Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32342d3234203d3e20323730303633.roa
File:                     3230302e38312e3134382e302f32342d3234203d3e20323730303633.roa (raw, json)
Hash identifier:          lvrgOl4y1sbLUmWv8q4Szz3d3sPk/6U7djGL2m/DOB8=
Subject key identifier:   52:5C:27:D4:EA:AD:52:D7:01:AB:46:18:1E:12:F9:62:1C:B3:B4:E1
Certificate issuer:       /CN=9EA657B7464CA681E408DD78432AA090F1846959
Certificate serial:       46654FC10DFF78F03EC563A43D8DB3AE8BAB6901
Authority key identifier: 9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32342d3234203d3e20323730303633.roa
Signing time:             Tue 08 Sep 2026 23:34:40 +0000
ROA not before:           Tue 08 Sep 2026 23:29:40 +0000
ROA not after:            Tue 07 Sep 2027 23:34:40 +0000
asID:                     270063
IP address blocks:        200.81.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:65:4f:c1:0d:ff:78:f0:3e:c5:63:a4:3d:8d:b3:ae:8b:ab:69:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA657B7464CA681E408DD78432AA090F1846959
        Validity
            Not Before: Sep  8 23:29:40 2026 GMT
            Not After : Sep  7 23:34:40 2027 GMT
        Subject: CN=525C27D4EAAD52D701AB46181E12F9621CB3B4E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:be:df:71:b7:75:de:7b:19:f1:f0:58:7a:
                    f1:58:8b:41:d6:91:c4:95:bb:4d:a5:30:12:a5:df:
                    c8:e4:3e:70:f1:1c:31:15:25:ea:95:4e:32:c5:32:
                    3f:0f:13:62:f5:0e:0e:f9:2b:8c:de:79:a8:60:81:
                    27:7d:db:51:be:cb:b3:eb:2f:28:a7:4f:a6:9d:a7:
                    9e:ad:42:2b:72:6c:71:40:4b:97:9f:41:90:3b:7e:
                    b8:3c:6b:79:4a:e9:2c:b6:82:a4:83:b0:7a:09:11:
                    96:c1:c8:ce:42:c0:a5:69:9e:d3:c8:84:12:ac:eb:
                    d6:c5:b3:f1:14:9b:e2:9e:4b:e8:7b:52:ea:ac:24:
                    4e:0f:8b:88:e4:59:ab:c1:4c:f6:1a:75:56:c3:12:
                    f9:d9:02:ee:09:7e:ab:8c:58:69:9d:7c:a6:97:fb:
                    06:c0:04:fa:54:91:68:17:3d:65:2e:53:ef:a2:f0:
                    ae:fe:56:1d:f7:50:f5:5d:f0:6d:7f:c0:99:42:20:
                    c2:d0:17:a7:2c:0b:63:c0:a7:38:79:2e:9b:47:78:
                    3d:f4:db:cc:37:85:78:9c:21:c0:34:34:3c:c1:c4:
                    ad:c7:55:84:f4:91:b7:8a:61:cf:ab:ad:bd:a2:42:
                    fb:a8:49:94:23:8b:39:64:7f:09:75:1a:eb:c9:46:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5C:27:D4:EA:AD:52:D7:01:AB:46:18:1E:12:F9:62:1C:B3:B4:E1
            X509v3 Authority Key Identifier:
                keyid:9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32342d3234203d3e20323730303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:15:6a:1b:5e:fd:33:e0:9e:e1:86:03:86:ed:22:5c:62:34:
