f:
         73:c6:7b:dd:14:80:fd:dc:86:ab:e2:23:38:6d:53:70:a5:ae:
         ff:00:51:78:0e:34:d3:55:07:04:ae:3c:ce:a1:b1:9d:00:ad:
         b5:b2:64:f2:bc:32:8b:a2:78:e0:58:d9:8f:68:bc:d3:9b:dd:
         95:5e:9b:31:a8:38:7d:b7:28:d1:78:1a:bd:7d:d9:40:2c:e4:
         6a:2d:14:61:a0:45:77:c2:6d:8b:a4:54:56:7d:0f:79:df:05:
         ae:fd:f3:52:60:f9:f3:28:97:78:e8:05:80:fd:f5:26:7c:25:
         9d:0f:cb:af:fd:0c:31:6f:1e:c7:d2:25:67:d7:dc:34:55:4f:
         1f:27:9b:20:1c:c6:49:c5:59:e7:9c:39:c2:9a:8f:2d:39:99:
         ef:90:fb:4e:ec:f2:d4:ec:13:0f:03:9f:96:fc:17:a2:f5:32:
         56:82:30:69:d2:a3:8c:e1:c3:85:58:e1:96:0c:10:ff:72:ce:
         e3:3d:8e:f4:1a:73:25:a2:a2:56:84:76:37:8d:46:ba:39:d4:
         31:74:f7:94:77:11:30:8a:7f:8b:a6:d5:8d:05:da:fd:c1:39:
         5d:e0:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:36:08 2026 by rpki-client