Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35392e302f32342d3234203d3e203631343833.roa
File:                     3230302e3132362e35392e302f32342d3234203d3e203631343833.roa (raw, json)
Hash identifier:          vwm509P+GUn/w/v9OwREpYOUuOkTGTTW1AyrpImcJhI=
Subject key identifier:   D5:AB:6D:EE:6F:62:E7:60:37:96:5E:27:4E:5C:40:F2:62:20:EA:4E
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       6DCBEDD3929E6E78507646DF554F1E668C0B3B68
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35392e302f32342d3234203d3e203631343833.roa
Signing time:             Thu 12 Mar 2026 18:30:00 +0000
ROA not before:           Thu 12 Mar 2026 18:25:00 +0000
ROA not after:            Thu 11 Mar 2027 18:30:00 +0000
asID:                     61483
IP address blocks:        200.126.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Mar 2026 04:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cb:ed:d3:92:9e:6e:78:50:76:46:df:55:4f:1e:66:8c:0b:3b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: Mar 12 18:25:00 2026 GMT
            Not After : Mar 11 18:30:00 2027 GMT
        Subject: CN=D5AB6DEE6F62E76037965E274E5C40F26220EA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:e2:7c:ca:70:b8:59:6b:82:a8:86:15:83:
                    09:fa:25:67:b0:e1:a9:6f:08:9a:a7:3f:68:e5:48:
                    5b:ea:ee:a8:a1:b8:77:50:1f:61:2c:09:6d:e5:67:
                    ea:74:d5:54:74:d1:90:e1:7a:2d:2c:86:81:3d:a5:
                    f4:52:09:6b:07:c7:cd:63:29:c8:93:a7:b3:14:2b:
                    c8:ad:ce:58:ff:cc:02:41:25:58:ce:71:c4:70:c1:
                    7a:69:bd:78:c5:1e:64:1d:88:2b:84:12:c0:f3:50:
                    a9:f4:ca:f3:7e:37:3a:80:c2:2e:1a:cd:67:56:56:
                    cd:6a:6b:38:3d:96:f2:c7:dc:0e:4a:06:f8:00:ca:
                    a6:be:c9:f1:59:5b:54:a2:41:ba:ef:a7:4c:48:b0:
                    01:52:ee:74:a4:30:70:22:60:e3:a2:10:8e:65:81:
                    23:83:75:69:94:79:1e:d9:dd:ab:3f:d3:78:fc:25:
                    99:fa:39:3e:22:43:7e:e1:bd:97:c5:0e:fd:61:8c:
                    7e:39:67:bc:44:92:2f:61:f4:df:11:b9:1c:88:4f:
                    ec:42:2b:b5:18:94:8a:bb:d6:54:38:30:c4:83:ab:
                    64:54:43:cb:0c:9a:09:2e:98:24:08:8f:07:68:a8:
                    17:d7:f8:d1:34:fc:ca:a1:de:5c:7a:e9:72:78:1f:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AB:6D:EE:6F:62:E7:60:37:96:5E:27:4E:5C:40:F2:62:20:EA:4E
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e35392e302f32342d3234203d3e203631343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:e9:a0:2f:33:bf:42:19:08:a0:36:a0:7b:0d:d8:80:ee:69:
         26:5f:13:6b:6b:94:a8:b5:42:8f:c2:9c:14:bb:49:a5:84:51:
         38:4d:9d:00:4e:ad:9a:96:df:86:42:6d:bf:f0:f4:c4:3c:7f:
         4b:02:70:a4:0e:62:fc:57:ea:f5:0e:5b:08:85:b5:77:ef:9a:
         44:bd:ee:1b:ea:78:88:e7:81:06:38:72:56:24:b7:f8:23:21:
         89:58:89:b5:be:28:9e:4a:15:50:09:b6:e8:7b:87:93:f5:70:
         eb:ec:2b:6d:60:0a:e1:46:61:77:ab:91:58:4f:08:5b:fa:1f:
         d5:fe:eb:db:aa:0f:1d:15:65:ac:22:46:8d:66:4b:de:24:ae:
         71:ac:00:7c:ac:02:ca:4a:9c:46:90:f0:37:18:5d:18:74:cf:
         c7:86:0a:0f:20:00:cb:14:e0:6d:85:93:55:bf:40:05:6a:30:
         78:a8:c8:2a:d0:b1:7f:43:ea:20:0d:34:af:f4:dd:71:16:df:
         d9:4e:e0:43:88:ec:fc:08:fb:33:da:65:97:49:6c:63:9f:8a:
         fa:ad:8a:14:10:f3:2b:28:1c:71:f2:40:9a:08:a7:9f:b7:67:
         ca:d9:0c:5e:63:39:00:42:4b:4d:20:15:13:2a:01:4a:dd:4a:
         c0:1e:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:57:20 2026 by rpki-client