Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3139322e302f32342d3234203d3e20323637373937.roa
File:                     3230302e392e3139322e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          q4n8oexgp6HitDpJxKC5IfyUcuNiYpppwJrEqzrYUf8=
Subject key identifier:   A6:71:34:2B:C5:6A:F5:13:D2:D7:F5:80:BD:A1:5C:C2:C7:6F:91:CB
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       6C6E7416791C60AA8A1292B8C0D620FCFD9DB46B
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3139322e302f32342d3234203d3e20323637373937.roa
Signing time:             Wed 26 Aug 2026 22:26:43 +0000
ROA not before:           Wed 26 Aug 2026 22:21:43 +0000
ROA not after:            Wed 25 Aug 2027 22:26:43 +0000
asID:                     267797
IP address blocks:        200.9.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Sep 2026 18:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6e:74:16:79:1c:60:aa:8a:12:92:b8:c0:d6:20:fc:fd:9d:b4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Aug 26 22:21:43 2026 GMT
            Not After : Aug 25 22:26:43 2027 GMT
        Subject: CN=A671342BC56AF513D2D7F580BDA15CC2C76F91CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:12:25:bd:81:e6:dc:44:a7:42:56:77:65:
                    16:dd:7e:b1:85:73:c4:ef:9c:d5:6e:87:7e:f5:18:
                    03:99:20:20:16:9b:4d:16:24:07:22:e2:3c:06:95:
                    6c:d8:16:d5:57:dd:36:ea:c7:06:05:8a:f6:d6:ac:
                    e5:c6:3d:5b:2a:47:b6:4d:5a:ef:02:64:ce:7a:f6:
                    8c:70:2e:27:8b:d3:4f:37:fa:23:c3:d8:dc:91:25:
                    30:2a:5c:a6:d8:04:6f:31:71:e1:55:4f:79:54:3b:
                    90:1c:60:c7:01:89:f6:cd:11:4d:48:10:69:f4:50:
                    32:d8:ba:72:c6:64:6c:7d:bd:4a:31:b2:cb:13:25:
                    8f:ab:30:dd:ea:25:39:c1:41:b2:5c:23:17:72:98:
                    1c:91:40:ad:ea:50:34:b7:01:4a:d6:af:a6:91:17:
                    41:96:c7:70:f5:6e:bd:55:97:1d:71:6e:44:00:00:
                    8a:02:e8:9c:de:b5:54:c3:ad:aa:97:fb:d8:36:9a:
                    bc:a5:23:bb:dc:6b:92:2e:6e:f7:3c:c2:36:99:35:
                    e3:7b:63:25:13:d2:66:86:98:1a:46:3f:3f:da:79:
                    2c:0f:a7:47:5e:49:16:2e:d4:e0:a2:1b:32:c3:25:
                    fd:70:cd:3b:37:0b:ee:94:26:1b:ca:a3:da:4a:f2:
                    49:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:71:34:2B:C5:6A:F5:13:D2:D7:F5:80:BD:A1:5C:C2:C7:6F:91:CB
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3139322e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:58:90:93:bc:4a:b3:22:e7:2f:1d:b8:5e:f7:fa:29:5d:e4:
         7a:c2:a8:25:73:09:a2:12:e8:d5:b3:7b:75:88:0d:92:42:ec:
         a3:77:d6:70:94:03:ed:30:3c:44:9d:c2:13:22:59:92:e7:28:
         83:09:4c:a5:07:c0:90:0c:c5:64:76:48:ea:59:8c:19:8d:ed:
         a8:35:a9:d4:34:29:05:a9:4a:c0:7f:f8:fa:df:47:3d:a7:a8:
         17:46:f9:9e:cd:9f:76:c6:fa:74:fd:a6:bf:a1:da:5d:98:3c:
         21:d3:89:47:12:54:49:22:94:2d:eb:da:0e:3d:98:a7:d2:a4:
         f5:63:f1:d3:5f:10:a6:b7:68:99:5d:1a:15:1e:f7:29:40:22:
         31:f5:80:d1:c0:cb:5a:99:dd:66:f6:f1:80:cb:90:8b:98:c2:
         f7:83:88:23:7c:db:06:b0:0a:1c:6c:a4:42:fd:65:bb:fa:b1:
         c4:06:42:85:13:f3:03:10:e3:d9:a7:7a:e3:fc:3b:0e:15:44:
         09:3e:0d:b6:60:7a:22:b6:2a:bf:1e:ce:ab:b7:15:a3:1b:15:
         e6:d7:d2:aa:dd:12:50:19:9f:b3:13:93:9b:71:70:ab:b3:5b:
         fe:35:0a:bf:ef:39:82:d6:26:51:89:e2:1b:8b:7c:83:2a:c8:
         dd:f2:88:b9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbG50FnkcYKqKEpK4wNYg/P2dtGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNjA4MjYyMjIxNDNaFw0yNzA4MjUyMjI2NDNaMDMxMTAvBgNV
BAMTKEE2NzEzNDJCQzU2QUY1MTNEMkQ3RjU4MEJEQTE1Q0MyQzc2RjkxQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfRIlvYHm3ESnQlZ3ZRbdfrGF
c8TvnNVuh371GAOZICAWm00WJAci4jwGlWzYFtVX3TbqxwYFivbWrOXGPVsqR7ZN
Wu8CZM569oxwLieL0083+iPD2NyRJTAqXKbYBG8xceFVT3lUO5AcYMcBifbNEU1I
EGn0UDLYunLGZGx9vUoxsssTJY+rMN3qJTnBQbJcIxdymByRQK3qUDS3AUrWr6aR
F0GWx3D1br1Vlx1xbkQAAIoC6JzetVTDraqX+9g2mrylI7vca5Iubvc8wjaZNeN7
YyUT0maGmBpGPz/aeSwPp0deSRYu1OCiGzLDJf1wzTs3C+6UJhvKo9pK8kllAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUpnE0K8Vq9RPS1/WAvaFcwsdvkcswHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMyMzAzMDJlMzkyZTMxMzkzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzkzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgJwDAN
BgkqhkiG9w0BAQsFAAOCAQEAvliQk7xKsyLnLx24Xvf6KV3kesKoJXMJohLo1bN7
dYgNkkLso3fWcJQD7TA8RJ3CEyJZkucogwlMpQfAkAzFZHZI6lmMGY3tqDWp1DQp
BalKwH/4+t9HPaeoF0b5ns2fdsb6dP2mv6HaXZg8IdOJRxJUSSKULevaDj2Yp9Kk
9WPx018QprdomV0aFR73KUAiMfWA0cDLWpndZvbxgMuQi5jC94OII3zbBrAKHGyk
Qv1lu/qxxAZChRPzAxDj2ad64/w7DhVECT4NtmB6IrYqvx7Oq7cVoxsV5tfSqt0S
UBmfsxOTm3Fwq7Nb/jUKv+85gtYmUYniG4t8gyrI3fKIuQ==
-----END CERTIFICATE-----
Generated at Wed Sep 9 13:53:39 2026 by rpki-client