Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35332e302f32342d3234203d3e203631343832.roa
File:                     3230302e3132362e35332e302f32342d3234203d3e203631343832.roa (raw, json)
Hash identifier:          T28ItNCulLQ0gM4slo07nNUeTfx/3tMJUkIbsJHz0j4=
Subject key identifier:   59:6A:CA:4F:43:37:99:BD:02:6E:F1:C0:EF:88:DD:16:BD:9C:84:64
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       4DD7A0B3CBF676375FBF4566FA71A6DB9E4B841A
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35332e302f32342d3234203d3e203631343832.roa
Signing time:             Thu 28 May 2026 17:44:30 +0000
ROA not before:           Thu 28 May 2026 17:39:30 +0000
ROA not after:            Thu 27 May 2027 17:44:30 +0000
asID:                     61482
IP address blocks:        200.126.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Jun 2026 21:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d7:a0:b3:cb:f6:76:37:5f:bf:45:66:fa:71:a6:db:9e:4b:84:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: May 28 17:39:30 2026 GMT
            Not After : May 27 17:44:30 2027 GMT
        Subject: CN=596ACA4F433799BD026EF1C0EF88DD16BD9C8464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:bf:76:de:95:3b:47:ea:ef:98:59:94:43:
                    33:8c:f0:00:3e:5c:0f:e9:83:10:f1:35:76:4d:26:
                    4d:5c:79:06:1d:aa:25:0f:4c:2b:2d:ff:96:19:53:
                    0e:06:5c:35:98:bc:e0:3e:66:cc:23:87:ef:27:c3:
                    43:4c:87:b6:50:fa:7f:a0:94:ec:44:4b:20:b3:a6:
                    00:72:b1:55:54:e8:fc:b4:ed:51:1e:35:38:78:82:
                    19:83:6b:f5:c0:7d:5b:25:12:96:e0:3b:82:5a:0e:
                    99:31:c2:c9:4d:54:04:2e:02:0f:85:51:30:3f:88:
                    9a:1a:99:10:78:a0:dc:a5:7b:76:1d:e1:ab:df:71:
                    90:e7:b6:ea:47:6f:22:f3:50:99:2e:34:f7:b6:03:
                    29:ea:cf:eb:ac:5c:bf:41:0a:69:ef:27:06:6e:a5:
                    32:c0:6c:d7:92:d8:e6:f9:06:e3:f3:1c:1d:b0:2f:
                    8f:70:aa:bc:02:83:f9:e5:b6:71:b3:85:31:af:29:
                    d2:f7:26:ed:fa:65:7b:e6:43:f1:93:4e:cc:75:2a:
                    6c:48:a4:0c:94:62:d7:bd:a4:c3:b8:f5:f2:bb:8c:
                    1c:f6:73:d1:d4:29:8d:e7:b3:62:c9:bd:fd:2e:a7:
                    c0:99:30:30:39:1c:3e:23:e4:03:6f:98:06:91:bc:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6A:CA:4F:43:37:99:BD:02:6E:F1:C0:EF:88:DD:16:BD:9C:84:64
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35332e302f32342d3234203d3e203631343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:55:b6:68:60:0f:da:99:73:cd:5b:2e:27:b8:93:e8:32:c7:
         06:a7:2a:19:9f:97:77:b6:bf:bb:c5:3d:b3:d0:36:62:b3:d1:
         fc:ee:4d:cd:34:09:a0:5d:46:8b:3c:8f:d4:f7:d2:8b:fc:e9:
         9c:89:eb:ac:46:18:53:14:c5:3b:84:d2:85:6e:33:19:86:e7:
         ad:07:75:aa:40:a4:48:25:a9:97:ab:c3:98:4c:2f:7e:62:f0:
         0f:75:17:e2:75:84:bd:1e:ce:3f:b0:83:03:ab:50:d7:e3:a6:
         dc:72:51:42:7f:f0:b0:9f:ca:75:95:8e:1a:e2:99:66:44:fd:
         48:43:c4:2a:cd:71:9d:9e:1d:72:ef:93:e0:ae:88:ae:9a:cc:
         fd:23:56:25:f5:5b:bb:8a:fc:9c:aa:d5:d5:ac:2a:7a:71:2e:
         85:57:b9:11:82:1e:1b:83:b0:12:92:48:a4:90:16:f8:a0:88:
         cb:37:c6:3c:f5:cb:49:bb:81:28:0e:d9:37:d5:74:0d:de:95:
         a2:fb:af:0b:3b:c6:46:e5:8f:03:13:0c:6a:a4:a9:19:9e:ff:
         d7:35:a5:c2:f1:01:91:45:3f:1f:58:c9:44:9c:b8:88:59:1a:
         65:ae:a6:4b:6f:bd:86:9e:93:32:7b:41:b6:73:d0:06:35:ff:
         e8:b2:7a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:32:07 2026 by rpki-client