Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32322d3232203d3e20323730303633.roa
File:                     3230302e38312e3134382e302f32322d3232203d3e20323730303633.roa (raw, json)
Hash identifier:          7N1Iv2fETdQJ0TyopPZN5wJzvUI85D2etMrWmiTeBCU=
Subject key identifier:   3A:6E:C8:C4:AA:6C:96:A5:A6:7C:5B:0F:0C:8E:95:4C:3F:39:C5:60
Certificate issuer:       /CN=9EA657B7464CA681E408DD78432AA090F1846959
Certificate serial:       717773CC195E981E71577CE20CEE0F5B44B7B892
Authority key identifier: 9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32322d3232203d3e20323730303633.roa
Signing time:             Tue 08 Sep 2026 23:34:40 +0000
ROA not before:           Tue 08 Sep 2026 23:29:40 +0000
ROA not after:            Tue 07 Sep 2027 23:34:40 +0000
asID:                     270063
IP address blocks:        200.81.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:77:73:cc:19:5e:98:1e:71:57:7c:e2:0c:ee:0f:5b:44:b7:b8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA657B7464CA681E408DD78432AA090F1846959
        Validity
            Not Before: Sep  8 23:29:40 2026 GMT
            Not After : Sep  7 23:34:40 2027 GMT
        Subject: CN=3A6EC8C4AA6C96A5A67C5B0F0C8E954C3F39C560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:8e:4b:af:8d:22:af:6d:15:7c:20:9a:77:
                    05:5e:10:8b:56:6b:f8:de:5c:db:3d:b1:ef:17:61:
                    3b:99:bb:8e:ff:70:5c:c3:a0:f2:bc:3d:f5:1c:0d:
                    af:3c:8a:1c:f2:05:39:ab:e4:12:be:46:79:9b:b6:
                    41:86:6a:17:d4:28:8c:ba:98:d8:ff:b3:d9:f5:09:
                    15:36:94:4f:ed:77:f4:80:9a:53:91:0e:4c:51:74:
                    71:5e:c5:e8:66:bf:10:ff:7c:55:57:47:ad:83:77:
                    e6:43:8c:da:8e:0e:44:5f:4d:ae:dc:1e:4e:8a:6f:
                    5e:43:7d:81:d5:41:6b:54:92:a8:fa:05:d9:37:b6:
                    28:c5:32:ba:84:42:26:3d:a9:77:95:21:60:ed:ca:
                    05:c9:73:76:30:9e:1d:38:4b:55:e4:7d:9d:48:c9:
                    d5:df:df:fe:00:5f:1c:af:e1:32:09:ce:e9:69:a9:
                    91:2d:a7:0f:d7:32:06:58:cd:f0:00:0a:d9:03:ab:
                    72:fa:11:5f:d5:d2:c6:e1:5c:02:04:94:e4:4d:6e:
                    c2:d0:d1:f4:f2:f9:5f:5c:ea:3c:9e:73:11:5c:b7:
                    0d:5a:ff:42:b4:45:87:5d:cd:20:80:14:12:9b:12:
                    22:86:81:86:66:13:a4:77:b3:c8:9f:79:8b:de:16:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6E:C8:C4:AA:6C:96:A5:A6:7C:5B:0F:0C:8E:95:4C:3F:39:C5:60
            X509v3 Authority Key Identifier:
                keyid:9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32322d3232203d3e20323730303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:af:1d:a5:7a:8d:e8:82:b1:9c:ab:80:2b:89:dc:67:1a:e5:
         01:d1:1b:ed:ca:49:be:03:67:ea:d2:9d:02:4c:55:be:7b:a7:
         2c:0c:66:60:b7:7a:9f:0f:a1:23:78:6b:e1:5d:ec:c1:e7:24:
         dc:3a:31:c2:71:dd:39:86:9e:ba:d6:83:0f:74:a4:f8:e1:03:
         4e:73:00:2e:b3:ef:ce:0e:bd:05:ee:8c:f4:d5:65:ff:48:cc:
         90:59:e0:ce:f3:d5:dd:46:00:06:8f:dd:67:dc:b6:8a:54:a8:
         d9:9e:4d:15:96:51:87:c5:b9:28:6f:2c:17:d5:95:db:c8:ec:
         dc:82:fd:f7:8d:af:bf:03:ca:28:a8:e5:86:d6:bc:9f:af:72:
         ed:4a:e4:06:ab:79:da:3d:2c:9c:dc:84:86:b7:c7:8a:55:cd:
         84:c8:49:c6:69:62:96:bd:15:51:f1:41:cf:37:09:fd:be:66:
         0f:4b:46:f5:70:c8:c9:99:5f:65:c0:29:ba:23:6b:07:4f:e9:
         84:a7:73:05:89:39:3e:84:6f:3b:1a:eb:42:77:97:22:79:7d:
         44:9b:38:92:58:e9:53:53:bd:e8:ad:53:85:64:67:38:27:6f:
         4d:07:66:28:03:84:65:91:f5:ba:67:ed:6a:43:a6:dd:fd:73:
         14:c8:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:33:05 2026 by rpki-client