Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS10983.roa
File:                     AS10983.roa (raw, json)
Hash identifier:          mxdzxaBZsthnIYwVfpH6RLwnpZRRT0XgBNtIgRJzbkQ=
Subject key identifier:   AA:CC:BA:A1:AF:8A:29:9F:B4:EC:3A:3F:8D:EF:9F:D7:4E:4B:40:0F
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       2C5232CCB9B459290BD731F0EF06997DECA19461
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS10983.roa
Signing time:             Tue 26 May 2026 19:44:15 +0000
ROA not before:           Tue 26 May 2026 19:39:15 +0000
ROA not after:            Tue 25 May 2027 19:44:15 +0000
asID:                     10983
IP address blocks:        200.45.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jun 2026 04:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:52:32:cc:b9:b4:59:29:0b:d7:31:f0:ef:06:99:7d:ec:a1:94:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: May 26 19:39:15 2026 GMT
            Not After : May 25 19:44:15 2027 GMT
        Subject: CN=AACCBAA1AF8A299FB4EC3A3F8DEF9FD74E4B400F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:66:e1:14:45:a6:30:b7:5c:3c:97:08:8e:
                    9d:3d:31:3e:94:0d:db:f3:bb:f1:e9:34:33:12:fe:
                    a2:3b:24:8a:02:11:e9:37:59:8a:70:c6:b9:dd:86:
                    5b:19:34:69:6a:4b:65:20:0e:09:d4:7d:4d:9a:b6:
                    a4:f8:a2:e0:d7:a9:f6:46:e5:f5:8f:9f:11:99:99:
                    6c:2a:c4:ed:a1:d7:75:18:ff:1c:ec:c3:1a:4d:db:
                    35:8f:70:ce:02:9b:0a:95:26:05:6b:54:06:46:23:
                    1b:f1:77:d7:a6:c7:e3:ea:36:4b:87:d1:db:cf:b9:
                    12:e5:d6:06:e7:0b:24:5a:4d:ab:3e:31:73:a5:d6:
                    70:ce:b0:5f:94:5c:34:8b:bd:ec:af:d5:7d:aa:61:
                    34:9c:bb:dd:7d:7f:d6:15:01:9e:c6:c3:54:4d:70:
                    eb:73:8a:c2:f0:b4:4e:11:49:cf:b5:62:bf:8a:11:
                    91:44:6e:27:48:c2:d3:90:51:a1:b1:69:44:e2:37:
                    b8:44:77:b8:19:a0:b4:a7:da:55:7f:5e:eb:23:d9:
                    ec:cf:6c:9c:83:7e:b0:d6:d5:c2:68:98:01:b7:d4:
                    e8:99:63:ed:6e:2d:87:9d:a8:b9:d5:f2:4a:d7:ab:
                    9e:b0:8a:f8:d6:62:f2:7c:b1:0c:f0:38:05:36:e9:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CC:BA:A1:AF:8A:29:9F:B4:EC:3A:3F:8D:EF:9F:D7:4E:4B:40:0F
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS10983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.45.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:e7:82:8a:25:bd:ef:2e:c2:0e:a8:79:11:be:43:8e:f7:71:
         52:d3:7e:4d:b3:20:39:c8:df:7d:c1:80:0e:64:ef:dd:31:86:
         d0:67:5e:14:50:e5:62:6f:f9:b4:86:fa:ed:cb:f9:50:fb:c0:
         1e:59:44:e0:54:d3:d5:6d:d5:3c:39:a5:d4:0b:26:d1:dd:66:
         b6:15:53:5d:bd:45:35:f8:0d:0b:98:79:6d:f3:b2:20:42:42:
         ac:e3:c3:f9:9b:e1:ce:06:3b:48:38:d8:33:31:65:80:22:ce:
         0b:89:dd:7e:10:a8:0b:4f:41:88:a8:90:6e:f5:73:f7:57:d3:
         1f:1d:75:ef:4e:23:6a:e5:8d:76:09:19:b2:10:a8:6e:0e:9b:
         e8:7e:d7:ca:76:ff:a8:87:28:95:30:9c:0e:87:d8:23:cc:4d:
         21:0d:52:1b:f8:34:6b:be:cd:29:de:8f:5c:da:8a:55:fb:26:
         f4:22:a5:1c:cc:ee:33:35:85:f3:8c:39:33:15:e4:1c:b7:9d:
         1d:b7:99:60:4d:d5:e7:b6:a3:fd:bb:72:89:4a:01:62:b4:04:
         8d:0f:6f:2b:2e:41:5f:93:52:d8:86:ec:08:0e:c4:9a:92:01:
         5b:c7:f8:16:7b:eb:82:a4:23:90:01:bf:1d:39:45:db:4b:bf:
         6e:1d:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:57:29 2026 by rpki-client