Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230302e3132362e36342e302f31382d3234203d3e203134313137.roa
File:                     3230302e3132362e36342e302f31382d3234203d3e203134313137.roa (raw, json)
Hash identifier:          hf1ebENIfKZ/uI4gIXEDAX7pXv0ld+x7bhuc+btNMBo=
Subject key identifier:   24:6D:10:5B:2C:36:6C:94:C8:63:61:38:E5:CD:4C:50:BF:E5:51:6E
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       2F86087E9910237E3622CADB4345EFD01A9F2B94
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230302e3132362e36342e302f31382d3234203d3e203134313137.roa
Signing time:             Tue 01 Jul 2025 19:15:03 +0000
ROA not before:           Tue 01 Jul 2025 19:10:03 +0000
ROA not after:            Tue 30 Jun 2026 19:15:03 +0000
asID:                     14117
IP address blocks:        200.126.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:86:08:7e:99:10:23:7e:36:22:ca:db:43:45:ef:d0:1a:9f:2b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Jul  1 19:10:03 2025 GMT
            Not After : Jun 30 19:15:03 2026 GMT
        Subject: CN=246D105B2C366C94C8636138E5CD4C50BFE5516E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:bb:3c:2b:eb:de:9f:5f:89:b8:26:b1:06:
                    2a:79:b8:53:4f:14:c0:b7:28:98:db:3c:db:40:ed:
                    8e:47:c8:2c:a7:06:f0:12:f3:97:58:c9:02:a7:b2:
                    98:01:7a:6f:41:e6:98:e3:36:79:08:a6:2a:b4:ea:
                    60:85:d4:b8:6e:8e:81:c0:8d:56:50:c5:8b:d0:78:
                    be:e9:83:3f:7e:a4:af:77:a0:7f:6e:1e:18:34:39:
                    fc:ac:f9:3e:c6:79:6d:e1:aa:19:f0:0e:f0:02:72:
                    71:70:af:34:fe:48:69:b0:46:60:dd:c6:ba:16:ad:
                    1d:ae:fe:9f:ed:26:63:2f:16:6d:68:ac:aa:53:2b:
                    f5:36:36:07:aa:bb:cf:11:48:9b:79:67:e1:84:0b:
                    ff:16:74:d5:6e:e7:99:77:bc:a7:63:cf:68:37:64:
                    eb:74:26:a9:94:95:76:c2:2a:a2:98:12:6f:eb:1d:
                    76:c4:51:1f:02:dd:e7:f0:20:f7:54:dd:c7:4a:b8:
                    0c:2f:a1:bc:7c:11:8d:9e:ee:67:95:d7:0f:d1:81:
                    3c:96:73:c2:8a:84:ec:79:4f:23:8c:d9:f3:cc:94:
                    c2:4d:01:9f:81:48:ab:3e:1e:06:5f:ba:05:79:4d:
                    0d:c5:7b:12:43:dd:05:2c:15:9e:51:ee:d5:8a:c7:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6D:10:5B:2C:36:6C:94:C8:63:61:38:E5:CD:4C:50:BF:E5:51:6E
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3230302e3132362e36342e302f31382d3234203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         32:be:3e:36:96:b3:56:9d:3c:a7:d5:20:06:ae:c8:d6:26:94:
         e8:91:34:6b:95:e3:0c:5a:aa:65:7d:18:39:f6:bf:1b:f1:53:
         38:80:c6:7f:b8:35:92:bd:db:95:9a:5c:ea:0a:3f:36:d6:f6:
         4d:ba:1e:b0:29:09:b1:78:ba:67:c0:11:b7:08:51:31:0e:c5:
         bd:20:e4:ef:d8:92:e1:f5:82:67:67:7e:ad:e8:f2:ab:30:b6:
         aa:21:ac:a4:31:b7:09:2b:9a:e2:b3:97:e6:d9:6e:7e:50:aa:
         9b:ff:d0:af:6c:a2:70:8e:cf:a6:ec:72:f2:77:f8:2a:6d:33:
         ed:06:eb:5b:b8:e2:3a:74:a3:5f:4c:41:aa:31:dd:16:d9:b8:
         22:59:f5:7a:fc:34:94:50:05:46:59:3d:c1:78:a9:22:63:2b:
         83:01:58:5c:62:db:1e:a1:b1:0c:21:f0:bd:89:fc:fb:12:50:
         67:7c:91:e4:74:7a:da:4f:40:39:10:52:68:be:25:29:27:2c:
         85:36:50:0b:b5:91:4f:6a:d2:ad:5a:94:25:ed:11:f9:6f:df:
         39:58:c8:67:22:73:1e:d4:45:33:16:f6:f0:c1:2f:92:1a:cd:
         e7:0d:ef:46:b8:a0:fc:6f:ed:8c:c1:d5:36:98:89:cb:23:30:
         31:3b:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:46:24 2025 by rpki-client