Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e362e302f32342d3234203d3e203138363738.roa
File:                     3230302e32342e362e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          kusJ2qOjFBenVLKkUnrt0KGR21Y7z6JHrl9GdpawfB0=
Subject key identifier:   3D:DE:99:11:8F:4C:77:24:8C:13:FC:1C:8D:62:A4:8D:1B:B2:FE:7A
Certificate issuer:       /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial:       69D02E860C9B4F05153963922174948026D47DFA
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e362e302f32342d3234203d3e203138363738.roa
Signing time:             Wed 22 Apr 2026 19:55:02 +0000
ROA not before:           Wed 22 Apr 2026 19:50:02 +0000
ROA not after:            Wed 21 Apr 2027 19:55:02 +0000
asID:                     18678
IP address blocks:        200.24.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 13:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d0:2e:86:0c:9b:4f:05:15:39:63:92:21:74:94:80:26:d4:7d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
        Validity
            Not Before: Apr 22 19:50:02 2026 GMT
            Not After : Apr 21 19:55:02 2027 GMT
        Subject: CN=3DDE99118F4C77248C13FC1C8D62A48D1BB2FE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:2d:aa:11:b4:e3:b0:a7:f3:17:eb:22:e9:
                    e0:01:65:ef:dc:82:44:55:4d:7f:60:de:5f:13:7f:
                    59:bb:29:b4:80:eb:fc:a5:9e:71:49:c4:9f:96:36:
                    3e:10:af:25:56:96:da:b4:cb:e3:a3:46:c2:bb:71:
                    66:4b:91:d1:43:72:6f:84:c2:b2:64:f8:86:b0:38:
                    a6:b7:fb:4a:0b:e2:ad:5e:86:c5:2a:43:5a:2a:85:
                    51:a9:64:aa:71:a5:43:34:6d:ea:a3:6c:64:b8:9e:
                    0e:7d:b4:37:bf:2d:2f:af:b0:fd:4f:20:ed:fa:da:
                    18:4b:09:b9:42:53:10:85:b1:17:e2:0f:32:07:fc:
                    64:91:f0:22:d6:80:39:96:0e:ce:03:9f:c8:5c:0c:
                    b3:6a:81:9d:a0:08:37:2f:30:8f:8a:d9:2a:f3:52:
                    65:2f:6f:2e:ee:76:ce:e5:13:bc:56:92:53:cc:15:
                    a6:bb:99:a8:2e:08:86:4d:2b:b4:52:06:cd:31:59:
                    12:51:5c:5d:eb:c9:e4:58:6d:9c:d0:e3:aa:e3:e0:
                    5d:99:fc:3f:a9:be:45:03:30:85:66:fe:3d:44:e9:
                    ce:43:76:78:41:51:58:a7:b4:7f:46:b2:1c:17:4d:
                    37:64:d7:e5:dc:5a:68:b3:4c:cc:07:ad:6e:c2:b1:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DE:99:11:8F:4C:77:24:8C:13:FC:1C:8D:62:A4:8D:1B:B2:FE:7A
            X509v3 Authority Key Identifier:
                keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e362e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:d1:c3:5e:34:0b:0b:ba:e9:7a:ba:b6:95:5e:ee:d0:f8:
         db:6f:20:d3:d1:a3:e4:54:c2:4d:27:b9:5e:95:5f:6c:5b:8e:
         46:15:3a:62:6b:a3:18:73:3b:c4:4b:28:f9:ea:94:90:1b:d7:
         9f:e2:db:ed:ac:28:ef:25:65:c0:2a:5d:44:58:b7:2d:66:c7:
         91:cc:07:7f:88:f2:13:cf:ce:fc:e2:2c:f4:49:16:d4:0a:1e:
         65:ca:c6:e6:44:84:02:6e:b1:26:9e:b8:5b:4b:d1:89:4d:b3:
         6f:a9:91:06:ab:8e:7a:8a:e9:a4:36:67:91:ae:fa:75:ad:0b:
         6a:27:90:d0:6b:ec:58:b0:14:6c:10:cf:77:88:71:e0:4c:98:
         c8:3d:a1:db:87:5f:fe:66:4c:35:bb:5d:d0:90:4a:96:12:1c:
         c3:9a:c3:90:d6:76:b4:9b:f7:a3:9b:73:6b:26:97:df:19:25:
         f7:8d:35:b8:63:2e:6e:f4:6c:64:00:56:aa:20:25:8b:ff:da:
         5c:a5:bd:f6:e6:56:e7:aa:cf:68:36:ae:96:b9:b3:30:7b:3b:
         ad:75:f5:d4:e4:fa:2e:f4:78:c3:d2:64:20:a3:90:86:85:1b:
         36:12:8d:19:8e:c2:c3:bb:51:0a:67:4b:17:25:eb:07:22:5a:
         3e:8b:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:23:30 2026 by rpki-client