Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32342d3234203d3e203631343832.roa
File:                     3230302e3132362e35322e302f32342d3234203d3e203631343832.roa (raw, json)
Hash identifier:          0DyjnmHUxHozsl+eeVghzxW2xeI/d/Zi0SBs9iRHbuU=
Subject key identifier:   AE:37:85:11:D7:41:E7:A5:0A:87:F5:E9:C0:3D:1F:76:A2:03:92:FE
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       3EB129F8C3AC334F7CEAD3AF1F9273692D790FDA
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32342d3234203d3e203631343832.roa
Signing time:             Thu 28 May 2026 17:44:31 +0000
ROA not before:           Thu 28 May 2026 17:39:31 +0000
ROA not after:            Thu 27 May 2027 17:44:31 +0000
asID:                     61482
IP address blocks:        200.126.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Jun 2026 21:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b1:29:f8:c3:ac:33:4f:7c:ea:d3:af:1f:92:73:69:2d:79:0f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: May 28 17:39:31 2026 GMT
            Not After : May 27 17:44:31 2027 GMT
        Subject: CN=AE378511D741E7A50A87F5E9C03D1F76A20392FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:c3:90:51:4a:5e:d1:95:38:93:6e:34:45:
                    7c:86:b9:84:d9:5e:7b:dc:a2:7c:56:b3:95:43:b9:
                    d0:8a:a2:89:b3:fe:48:d5:c4:ac:e9:43:18:4e:b2:
                    c2:39:dc:b9:93:7c:50:b8:cc:c9:d8:fe:f5:a3:91:
                    74:b6:62:76:7e:25:83:0f:c0:ed:41:0b:d8:8f:19:
                    cb:b7:c3:7c:af:b7:b4:5d:73:e1:63:2c:b6:eb:37:
                    fe:0e:74:4b:08:77:ee:ea:41:d6:4e:b3:9a:42:c5:
                    9f:55:64:ff:17:81:0b:b4:99:0a:04:6e:f2:a0:43:
                    f1:02:25:3c:3d:9c:6f:70:af:3c:93:84:1d:f5:9b:
                    a8:12:3d:bf:01:ba:e1:ae:dd:5a:76:6e:98:f1:22:
                    0a:48:69:0b:6c:c3:9e:9e:14:0a:ed:75:94:f8:9f:
                    f3:08:7d:e4:35:1e:44:57:6e:d1:cd:35:6b:96:14:
                    38:d7:b7:95:0e:23:dc:6c:c9:12:aa:01:d6:02:2b:
                    fd:e4:23:3f:c8:1d:d4:cc:d0:8a:40:30:40:54:92:
                    e7:eb:97:90:51:75:0f:41:10:82:b6:b0:bf:ba:e1:
                    2e:b9:46:00:b1:de:63:d3:ad:9a:91:b0:b0:8f:e2:
                    ef:3e:ef:ee:64:70:4f:d3:dd:eb:68:58:52:6e:97:
                    cf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:37:85:11:D7:41:E7:A5:0A:87:F5:E9:C0:3D:1F:76:A2:03:92:FE
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35322e302f32342d3234203d3e203631343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:5e:b2:40:32:39:ae:3b:91:d8:56:dc:6d:66:f1:ed:64:eb:
         70:53:e6:a0:62:d3:64:05:97:40:69:f3:d0:0e:b5:14:f6:6b:
         7c:56:06:5f:a3:f6:3a:40:22:57:e1:7d:5d:8d:ac:e0:24:a2:
         83:7e:c1:05:3b:b8:4e:dd:03:9e:5b:3b:7b:61:f2:7c:e3:1a:
         26:f8:1d:44:41:9d:21:82:fd:ff:64:2b:7e:e3:b7:d7:27:91:
         2e:ab:2c:e0:f2:bf:2b:71:14:c7:b4:ee:cd:8f:29:f7:92:3a:
         97:e0:a1:f8:5b:51:48:74:da:8c:67:44:4b:98:2f:f3:ca:9b:
         3a:90:d1:41:a1:a9:72:dc:34:28:de:5c:d1:26:cf:2f:df:61:
         fd:98:25:98:f1:40:de:f4:a0:c1:3e:b7:ab:a8:41:7f:2c:37:
         d4:7d:f5:61:48:f0:af:5a:27:72:a8:d2:c1:34:cb:79:4c:35:
         32:14:89:17:56:0e:72:1a:9c:01:74:76:84:84:03:4f:88:f1:
         7b:e0:a9:b2:10:46:d1:3d:14:16:e3:04:5d:a6:ae:4d:74:19:
         77:09:e7:87:88:25:9b:00:3d:57:62:6a:68:b0:d0:fa:35:84:
         c1:3b:ee:19:d2:7c:7d:e5:ce:91:d2:e5:d3:d5:b3:b3:34:01:
         e5:c6:d6:cd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPrEp+MOsM0986tOvH5JzaS15D9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcxNUUzMTU5MTI2NTNCNjVGOTdDRjlDNEM1NDFCNURD
MkFGRDgzMjAeFw0yNjA1MjgxNzM5MzFaFw0yNzA1MjcxNzQ0MzFaMDMxMTAvBgNV
BAMTKEFFMzc4NTExRDc0MUU3QTUwQTg3RjVFOUMwM0QxRjc2QTIwMzkyRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4cOQUUpe0ZU4k240RXyGuYTZ
XnvconxWs5VDudCKoomz/kjVxKzpQxhOssI53LmTfFC4zMnY/vWjkXS2YnZ+JYMP
wO1BC9iPGcu3w3yvt7Rdc+FjLLbrN/4OdEsId+7qQdZOs5pCxZ9VZP8XgQu0mQoE
bvKgQ/ECJTw9nG9wrzyThB31m6gSPb8BuuGu3Vp2bpjxIgpIaQtsw56eFArtdZT4
n/MIfeQ1HkRXbtHNNWuWFDjXt5UOI9xsyRKqAdYCK/3kIz/IHdTM0IpAMEBUkufr
l5BRdQ9BEIK2sL+64S65RgCx3mPTrZqRsLCP4u8+7+5kcE/T3etoWFJul8+3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUrjeFEddB56UKh/XpwD0fdqIDkv4wHwYDVR0j
BBgwFoAUJxXjFZEmU7Zfl8+cTFQbXcKv2DIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDFERUZCRkVEMzU0MTg5QjZCODlDMUM2RDEwQjQwRjQ2
NEQzRDhBNzJFMjQ1ODg5RjE5MzhGMjFCODMwMjRELzAvMjcxNUUzMTU5MTI2NTNC
NjVGOTdDRjlDNEM1NDFCNURDMkFGRDgzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzE1RTMxNTkxMjY1M0I2NUY5
N0NGOUM0QzU0MUI1REMyQUZEODMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQxREVGQkZFRDM1NDE4OUI2Qjg5QzFDNkQxMEI0MEY0NjREM0Q4QTcy
RTI0NTg4OUYxOTM4RjIxQjgzMDI0RC8wLzMyMzAzMDJlMzEzMjM2MmUzNTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMh+NDAN
BgkqhkiG9w0BAQsFAAOCAQEAvV6yQDI5rjuR2FbcbWbx7WTrcFPmoGLTZAWXQGnz
0A61FPZrfFYGX6P2OkAiV+F9XY2s4CSig37BBTu4Tt0Dnls7e2HyfOMaJvgdREGd
IYL9/2QrfuO31yeRLqss4PK/K3EUx7TuzY8p95I6l+Ch+FtRSHTajGdES5gv88qb
OpDRQaGpctw0KN5c0SbPL99h/ZglmPFA3vSgwT63q6hBfyw31H31YUjwr1oncqjS
wTTLeUw1MhSJF1YOchqcAXR2hIQDT4jxe+CpshBG0T0UFuMEXaauTXQZdwnnh4gl
mwA9V2JqaLDQ+jWEwTvuGdJ8feXOkdLl09WzszQB5cbWzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:32:42 2026 by rpki-client