Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e372e302f32342d3234203d3e203138363738.roa
File:                     3230302e32342e372e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          ZC5yEKcfYthlNQWx3g3qQXAaImk/fXOYUJculnUgu2o=
Subject key identifier:   AB:76:6B:96:97:AB:A4:2B:87:C8:CB:15:57:B7:FE:55:25:CB:30:F5
Certificate issuer:       /CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
Certificate serial:       632C14D35E6EDF6D085DE5ABF83C594D7EA831F8
Authority key identifier: 8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e372e302f32342d3234203d3e203138363738.roa
Signing time:             Wed 22 Apr 2026 19:55:01 +0000
ROA not before:           Wed 22 Apr 2026 19:50:01 +0000
ROA not after:            Wed 21 Apr 2027 19:55:01 +0000
asID:                     18678
IP address blocks:        200.24.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 13:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2c:14:d3:5e:6e:df:6d:08:5d:e5:ab:f8:3c:59:4d:7e:a8:31:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3
        Validity
            Not Before: Apr 22 19:50:01 2026 GMT
            Not After : Apr 21 19:55:01 2027 GMT
        Subject: CN=AB766B9697ABA42B87C8CB1557B7FE5525CB30F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:08:80:58:26:79:d1:33:b0:c4:c7:1e:1a:
                    4b:d0:c1:57:f2:9f:9f:8e:94:53:a3:f3:e9:e9:ff:
                    6e:da:05:04:eb:31:c4:71:2d:f1:4c:38:83:50:4f:
                    b8:ba:43:e8:2b:05:13:de:7a:34:dd:fd:e4:c8:d5:
                    99:a8:8f:1e:37:47:34:ab:6b:b8:61:41:84:88:e2:
                    02:6f:e1:c3:e3:18:a2:0f:69:23:c5:08:1e:45:77:
                    10:5d:f2:f8:7e:e7:26:5f:e1:8e:3c:65:b0:14:75:
                    b8:91:86:3f:f9:27:de:2c:ae:5c:5c:cc:8b:4d:dd:
                    0d:44:d6:18:8a:07:14:b6:37:1f:cb:98:98:cc:09:
                    eb:92:d5:37:92:d1:da:9a:cd:c7:3a:b1:85:8c:1e:
                    54:7c:f4:fe:4e:13:fd:cd:8b:1a:27:2f:6b:65:ea:
                    2a:1f:b8:6c:34:1c:9e:2e:da:e3:f8:23:6b:1c:95:
                    fb:37:6d:09:48:16:8d:6d:7e:25:d2:a7:20:be:a4:
                    c5:2e:27:dc:d9:7b:1f:54:37:29:8b:71:d5:4c:51:
                    6e:d8:e7:b7:01:41:e1:d4:b5:93:23:fa:c4:b5:39:
                    a8:78:f6:b2:be:fe:72:a1:82:f5:6e:74:61:f5:88:
                    46:a4:51:dc:3d:3b:1b:ed:05:3c:2c:81:d9:cf:4c:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:76:6B:96:97:AB:A4:2B:87:C8:CB:15:57:B7:FE:55:25:CB:30:F5
            X509v3 Authority Key Identifier:
                keyid:8D:E9:F0:35:F8:B1:6D:1E:98:B9:19:B4:EF:C7:39:78:A3:A2:E8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DE9F035F8B16D1E98B919B4EFC73978A3A2E8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF33D90979A9AF31478BAFC4BB73FA25998A70919EDF187E81540C8ABF142897/0/3230302e32342e372e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:3a:2b:e7:c2:c1:31:4b:98:db:7c:1a:ea:9f:4d:2b:a9:fd:
         07:08:d2:00:dc:f4:1d:72:25:6b:6f:2e:f7:b8:1c:cd:f5:5d:
         55:0a:1b:e6:1a:52:1f:60:4b:a6:89:da:d4:5d:9a:ec:11:dc:
         dc:27:df:51:8b:2f:12:3f:9d:bd:38:b0:02:e9:8a:29:b6:58:
         50:73:30:d2:db:17:10:4b:e3:38:8d:6c:87:11:f2:12:df:ff:
         f6:c1:db:fe:83:b1:79:47:43:b0:d0:6a:c1:61:47:c3:8e:60:
         4a:be:0b:06:61:c1:b7:49:dc:63:ac:6a:dd:58:77:f5:6e:33:
         1c:ff:90:a8:58:aa:bd:cc:d1:b6:36:a0:27:60:90:62:44:e9:
         ce:c6:20:65:1d:4c:c3:b0:78:51:f5:c3:20:1b:23:a8:27:49:
         7e:ea:f3:68:92:02:ce:2e:e7:2c:af:f8:c1:5d:68:78:28:8f:
         7e:d6:7a:a6:d3:6e:45:25:b0:41:91:7b:75:52:59:8f:4e:45:
         5a:45:81:05:df:03:b9:e2:44:21:37:18:21:ca:b2:8e:b7:a8:
         ce:03:a8:bc:f9:1f:c4:b8:12:d8:67:2a:01:4c:0f:b9:de:b5:
         a0:e5:84:b6:0b:28:c6:98:94:25:a9:92:40:8c:e1:49:f4:55:
         cb:bd:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:23:30 2026 by rpki-client