Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3135302e302f32332d3233203d3e20323730303633.roa
File:                     3230302e38312e3135302e302f32332d3233203d3e20323730303633.roa (raw, json)
Hash identifier:          dTLeb1rPGhopxHo72alACbojcS/W7+3f4mwEq0+NbKc=
Subject key identifier:   E7:BD:9E:43:E4:0F:FE:B5:F9:C0:A0:30:14:A6:C5:76:3D:6B:73:37
Certificate issuer:       /CN=9EA657B7464CA681E408DD78432AA090F1846959
Certificate serial:       6A90B466AA87938D4EF0EA5AE81BCCBA1E3BB730
Authority key identifier: 9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3135302e302f32332d3233203d3e20323730303633.roa
Signing time:             Tue 08 Sep 2026 23:34:41 +0000
ROA not before:           Tue 08 Sep 2026 23:29:41 +0000
ROA not after:            Tue 07 Sep 2027 23:34:41 +0000
asID:                     270063
IP address blocks:        200.81.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:90:b4:66:aa:87:93:8d:4e:f0:ea:5a:e8:1b:cc:ba:1e:3b:b7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA657B7464CA681E408DD78432AA090F1846959
        Validity
            Not Before: Sep  8 23:29:41 2026 GMT
            Not After : Sep  7 23:34:41 2027 GMT
        Subject: CN=E7BD9E43E40FFEB5F9C0A03014A6C5763D6B7337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:a8:ca:30:ac:d8:57:28:aa:99:c6:0b:13:
                    13:5b:6f:23:b8:0d:6a:d2:7e:09:2e:a4:a8:b1:6a:
                    b7:c2:31:82:4e:65:35:01:74:24:43:d0:29:07:7c:
                    07:db:dc:ef:82:b2:00:7e:61:26:b8:8b:a1:f5:d4:
                    d8:a0:f6:76:ee:65:5c:db:22:34:85:8b:df:ac:2b:
                    e7:3b:95:4a:b4:06:34:ef:65:99:a1:03:e8:da:5f:
                    02:05:e6:7d:7d:25:44:da:1d:38:a9:c4:e2:cd:23:
                    41:c1:71:0a:f1:61:e0:98:b8:bc:d5:92:1f:32:d4:
                    e3:c9:1b:de:bc:03:d9:2f:c2:f2:87:3a:3d:d1:d5:
                    59:a8:46:db:14:9a:4c:23:4c:60:ae:42:77:b7:5c:
                    fa:d3:30:12:ae:eb:62:6a:b2:7b:fd:2f:f6:05:f9:
                    5d:1a:12:4e:0c:39:d5:eb:98:a1:e8:d6:2f:fd:e8:
                    17:e1:09:f7:8c:86:68:18:5b:f7:7f:b6:0e:3b:ba:
                    27:05:0f:9d:a7:d2:78:10:35:8d:a7:d4:f9:57:9a:
                    80:b5:05:68:b0:3b:3d:fb:1f:55:91:e8:18:e4:32:
                    55:05:70:b9:4e:05:12:de:58:5f:1a:bf:49:88:58:
                    68:c1:73:64:fc:63:60:71:a9:4b:cd:7e:e1:33:02:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BD:9E:43:E4:0F:FE:B5:F9:C0:A0:30:14:A6:C5:76:3D:6B:73:37
            X509v3 Authority Key Identifier:
                keyid:9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3135302e302f32332d3233203d3e20323730303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:f0:c5:f8:55:ae:d0:ab:da:16:5b:ac:d2:c1:2b:62:d8:f2:
         3b:dc:9e:ca:9e:aa:8b:89:10:75:c8:5e:68:ba:1f:49:9f:57:
         2e:65:a3:9a:09:a9:90:44:a6:7b:4a:3a:0b:c2:27:e7:de:cc:
         60:06:bd:23:1f:48:4b:61:4a:e8:2f:36:0b:fa:c7:7e:12:06:
         16:8d:18:eb:10:85:42:2c:aa:c9:8e:15:87:21:b4:f3:30:eb:
         e2:d0:4c:25:f4:a3:70:29:d4:49:38:40:72:74:99:95:08:78:
         23:ad:98:c0:4d:b3:60:5e:87:f1:a2:c9:33:ad:01:de:8c:ab:
         8d:9f:3d:08:ce:97:fc:cd:f1:30:e9:2b:9d:85:34:55:1c:a5:
         c7:58:19:13:7e:aa:50:9b:98:3d:cc:a7:4c:5c:7f:52:fb:08:
         64:9d:49:a6:36:92:a7:5e:01:94:e6:db:e0:a5:31:38:1b:80:
         1a:d9:74:67:58:4d:6e:b4:27:25:37:84:bf:b5:d6:0a:95:3a:
         df:2a:41:58:c8:3f:6d:c8:ef:d6:30:95:dc:16:df:15:62:d1:
         0a:ee:37:96:5b:bc:84:97:b2:58:65:07:5a:28:ee:e8:bb:33:
         20:14:66:98:11:c9:ed:db:d0:96:70:94:48:af:6b:46:fb:7b:
         11:21:e1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:30:08 2026 by rpki-client