Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/3230302e33332e3230322e302f32342d3234203d3e203131353139.roa
File:                     3230302e33332e3230322e302f32342d3234203d3e203131353139.roa (raw, json)
Hash identifier:          Nwn6VMD2q7jHbFZiWsOZftJatq/21Dq4+sSEAMAYVVI=
Subject key identifier:   38:01:CE:12:04:63:F2:D6:E3:62:D9:02:8C:0A:C9:6C:E1:B2:B7:DD
Certificate issuer:       /CN=24B55248027DBB0BEA90E6AE3465153C7D9FCAA9
Certificate serial:       6ECE08D1FED83F319B47E2A38F32F174B2680A0A
Authority key identifier: 24:B5:52:48:02:7D:BB:0B:EA:90:E6:AE:34:65:15:3C:7D:9F:CA:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/3230302e33332e3230322e302f32342d3234203d3e203131353139.roa
Signing time:             Wed 28 Oct 2026 08:10:00 +0000
ROA not before:           Wed 28 Oct 2026 08:05:00 +0000
ROA not after:            Wed 27 Oct 2027 08:10:00 +0000
asID:                     11519
IP address blocks:        200.33.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Nov 2026 05:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ce:08:d1:fe:d8:3f:31:9b:47:e2:a3:8f:32:f1:74:b2:68:0a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24B55248027DBB0BEA90E6AE3465153C7D9FCAA9
        Validity
            Not Before: Oct 28 08:05:00 2026 GMT
            Not After : Oct 27 08:10:00 2027 GMT
        Subject: CN=3801CE120463F2D6E362D9028C0AC96CE1B2B7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:f1:fa:c5:5a:f1:fa:36:60:7c:96:35:6f:
                    bc:2f:c3:0c:ee:68:aa:2a:18:93:69:05:9a:0e:ce:
                    31:45:ae:51:a2:b8:be:08:bf:8e:35:64:48:ca:2e:
                    11:e6:c8:e4:b4:67:f6:48:5c:0b:ea:ce:ed:a3:79:
                    ca:b4:c5:28:b6:84:f2:76:1c:a0:4f:7d:25:16:d6:
                    e7:92:95:1a:94:8e:a5:8a:1b:f9:b6:c8:e0:f3:4c:
                    c6:47:bd:b9:a1:e0:e7:52:fa:e1:c4:48:7b:81:ed:
                    09:66:61:e8:fa:32:65:0c:de:9e:88:62:6e:ff:e4:
                    0c:7c:16:e6:90:03:24:07:8d:07:7d:4a:81:c6:6e:
                    42:76:d2:89:ef:36:7a:22:d3:da:b3:0a:9e:6d:d5:
                    e3:57:35:40:75:ca:69:9b:59:17:f6:9a:61:61:95:
                    4e:40:3f:bf:2d:d4:ba:50:a2:0d:9d:67:b7:95:e6:
                    58:b3:51:2e:51:a8:27:4c:9b:d3:6e:8e:38:6d:50:
                    5d:c1:a4:ca:69:1a:de:8c:40:4c:ad:a0:1a:5b:ae:
                    84:55:a6:87:14:71:44:12:f3:46:71:07:9a:39:3c:
                    a8:46:3a:dc:71:c3:5c:6d:b2:e3:29:e7:48:26:fb:
                    dd:16:89:26:98:69:4b:49:0c:22:17:be:a4:66:50:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:01:CE:12:04:63:F2:D6:E3:62:D9:02:8C:0A:C9:6C:E1:B2:B7:DD
            X509v3 Authority Key Identifier:
                keyid:24:B5:52:48:02:7D:BB:0B:EA:90:E6:AE:34:65:15:3C:7D:9F:CA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24B55248027DBB0BEA90E6AE3465153C7D9FCAA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAD81124FB081E081FDB16A56084A489A5848CA8FEF145D38477F24008026904/0/3230302e33332e3230322e302f32342d3234203d3e203131353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f0:c2:68:03:d0:cb:97:d4:a3:45:21:74:8c:97:96:e5:94:
         17:03:6c:e5:f8:8a:b3:68:35:73:60:b7:bf:5c:b8:b3:81:68:
         88:d6:b4:bf:e7:64:ac:35:ad:92:98:51:56:b8:37:5a:82:e9:
         c5:a0:8d:ac:c0:fa:8e:e2:8f:0c:33:31:84:a5:ea:56:89:5a:
         e0:6a:c6:b5:71:a5:07:37:4c:01:6c:96:ff:d7:8a:84:55:43:
         f9:96:9d:f2:ff:da:a1:13:85:c5:de:e2:14:d3:bf:17:be:8c:
         e9:1d:66:2c:8e:db:a5:05:97:42:cc:af:4e:16:a0:57:ba:3f:
         36:60:8b:56:1c:49:6a:57:b5:43:31:67:23:3f:5a:e9:6c:bd:
         93:92:5a:63:f3:96:a9:51:5e:ed:f0:e8:54:7b:a3:c2:56:e2:
         99:8f:26:0a:08:45:37:3c:30:25:6b:00:57:77:e8:cc:c2:b5:
         8c:ea:cc:3e:50:f5:7d:9d:c1:5a:b6:79:13:29:cc:78:4e:f7:
         48:18:73:f5:97:e2:de:ea:6f:85:f0:b8:0e:2a:99:cf:a6:52:
         5b:87:e5:e1:15:23:56:ac:b9:1a:8b:d3:8b:80:66:1f:81:c0:
         cf:11:84:2c:56:52:b0:c9:ee:0c:f0:34:cc:87:ff:fb:12:ca:
         ed:ad:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 03:08:12 2026 by rpki-client