Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/3230302e3132332e34302e302f32342d3234203d3e20323731383639.roa
File:                     3230302e3132332e34302e302f32342d3234203d3e20323731383639.roa (raw, json)
Hash identifier:          6gRJHgzpqvZzgwlGflfObth4mt7oZ2LV6YiOn+ID5mI=
Subject key identifier:   C9:5D:F4:CA:FA:51:FE:C6:9C:91:5F:9E:24:AB:75:89:A8:AB:33:CF
Certificate issuer:       /CN=11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA
Certificate serial:       5C26F84706757D3BCD81CD53E1ACCEC2B368C8E6
Authority key identifier: 11:CB:02:0A:EC:E3:C0:AA:F4:EE:29:7A:9A:FD:12:BE:EA:62:65:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/3230302e3132332e34302e302f32342d3234203d3e20323731383639.roa
Signing time:             Thu 02 Jul 2026 17:25:01 +0000
ROA not before:           Thu 02 Jul 2026 17:20:01 +0000
ROA not after:            Thu 01 Jul 2027 17:25:01 +0000
asID:                     271869
IP address blocks:        200.123.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:26:f8:47:06:75:7d:3b:cd:81:cd:53:e1:ac:ce:c2:b3:68:c8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA
        Validity
            Not Before: Jul  2 17:20:01 2026 GMT
            Not After : Jul  1 17:25:01 2027 GMT
        Subject: CN=C95DF4CAFA51FEC69C915F9E24AB7589A8AB33CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c5:30:4d:dc:a7:97:97:73:f3:86:81:61:71:
                    df:74:8d:32:7f:4e:d4:40:bd:73:c6:4d:4d:fb:ab:
                    0a:01:92:2c:9a:9b:e5:08:2f:f0:4f:ba:ab:c5:be:
                    5d:c9:3c:44:ed:ce:00:15:47:92:4a:f5:de:7f:0c:
                    34:d4:2b:eb:15:dd:6e:b0:4e:3d:4a:cd:e6:dc:de:
                    35:e5:2d:43:4d:7f:5d:49:67:22:ac:3a:23:69:d1:
                    ac:c2:0e:fb:ef:f5:cb:1d:0d:d8:93:2c:9a:68:b7:
                    73:6d:9c:2d:02:9b:5c:a1:43:b0:60:9a:5a:01:80:
                    96:ac:32:a5:35:2b:b7:4a:ce:43:c6:6d:21:c1:9e:
                    b1:47:15:6c:87:1d:0f:f7:09:2c:51:5b:88:f7:d0:
                    31:15:4f:d3:d2:ed:b9:c6:58:2b:72:dd:78:88:ae:
                    e4:d1:52:09:59:3a:1e:0a:f0:b1:d1:05:4f:99:08:
                    11:01:64:3c:95:b3:11:a9:22:0e:25:60:99:56:07:
                    61:3c:bc:bc:42:b4:e4:1d:b5:c8:16:56:20:39:5d:
                    1b:d1:fc:35:f9:36:ab:f3:67:e5:63:0e:41:9b:5f:
                    1a:eb:6c:9f:95:a8:b0:6e:4c:9e:d3:13:3b:07:de:
                    43:0d:eb:2d:c1:23:f1:9d:90:bf:38:93:3f:5b:da:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5D:F4:CA:FA:51:FE:C6:9C:91:5F:9E:24:AB:75:89:A8:AB:33:CF
            X509v3 Authority Key Identifier:
                keyid:11:CB:02:0A:EC:E3:C0:AA:F4:EE:29:7A:9A:FD:12:BE:EA:62:65:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/3230302e3132332e34302e302f32342d3234203d3e20323731383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:07:a3:d8:74:a6:e3:ea:b9:25:fc:24:0e:f5:60:c7:92:8f:
         c0:74:75:a1:1b:ce:36:f0:cc:7f:4e:20:99:79:61:87:c0:1e:
         89:17:e8:e3:dc:2e:f9:2f:10:59:d5:8c:5e:be:6d:dc:ab:8a:
         66:32:85:8d:07:8d:01:a0:42:07:22:ee:1c:f6:20:b1:5c:1b:
         ba:08:78:c6:9d:2d:c6:23:10:73:09:f2:dc:0a:b0:6d:67:5b:
         0f:62:6f:37:17:36:1a:78:02:dc:46:ad:e7:8e:f6:ef:75:c9:
         1c:a7:68:ca:cd:ed:b6:1a:53:3b:a7:75:57:41:ac:6c:42:eb:
         4b:c4:cd:51:7e:d4:40:8f:c3:7a:1c:56:4c:93:c7:fb:42:eb:
         d9:84:c5:92:03:a8:3a:00:07:18:a3:48:22:87:2b:f5:02:8c:
         94:9a:ef:ef:93:64:6f:a3:55:57:e3:6c:11:5b:0b:0e:a3:6e:
         dc:74:ef:74:57:e3:b3:60:8a:b1:48:38:7b:4c:67:7f:e2:58:
         7e:eb:5c:53:ca:51:81:1c:1f:9e:eb:bb:1d:1e:42:67:ea:fa:
         21:d7:33:40:d6:2c:36:0d:ce:fc:8e:a6:0c:63:02:33:d3:48:
         83:6e:70:a1:cf:11:5e:ca:fc:46:33:58:1d:30:d9:85:b3:1d:
         8e:7d:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 07:45:41 2026 by rpki-client