Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e332e302f32342d3234203d3e203138363738.roa
File:                     3230302e32342e332e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          00cxniPFTJnv8p8Rd10tGt5olPWz3r7JrkjJ93suZnc=
Subject key identifier:   23:30:6A:98:02:BF:99:F4:A2:03:20:79:F7:05:B6:E2:AC:F5:88:B5
Certificate issuer:       /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial:       4BB10FA90F9AADCA64A79237C0DE8920997E010B
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e332e302f32342d3234203d3e203138363738.roa
Signing time:             Wed 22 Apr 2026 19:55:01 +0000
ROA not before:           Wed 22 Apr 2026 19:50:01 +0000
ROA not after:            Wed 21 Apr 2027 19:55:01 +0000
asID:                     18678
IP address blocks:        200.24.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 13:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b1:0f:a9:0f:9a:ad:ca:64:a7:92:37:c0:de:89:20:99:7e:01:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
        Validity
            Not Before: Apr 22 19:50:01 2026 GMT
            Not After : Apr 21 19:55:01 2027 GMT
        Subject: CN=23306A9802BF99F4A2032079F705B6E2ACF588B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:f7:64:f4:b5:a4:51:9e:34:5b:0c:49:41:
                    48:89:ef:f8:51:03:24:a5:25:63:22:df:55:b1:68:
                    bf:4a:6a:60:02:84:21:e3:91:ef:d3:7d:64:41:f3:
                    7d:71:0b:1e:87:f6:08:9b:27:c9:58:42:e5:27:a0:
                    cd:96:86:24:53:80:ac:7c:0a:68:cc:3f:7f:32:ed:
                    47:5d:ca:5d:ca:5d:99:d6:bd:86:ac:ad:62:66:e8:
                    52:5d:ed:09:3b:a2:2f:8e:8a:b6:31:d6:0e:c6:35:
                    b2:c8:e9:5c:d1:a0:68:92:ac:be:d8:9f:da:98:c0:
                    23:46:7a:f6:3c:48:ea:18:4a:61:50:06:37:aa:bd:
                    cc:50:70:cc:7d:76:b3:17:25:f3:87:b2:bd:17:f3:
                    ee:ae:5c:2f:dc:65:7b:8e:26:18:3b:00:ae:ca:a2:
                    44:c0:4a:f6:4f:7f:26:3f:fd:6e:95:3a:09:8b:a6:
                    73:c9:9f:7e:71:61:93:a1:80:82:a6:86:48:7d:0c:
                    6b:b6:17:d0:42:0f:9f:8b:ec:c9:bb:03:20:70:97:
                    7c:80:c5:a9:f3:8c:0d:4c:ef:73:9d:05:b2:b2:fb:
                    de:71:99:e4:c6:69:66:59:b1:ef:57:4b:6d:52:d1:
                    bb:dc:f0:f8:14:ab:8e:6b:58:37:38:55:c0:9e:83:
                    02:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:30:6A:98:02:BF:99:F4:A2:03:20:79:F7:05:B6:E2:AC:F5:88:B5
            X509v3 Authority Key Identifier:
                keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e332e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:38:7b:e2:a5:e5:a8:f8:bb:7b:81:31:df:b1:3c:bc:a1:
         f7:af:97:3d:96:95:ce:6c:f3:c6:ca:5b:07:70:9e:6b:ed:2e:
         bc:a4:34:f2:08:29:ed:02:be:70:9f:8f:f8:d2:bc:cd:68:fb:
         76:45:5a:c9:8d:f0:05:eb:d3:cf:c7:2b:89:8d:96:0a:fe:1a:
         51:1a:d5:06:ce:f1:6c:61:64:9b:e1:52:2c:dc:60:01:68:ed:
         6a:6e:e2:28:93:ef:81:93:df:34:7e:3d:76:9e:dd:ba:bf:bf:
         36:c9:7d:40:ae:46:4e:8f:c2:d0:c9:b7:93:5e:ac:de:cd:00:
         fb:90:f9:1c:fb:b0:53:61:10:84:8e:2f:bc:4d:0a:cb:56:52:
         1e:4a:2b:43:18:e2:4e:12:24:8f:64:8c:b1:15:22:c9:87:cc:
         21:54:9c:e3:ef:15:31:66:b0:4d:27:5a:78:ae:e2:ed:c1:b7:
         3d:81:0c:42:a2:d7:41:09:3a:31:8b:03:9d:33:75:03:ec:4a:
         ce:7d:0f:be:84:7d:67:14:dd:39:05:21:e7:ec:46:f4:5c:ec:
         73:20:2c:56:92:cc:f8:62:f0:85:1a:38:d0:41:00:5c:ec:4b:
         c9:28:b4:b0:6f:af:0b:1b:0d:4e:83:f6:2c:5a:9f:60:67:07:
         0e:1f:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:23:30 2026 by rpki-client