Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e36322e302f32332d3234203d3e203631343834.roa
File:                     3230302e3132362e36322e302f32332d3234203d3e203631343834.roa (raw, json)
Hash identifier:          zF2CVrVxgTwdTm59YhxDELXzhS5z0aPCJQiQQK1YBCY=
Subject key identifier:   04:A8:C8:79:C2:C7:6E:39:36:DB:D6:33:4C:DC:93:38:3E:E6:A1:95
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       4F3A8E82D3BB44EA66AC22DDF5AAA4C0B01903B7
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e36322e302f32332d3234203d3e203631343834.roa
Signing time:             Fri 14 Aug 2026 13:25:30 +0000
ROA not before:           Fri 14 Aug 2026 13:20:30 +0000
ROA not after:            Fri 13 Aug 2027 13:25:30 +0000
asID:                     61484
IP address blocks:        200.126.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3a:8e:82:d3:bb:44:ea:66:ac:22:dd:f5:aa:a4:c0:b0:19:03:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: Aug 14 13:20:30 2026 GMT
            Not After : Aug 13 13:25:30 2027 GMT
        Subject: CN=04A8C879C2C76E3936DBD6334CDC93383EE6A195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:69:44:04:b1:fb:1e:fc:92:2d:e4:ef:9f:
                    50:77:75:fa:d3:07:3f:c1:fb:1a:40:8d:52:c7:8a:
                    b0:18:d7:2d:b6:a6:9c:fb:0e:8d:6b:45:71:3c:35:
                    64:be:e8:35:92:f6:cd:46:4c:63:23:89:44:47:8b:
                    7b:51:ef:db:c9:57:db:be:fb:55:b8:5b:9b:fc:22:
                    c9:17:84:c8:8a:28:34:2c:c5:9f:ec:e7:19:7b:74:
                    70:74:b8:01:0a:5c:8a:8d:64:34:62:84:4f:4d:11:
                    a8:8a:00:d1:d7:f3:91:cc:32:4a:72:c1:af:92:c2:
                    2c:41:02:ea:f8:be:ff:10:ab:ba:be:a8:3b:c2:25:
                    e3:4f:8e:fb:62:29:c9:b6:09:00:51:7d:eb:2a:d4:
                    15:33:22:91:06:65:03:e4:82:25:d7:53:bd:83:75:
                    0c:cf:b2:53:c2:01:04:32:ca:07:a0:9e:a9:85:e7:
                    12:27:f5:84:bb:a5:e9:1b:60:8d:50:42:7f:4f:c8:
                    f5:87:df:78:0b:27:b5:9b:d9:23:a0:30:55:6b:c0:
                    94:7c:cc:6f:fa:fe:98:a9:d5:80:cf:4c:4a:68:17:
                    ac:a7:7a:c5:b8:af:3c:bb:ca:14:3c:d8:c2:c2:54:
                    9e:b6:0b:7c:9c:15:14:ce:bb:14:91:ec:c2:66:a5:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A8:C8:79:C2:C7:6E:39:36:DB:D6:33:4C:DC:93:38:3E:E6:A1:95
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e36322e302f32332d3234203d3e203631343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:8c:36:31:3f:59:85:b3:19:05:33:1f:fd:31:2f:9a:17:cc:
         f7:c6:5d:d5:9d:7a:d3:dc:be:6e:50:68:0c:68:47:3d:e8:1c:
