Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234362e302f32392d3239203d3e203634313138.roa
File:                     3230302e35352e3234362e302f32392d3239203d3e203634313138.roa (raw, json)
Hash identifier:          mgLa85Rp9ceD//pT8kjmjvzeTEhfRFPbYHMYJie0DbU=
Subject key identifier:   97:53:F4:16:EA:76:5E:E5:07:1F:50:FB:CD:83:CD:9E:67:AB:FE:81
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       36B463798C1950D8EDECC4B580FB40F0E26E4749
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234362e302f32392d3239203d3e203634313138.roa
Signing time:             Tue 17 Mar 2026 20:34:22 +0000
ROA not before:           Tue 17 Mar 2026 20:29:22 +0000
ROA not after:            Tue 16 Mar 2027 20:34:22 +0000
asID:                     64118
IP address blocks:        200.55.246.0/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Mar 2026 06:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b4:63:79:8c:19:50:d8:ed:ec:c4:b5:80:fb:40:f0:e2:6e:47:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Mar 17 20:29:22 2026 GMT
            Not After : Mar 16 20:34:22 2027 GMT
        Subject: CN=9753F416EA765EE5071F50FBCD83CD9E67ABFE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:d6:28:46:ab:56:7d:46:dc:cf:cc:26:57:
                    cc:c6:e7:a3:1c:d3:73:c8:9e:19:33:f9:0b:6e:1e:
                    6e:16:c4:96:94:5c:5f:c0:03:03:3c:9b:bf:0a:fb:
                    b8:13:52:02:e3:b6:a5:98:47:5b:58:8c:ab:02:b1:
                    a3:54:cd:ac:7c:06:bf:f5:a3:96:23:01:8d:e3:8c:
                    d8:0c:81:9a:14:35:5a:09:c5:c0:77:27:7e:c2:44:
                    69:07:3c:ac:a0:0d:b1:db:5d:2d:e1:af:7e:9d:b0:
                    2b:a4:b7:c4:4b:50:74:e4:26:c0:86:5e:14:ae:f1:
                    f7:e2:b5:d3:66:0a:f1:83:74:14:37:7d:ec:79:73:
                    24:fb:a7:f9:7a:93:f3:34:5b:00:81:ae:65:77:cb:
                    1e:5f:18:59:22:bb:f7:37:e6:b7:f6:63:9b:16:47:
                    bf:e8:1f:78:7f:6f:e1:72:80:8e:7a:93:b0:43:81:
                    4e:8d:36:82:4c:ec:aa:00:c5:55:85:a0:af:6b:95:
                    57:98:13:74:10:5d:8c:98:dd:a9:62:ec:32:77:e4:
                    0d:b2:fe:1f:d2:19:79:30:26:95:e7:af:20:c2:68:
                    14:eb:02:93:4f:ea:77:34:b9:62:28:79:87:af:11:
                    64:5e:c8:7d:b8:2d:e0:af:30:3c:cd:3a:c6:51:f6:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:53:F4:16:EA:76:5E:E5:07:1F:50:FB:CD:83:CD:9E:67:AB:FE:81
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234362e302f32392d3239203d3e203634313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.246.0/29

    Signature Algorithm: sha256WithRSAEncryption
         24:47:d2:e7:ee:78:24:36:82:67:d6:ba:bf:92:70:98:8c:d3:
         eb:21:d0:32:2d:ec:d9:3f:2b:3f:e4:6f:0c:a1:ef:8a:bc:fc:
         b8:fc:27:bb:15:ab:0d:5a:15:76:2f:d5:cd:d9:ca:3f:c3:4c:
         b0:75:73:57:3b:23:ff:47:09:e6:ca:de:3f:a5:16:a4:03:24:
         19:de:b4:3b:04:a8:f5:1f:4f:f7:0a:f4:6d:3c:e8:0a:eb:bb:
         9a:ff:2a:4b:96:a5:30:07:ab:76:07:09:6d:57:d7:b5:8b:41:
         34:ae:76:29:c1:ab:cf:bb:d4:f5:ca:b3:be:a3:6f:4d:7b:33:
         4e:0e:a3:74:60:a9:95:1c:c3:a6:9b:a4:82:c5:71:b3:a9:13:
         41:07:49:41:82:db:0e:19:cf:45:d7:9d:e7:93:71:5e:ee:37:
         e7:f6:5d:0e:ae:05:98:00:05:b0:66:01:2d:f8:57:cb:43:44:
         5a:ee:c1:df:72:b7:96:a6:43:7a:2d:fc:81:54:61:85:25:ff:
         8e:0d:e2:63:f5:a5:c2:30:1c:49:ae:db:63:ad:ec:2e:0f:5e:
         d2:d9:52:a5:ac:76:11:66:94:9f:53:c7:de:db:f7:d8:cc:b9:
         98:3a:70:31:72:a4:b5:02:98:c0:78:34:de:e7:a0:44:b5:89:
         c7:d2:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 05:36:18 2026 by rpki-client