Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132322e302f32342d3234203d3e2033333536.roa
File:                     3230302e37362e3132322e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          dW6BdGYr4PRrN0jL/wdZ+Xa6KjHLXktc4Tin3AOOC/s=
Subject key identifier:   A2:E6:DA:3F:DA:26:A3:96:84:32:F9:06:F2:09:C4:7A:DF:3D:37:E2
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       58719BCB9E913CDD6B678CF22D2D623E51B741A5
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132322e302f32342d3234203d3e2033333536.roa
Signing time:             Thu 25 Jun 2026 14:20:00 +0000
ROA not before:           Thu 25 Jun 2026 14:15:00 +0000
ROA not after:            Thu 24 Jun 2027 14:20:00 +0000
asID:                     3356
IP address blocks:        200.76.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 Jul 2026 03:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:71:9b:cb:9e:91:3c:dd:6b:67:8c:f2:2d:2d:62:3e:51:b7:41:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Jun 25 14:15:00 2026 GMT
            Not After : Jun 24 14:20:00 2027 GMT
        Subject: CN=A2E6DA3FDA26A3968432F906F209C47ADF3D37E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:82:a4:85:7d:6e:3e:94:e0:bf:5e:c7:79:
                    8e:62:a4:2a:a1:18:90:17:75:11:e7:ec:d1:cc:94:
                    d7:99:77:b5:a4:26:69:82:e7:e4:c3:52:80:53:2a:
                    cf:bb:3d:46:c3:1b:dc:cd:26:57:83:15:24:77:87:
                    3a:d6:f1:6e:43:5b:ea:a3:f6:79:11:e5:f3:ab:cd:
                    12:9c:c0:a3:36:d1:35:32:97:86:d6:ac:5a:86:1b:
                    0e:b3:7f:ec:7a:00:b9:58:f0:15:e6:2c:92:37:52:
                    be:b5:4d:8d:67:fe:db:b3:c0:f6:2b:b9:85:1c:ee:
                    b8:d4:45:d7:58:34:c1:68:b8:15:7e:5b:56:c5:b4:
                    c0:ac:e9:5a:27:ab:10:77:b2:28:4a:3a:bf:ce:d6:
                    8b:89:91:e7:c7:0e:a7:a2:01:ef:38:9e:68:c8:2e:
                    33:1d:20:02:72:2e:5a:ad:9f:ab:4a:f9:39:6a:d6:
                    a0:25:3b:9c:4c:54:6c:4b:ae:a0:87:0b:e2:cb:7c:
                    83:c2:b7:46:3d:70:ed:54:9c:3f:69:2e:30:fc:88:
                    83:f9:ba:37:a6:94:ed:94:ce:d2:2f:08:3c:7e:42:
                    81:95:9c:6d:db:3e:90:51:29:7e:3e:cc:aa:f4:43:
                    79:4f:cc:3d:38:80:dc:2a:76:9a:df:80:d3:b0:86:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E6:DA:3F:DA:26:A3:96:84:32:F9:06:F2:09:C4:7A:DF:3D:37:E2
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132322e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:05:43:02:9e:39:55:7e:ba:08:eb:f0:48:f4:07:81:b5:7e:
         9b:b9:a0:83:c9:5b:d6:94:9c:59:65:a2:eb:2b:09:af:3e:6f:
         5b:ed:38:1d:44:53:12:4b:80:d3:cf:d9:b3:c1:bb:1a:4c:f6:
         f4:2e:32:43:c7:af:07:9b:1b:84:7f:aa:dc:c5:e8:65:2c:f9:
         5c:f6:32:82:df:6e:77:4c:a3:7c:e4:19:e6:fe:4f:c7:91:b5:
         10:13:94:e9:20:7e:55:3b:63:71:72:7f:15:d4:5e:73:89:27:
         2b:94:d8:b7:97:f7:92:20:8c:fc:d0:5d:bd:4c:e5:f2:5a:44:
         ea:8e:79:d5:24:e8:6f:a3:17:18:0b:8b:c5:0f:72:d8:ca:0d:
         0c:3d:25:d9:ed:32:82:cd:45:52:2f:1e:5a:1b:4a:1d:c8:6d:
         23:3e:6e:55:a8:97:56:9b:bb:54:af:e8:b4:a4:b7:54:92:b2:
         27:ff:3d:16:4b:27:01:68:35:51:09:39:30:b2:92:3c:a5:9c:
         fe:1c:05:93:3e:d8:1d:2c:95:17:a8:bd:3b:0d:26:62:9e:d5:
         ae:7e:05:60:95:87:f4:10:fe:e1:a1:9c:89:46:4d:9b:34:b9:
         4b:32:78:1a:ec:bd:94:55:01:d2:94:1a:07:0d:8a:88:4b:9c:
         46:a9:82:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:10:57 2026 by rpki-client