Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3135302e302f32342d3234203d3e20323730303633.roa
File:                     3230302e38312e3135302e302f32342d3234203d3e20323730303633.roa (raw, json)
Hash identifier:          Oi0lVO7kSrarcH9G4/vUjZpCVajxVFcJn7BWFt70r0c=
Subject key identifier:   46:D3:9A:EF:B3:6C:DA:0A:83:98:42:61:B9:D0:B0:D6:F2:01:FB:D6
Certificate issuer:       /CN=9EA657B7464CA681E408DD78432AA090F1846959
Certificate serial:       5884E4D4D471C7FCB5BEB0B77CA2CCA7923AE836
Authority key identifier: 9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3135302e302f32342d3234203d3e20323730303633.roa
Signing time:             Tue 08 Sep 2026 23:34:41 +0000
ROA not before:           Tue 08 Sep 2026 23:29:41 +0000
ROA not after:            Tue 07 Sep 2027 23:34:41 +0000
asID:                     270063
IP address blocks:        200.81.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:84:e4:d4:d4:71:c7:fc:b5:be:b0:b7:7c:a2:cc:a7:92:3a:e8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA657B7464CA681E408DD78432AA090F1846959
        Validity
            Not Before: Sep  8 23:29:41 2026 GMT
            Not After : Sep  7 23:34:41 2027 GMT
        Subject: CN=46D39AEFB36CDA0A83984261B9D0B0D6F201FBD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e5:46:b6:bd:d3:46:19:79:e1:50:f4:68:f2:
                    4c:73:8f:2c:ef:94:88:6b:a8:40:f9:70:f7:a8:46:
                    14:75:0f:a9:87:bd:8b:aa:b7:92:c6:22:f5:10:42:
                    83:ed:87:16:59:a9:c6:fc:1a:1f:5a:75:ce:b7:d5:
                    3a:9a:22:7f:4c:89:f8:19:f8:b9:50:ff:bd:60:53:
                    ef:6e:d3:ba:26:48:1d:62:97:b7:af:89:4f:8e:84:
                    08:75:e2:3a:ad:d0:2c:0e:c5:db:3c:75:eb:a0:05:
                    c4:87:b5:82:14:9b:f0:1d:d3:8d:58:55:aa:27:f9:
                    e3:0b:24:b7:c6:c9:db:da:32:c0:6d:f0:a6:96:1f:
                    15:51:89:70:7a:91:f7:8e:d5:dd:f8:3c:6e:f9:4b:
                    f1:e5:6e:2a:75:0c:06:3c:11:8a:df:48:cd:99:d7:
                    88:f0:8b:e1:98:ad:e4:44:11:f3:95:fd:0b:ce:32:
                    be:1f:89:03:7c:8a:4f:03:63:22:2a:05:d8:8b:f0:
                    34:38:b2:69:07:f0:88:18:9a:59:cb:fb:7b:73:d9:
                    16:66:ab:2a:6c:1c:17:a4:66:f2:73:05:77:a5:67:
                    0e:0f:50:4a:a6:3c:e8:29:5d:6e:8e:96:a4:ae:16:
                    97:a8:de:d1:9c:5e:ba:4e:25:f9:7b:ee:15:e5:51:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D3:9A:EF:B3:6C:DA:0A:83:98:42:61:B9:D0:B0:D6:F2:01:FB:D6
            X509v3 Authority Key Identifier:
                keyid:9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3135302e302f32342d3234203d3e20323730303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:61:d4:f8:c3:b2:66:74:65:02:42:67:1b:80:9c:4b:9a:86:
         cb:0b:34:4c:22:6c:04:2f:14:89:60:94:13:aa:5f:e6:92:87:
         96:07:71:e2:7a:09:36:37:b7:b8:8c:6c:24:dd:63:f1:c9:9e:
         4b:32:d4:b6:4e:4a:65:af:62:2b:92:df:69:cd:ef:1b:9b:7b:
         91:e6:75:db:4f:74:95:a1:ba:b9:73:99:90:ac:d3:1c:76:7b:
         ee:ff:94:58:5b:26:5b:16:da:4a:aa:ff:79:0a:52:7a:95:b7:
         0d:6d:d7:65:1d:65:8c:7c:fc:d2:6c:ad:3a:54:57:76:7a:06:
         d5:2a:97:d2:0d:1e:ed:a1:51:ee:22:e3:4d:07:e9:b3:5b:f8:
         e1:67:6c:06:09:05:d7:3b:ca:89:60:7e:63:5b:7c:bf:35:b9:
         a6:5b:59:60:04:5b:12:f8:c3:a2:cf:20:b9:8e:2d:c5:cb:b3:
         6f:6b:6f:f6:60:78:70:31:4b:2f:96:00:3e:da:1c:47:3f:66:
         92:19:5f:b8:e1:43:b0:f8:90:79:33:92:d9:17:02:77:98:27:
         8a:dc:e7:2f:82:87:d5:d2:7d:77:08:39:36:37:17:12:4f:53:
         4e:8e:4a:38:d0:05:d9:49:e3:ae:ce:28:51:00:66:10:23:6a:
         0c:94:a9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:30:41 2026 by rpki-client