Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132302e302f32312d3234203d3e203237383236.roa
File:                     3230302e31362e3132302e302f32312d3234203d3e203237383236.roa (raw, json)
Hash identifier:          LDIp72OaFgAOVweeX9I2tNawK89+ctKHIODzngkcr3Q=
Subject key identifier:   DD:5C:90:A4:F8:87:44:40:7F:A4:7E:1E:89:6D:2E:4E:F7:A3:7C:95
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       6CC922758A56B1433221D4515186C3E4C56788F0
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132302e302f32312d3234203d3e203237383236.roa
Signing time:             Wed 26 Aug 2026 16:26:38 +0000
ROA not before:           Wed 26 Aug 2026 16:21:38 +0000
ROA not after:            Wed 25 Aug 2027 16:26:38 +0000
asID:                     27826
IP address blocks:        200.16.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 18:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c9:22:75:8a:56:b1:43:32:21:d4:51:51:86:c3:e4:c5:67:88:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Aug 26 16:21:38 2026 GMT
            Not After : Aug 25 16:26:38 2027 GMT
        Subject: CN=DD5C90A4F88744407FA47E1E896D2E4EF7A37C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:67:7f:72:53:9d:f5:34:89:a0:e3:bb:56:
                    95:4d:5e:2d:fd:3b:9d:f7:00:81:22:37:e5:78:da:
                    3e:51:75:26:84:a8:f2:e9:55:2b:eb:e4:14:0c:21:
                    97:bb:92:2e:0b:b8:65:0f:a7:0e:21:39:32:4e:cc:
                    d2:2c:2b:04:a3:f6:7c:1d:ad:d7:dc:bd:d2:17:c8:
                    6a:f7:ca:fe:ff:d2:6d:45:b1:34:bd:bf:15:dd:cf:
                    2e:9e:d6:73:bf:a8:89:2b:53:0e:c3:47:83:d7:c7:
                    e8:ce:65:d3:92:ba:da:3e:d1:bd:5d:8b:22:7f:33:
                    bb:a4:a4:8f:0d:06:1c:3e:80:d0:68:bc:7b:9b:da:
                    cf:c9:99:b7:b7:e6:db:a9:87:46:e7:95:d3:81:73:
                    b6:c6:12:49:4c:26:f2:23:7a:79:34:54:70:46:fd:
                    d6:68:ff:e1:ce:2c:71:e1:1b:62:8f:f0:26:40:e3:
                    4e:ed:da:12:0e:01:e7:f6:e4:42:38:e8:a4:83:da:
                    e8:1e:a4:7f:ee:66:87:66:b4:2b:c9:4f:0e:7c:65:
                    3f:78:31:1f:47:b3:83:71:d0:f6:8d:b2:23:f3:1e:
                    4c:2c:f0:a6:29:ea:95:e4:1a:f6:83:09:ad:b8:d6:
                    40:47:25:bb:9f:9b:2c:50:89:79:06:8a:55:c7:d9:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5C:90:A4:F8:87:44:40:7F:A4:7E:1E:89:6D:2E:4E:F7:A3:7C:95
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132302e302f32312d3234203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:89:5f:17:30:86:8f:28:ad:cf:22:a9:91:f7:5f:dd:f9:98:
         5c:cd:3e:3f:d0:16:1b:52:d6:65:25:da:57:5e:21:28:d5:a3:
         de:8c:80:cf:8c:35:ff:7c:b3:c2:82:5c:ae:2e:f1:b8:bd:35:
         7b:72:96:06:10:84:64:fa:e9:02:14:80:86:c2:1b:ca:11:89:
         b0:ad:95:94:8c:4c:88:b9:92:74:7f:6c:84:28:e1:20:6c:ef:
         f3:41:12:1f:b9:66:71:1b:e5:bd:3a:cf:17:3c:b6:ab:5c:85:
         82:f5:61:1a:e3:f4:5d:ff:a8:5f:6b:6a:2e:70:9c:c6:68:68:
         22:19:82:91:dc:ba:9c:a4:10:78:40:c7:81:43:6c:cc:6e:79:
         8a:fd:fd:a4:5a:1a:d5:8e:72:0a:b7:ff:5e:3b:84:c2:1f:dc:
         3b:37:87:12:e9:cc:f8:39:77:ea:c3:ac:97:50:0a:15:ac:61:
         3c:94:b4:ba:85:50:95:dd:a6:25:8f:4e:92:2f:aa:dd:a6:20:
         b9:a3:5f:64:44:d5:97:71:d0:4e:82:ce:3e:e5:17:f3:91:02:
         a0:06:51:00:63:29:bb:b1:55:38:65:9a:c0:34:e0:8e:f6:61:
         57:7b:86:75:4b:c3:24:af:a7:45:83:cc:69:f7:a4:5e:db:1b:
         82:b0:32:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:59:54 2026 by rpki-client