         aa:90:ce:2e:73:b6:d8:f9:88:f0:b8:5d:8c:d1:ec:80:a9:d6:
         fd:c3:eb:44:24:29:92:61:1b:47:1d:2c:4c:39:45:3e:c9:b2:
         99:6a:f7:70:81:b9:a8:f1:31:89:fc:3e:ff:82:78:ac:16:e7:
         60:87:db:5f:1f:0f:58:56:b3:09:0a:88:17:f2:94:b7:51:6f:
         0f:ce:fe:a7:a3:6a:9e:e4:88:e5:52:7b:28:37:af:fa:1e:65:
         ad:0d:a3:55:e5:6b:77:58:f0:4c:a5:59:d3:0c:7e:b9:9c:96:
         2b:ff:d4:08:39:c5:96:53:9c:b5:91:ac:42:3e:d1:29:01:55:
         e2:91:94:a8:bf:96:03:dd:33:e6:9f:63:c3:d0:9c:df:0e:58:
         20:be:64:43:a1:1a:26:27:ff:2c:c7:3f:f2:39:82:0b:40:94:
         34:0b:ac:66:5c:e2:06:7d:1c:0e:0c:03:68:fe:d1:4c:a1:0d:
         49:0f:15:f9:60:8d:5b:50:06:f7:54:19:9d:22:03:be:6b:39:
         37:c1:78:ae:2e:d2:9b:c6:2a:c2:92:c9:ff:fe:57:88:3e:7b:
         13:91:ce:5c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTzqOgtO7ROpmrCLd9aqkwLAZA7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcxNUUzMTU5MTI2NTNCNjVGOTdDRjlDNEM1NDFCNURD
MkFGRDgzMjAeFw0yNjA4MTQxMzIwMzBaFw0yNzA4MTMxMzI1MzBaMDMxMTAvBgNV
BAMTKDA0QThDODc5QzJDNzZFMzkzNkRCRDYzMzRDREM5MzM4M0VFNkExOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6WlEBLH7HvySLeTvn1B3dfrT
Bz/B+xpAjVLHirAY1y22ppz7Do1rRXE8NWS+6DWS9s1GTGMjiURHi3tR79vJV9u+
+1W4W5v8IskXhMiKKDQsxZ/s5xl7dHB0uAEKXIqNZDRihE9NEaiKANHX85HMMkpy
wa+SwixBAur4vv8Qq7q+qDvCJeNPjvtiKcm2CQBRfesq1BUzIpEGZQPkgiXXU72D
dQzPslPCAQQyygegnqmF5xIn9YS7pekbYI1QQn9PyPWH33gLJ7Wb2SOgMFVrwJR8
zG/6/pip1YDPTEpoF6ynesW4rzy7yhQ82MLCVJ62C3ycFRTOuxSR7MJmpaHDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBKjIecLHbjk229YzTNyTOD7moZUwHwYDVR0j
BBgwFoAUJxXjFZEmU7Zfl8+cTFQbXcKv2DIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDFERUZCRkVEMzU0MTg5QjZCODlDMUM2RDEwQjQwRjQ2
NEQzRDhBNzJFMjQ1ODg5RjE5MzhGMjFCODMwMjRELzAvMjcxNUUzMTU5MTI2NTNC
NjVGOTdDRjlDNEM1NDFCNURDMkFGRDgzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzE1RTMxNTkxMjY1M0I2NUY5
N0NGOUM0QzU0MUI1REMyQUZEODMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQxREVGQkZFRDM1NDE4OUI2Qjg5QzFDNkQxMEI0MEY0NjREM0Q4QTcy
RTI0NTg4OUYxOTM4RjIxQjgzMDI0RC8wLzMyMzAzMDJlMzEzMjM2MmUzNjMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTM0MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAch+PjAN
BgkqhkiG9w0BAQsFAAOCAQEAnIw2MT9ZhbMZBTMf/TEvmhfM98Zd1Z1609y+blBo
DGhHPegcqpDOLnO22PmI8LhdjNHsgKnW/cPrRCQpkmEbRx0sTDlFPsmymWr3cIG5
qPExifw+/4J4rBbnYIfbXx8PWFazCQqIF/KUt1FvD87+p6NqnuSI5VJ7KDev+h5l
rQ2jVeVrd1jwTKVZ0wx+uZyWK//UCDnFllOctZGsQj7RKQFV4pGUqL+WA90z5p9j
w9Cc3w5YIL5kQ6EaJif/LMc/8jmCC0CUNAusZlziBn0cDgwDaP7RTKENSQ8V+WCN
W1AG91QZnSIDvms5N8F4ri7Sm8YqwpLJ//5XiD57E5HOXA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:10:16 2026 by rpki-client