Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e352e302f32342d3234203d3e203138363738.roa
File:                     3230302e32342e352e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          dfXnOLM3KXWXzS14RiZ6MUOkZm9lqzrhusiAx2ZRr6c=
Subject key identifier:   88:05:10:38:B1:EF:FE:94:0F:A7:77:06:D0:CA:98:22:65:9C:59:95
Certificate issuer:       /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial:       25552D7F87B6305E623A5A615A413B769D32D538
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e352e302f32342d3234203d3e203138363738.roa
Signing time:             Wed 22 Apr 2026 19:55:01 +0000
ROA not before:           Wed 22 Apr 2026 19:50:01 +0000
ROA not after:            Wed 21 Apr 2027 19:55:01 +0000
asID:                     18678
IP address blocks:        200.24.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 13:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:55:2d:7f:87:b6:30:5e:62:3a:5a:61:5a:41:3b:76:9d:32:d5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
        Validity
            Not Before: Apr 22 19:50:01 2026 GMT
            Not After : Apr 21 19:55:01 2027 GMT
        Subject: CN=88051038B1EFFE940FA77706D0CA9822659C5995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:f6:9a:7f:c6:d5:00:1c:df:8f:82:42:35:
                    a4:e2:29:a0:25:65:c2:95:4f:51:0d:7d:92:ae:45:
                    9a:12:04:30:9b:82:d7:00:d7:c5:41:39:41:83:b1:
                    60:7b:c3:21:94:4f:e8:09:de:f2:bc:a8:3f:df:d1:
                    35:17:67:2d:29:2d:e3:c7:d9:a3:89:44:42:05:51:
                    03:29:ea:8a:14:74:de:96:6d:5a:01:85:d3:34:06:
                    c3:f5:40:68:a0:2a:95:c3:dd:43:48:52:fc:df:5c:
                    06:a2:06:e7:ee:df:8b:2e:ef:07:25:a5:56:9b:5d:
                    43:79:6b:3d:d1:e2:fa:01:c9:70:0d:41:51:86:16:
                    7c:4d:9a:b4:92:39:ce:35:55:cb:90:47:3a:af:8b:
                    b0:8d:aa:f1:ac:4a:eb:07:eb:93:28:7d:08:35:dc:
                    50:84:57:e7:60:6a:ad:77:e0:1c:1f:9a:78:42:d8:
                    1b:da:64:d1:b1:d0:da:be:74:8d:84:3a:8c:53:9d:
                    ae:c7:ab:dc:1e:5f:5f:eb:c1:c2:2a:96:c3:d5:f9:
                    89:a9:ff:1c:47:0e:d0:15:b6:35:68:40:fd:10:e1:
                    4a:b5:98:85:6a:4a:05:06:cd:e5:63:54:07:fb:25:
                    8e:f3:fd:79:92:ad:34:2d:19:48:9c:36:65:16:72:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:05:10:38:B1:EF:FE:94:0F:A7:77:06:D0:CA:98:22:65:9C:59:95
            X509v3 Authority Key Identifier:
                keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e352e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:05:2e:08:5c:15:47:ff:ba:1d:37:18:7b:83:fd:8e:2a:
         76:7e:fe:13:67:8a:c4:1d:ac:b5:e2:c2:d5:6e:15:e1:e3:87:
         f1:c6:9f:5f:40:8a:96:71:81:e8:71:c3:1b:96:46:f6:33:93:
         a7:68:bf:04:ae:b8:b2:57:9d:3e:23:f4:2e:0d:53:12:2b:b8:
         fd:20:1a:72:4e:c0:44:07:90:ba:cb:ec:df:8f:81:7c:57:70:
         c9:c1:68:8e:c1:56:2d:8a:d5:ee:12:5f:a2:1e:52:8a:67:4f:
         8b:1b:7d:4a:b6:02:81:3c:4c:5e:60:f9:fd:4a:69:3f:fa:76:
         b1:78:b2:20:3b:e1:8e:87:ec:94:d4:3c:d8:24:df:4a:92:c4:
         11:90:00:bb:46:73:2c:d5:6e:f6:cb:bf:e9:a8:8b:4e:0f:2d:
         9d:75:f0:f3:cd:59:6a:ff:43:74:28:8f:aa:be:b1:2d:b5:7d:
         fa:4b:96:60:b8:ee:2f:3b:f1:80:f9:bf:28:e5:4e:e1:7e:5d:
         9c:55:46:b7:40:af:2a:90:e2:23:19:17:12:21:40:1b:42:05:
         2a:63:66:47:83:50:dd:ca:20:f3:75:bb:5f:33:f8:a4:95:66:
         84:6f:a5:3f:36:16:e4:42:b9:3c:01:ae:7d:8f:ff:e1:08:e4:
         dc:c1:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:23:30 2026 by rpki-client