         5a:22:48:aa:05:80:f2:8a:f9:dd:9c:5e:62:48:a1:d5:c9:70:
         a9:9c:14:1a:f0:dc:47:2b:d1:2e:98:68:24:49:09:68:96:b3:
         41:be:5e:d6:16:f4:3f:7d:61:98:45:42:e2:8d:a0:4d:1d:1f:
         35:d5:6d:23:4c:92:fe:61:97:b3:22:98:cf:20:5a:e6:77:7c:
         b6:34:34:33:43:b0:7f:53:aa:e7:97:18:4d:7c:46:50:3c:0b:
         0e:00:7e:dc:b6:81:e5:36:f2:2e:9c:37:0c:7d:3b:d7:a2:fc:
         ae:b1:62:0f:5e:46:eb:25:f8:f7:86:40:6e:0a:b9:74:03:1e:
         56:6d:94:ad:5b:e2:2b:36:c4:b1:13:e0:47:80:4f:dd:43:64:
         4f:1c:cf:7a:1d:f0:a9:5a:95:e8:0e:fd:9c:b1:52:34:80:24:
         16:44:92:c7:4a:2b:a1:29:76:fd:19:3f:53:41:79:36:ca:ac:
         fe:1f:38:22:26:f7:8b:6a:0a:4b:5f:bf:b1:87:d1:a9:d9:a4:
         37:66:7b:91:9b:1d:74:fe:cc:7a:e7:e7:f2:36:63:89:96:aa:
         38:da:c3:e2:f2:d4:9c:dc:62:4c:f5:b6:a6:80:ca:23:7e:db:
         94:e7:1f:58
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURmVPwQ3/ePA+xWOkPY2zrouraQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVBNjU3Qjc0NjRDQTY4MUU0MDhERDc4NDMyQUEwOTBG
MTg0Njk1OTAeFw0yNjA5MDgyMzI5NDBaFw0yNzA5MDcyMzM0NDBaMDMxMTAvBgNV
BAMTKDUyNUMyN0Q0RUFBRDUyRDcwMUFCNDYxODFFMTJGOTYyMUNCM0I0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDb7fcbd13nsZ8fBYevFYi0HW
kcSVu02lMBKl38jkPnDxHDEVJeqVTjLFMj8PE2L1Dg75K4zeeahggSd921G+y7Pr
LyinT6adp56tQitybHFAS5efQZA7frg8a3lK6Sy2gqSDsHoJEZbByM5CwKVpntPI
hBKs69bFs/EUm+KeS+h7UuqsJE4Pi4jkWavBTPYadVbDEvnZAu4JfquMWGmdfKaX
+wbABPpUkWgXPWUuU++i8K7+Vh33UPVd8G1/wJlCIMLQF6csC2PApzh5LptHeD30
28w3hXicIcA0NDzBxK3HVYT0kbeKYc+rrb2iQvuoSZQjizlkfwl1GuvJRhDXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUUlwn1OqtUtcBq0YYHhL5YhyztOEwHwYDVR0j
BBgwFoAUnqZXt0ZMpoHkCN14QyqgkPGEaVkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FM0YzMkUyM0IxOTVCODRGNjcxN0M1QkVGRUM1RTk3NTkx
ODgwNDRCMjlBRkI1NEEwNkQzODQxQTNFNTYzQkMxLzAvOUVBNjU3Qjc0NjRDQTY4
MUU0MDhERDc4NDMyQUEwOTBGMTg0Njk1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RUE2NTdCNzQ2NENBNjgxRTQw
OERENzg0MzJBQTA5MEYxODQ2OTU5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTNGMzJFMjNCMTk1Qjg0RjY3MTdDNUJFRkVDNUU5NzU5MTg4MDQ0QjI5
QUZCNTRBMDZEMzg0MUEzRTU2M0JDMS8wLzMyMzAzMDJlMzgzMTJlMzEzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzNjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyFGU
MA0GCSqGSIb3DQEBCwUAA4IBAQB2FWobXv0z4J7hhgOG7SJcYjRaIkiqBYDyivnd
nF5iSKHVyXCpnBQa8NxHK9EumGgkSQlolrNBvl7WFvQ/fWGYRULijaBNHR811W0j
TJL+YZezIpjPIFrmd3y2NDQzQ7B/U6rnlxhNfEZQPAsOAH7ctoHlNvIunDcMfTvX
ovyusWIPXkbrJfj3hkBuCrl0Ax5WbZStW+IrNsSxE+BHgE/dQ2RPHM96HfCpWpXo
Dv2csVI0gCQWRJLHSiuhKXb9GT9TQXk2yqz+HzgiJveLagpLX7+xh9Gp2aQ3ZnuR
mx10/sx65+fyNmOJlqo42sPi8tSc3GJM9bamgMojftuU5x9Y
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:33:07 2026 by rpki-client