Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EFE431D7AC4BD52B0BBBADBBC45C4EF0D08D62C7764D4877EB4D3353A4CD08D7/0/3134332e3230322e3230302e302f32322d3234203d3e203237393833.roa
File:                     3134332e3230322e3230302e302f32322d3234203d3e203237393833.roa (raw, json)
Hash identifier:          CEcCO9BOkKhYbCGKoQ1LHSZVwrn9YXZerVThnGmGUZg=
Subject key identifier:   CC:DB:8A:62:EE:1C:97:8F:EC:51:24:D2:98:C3:64:06:F4:13:77:AF
Certificate issuer:       /CN=EFAC6BB4FFE3FA081C158895C257DC7A1F3FC8B3
Certificate serial:       24B31136C2EB1F5DC8C96ADBE463F9F4F7241AB6
Authority key identifier: EF:AC:6B:B4:FF:E3:FA:08:1C:15:88:95:C2:57:DC:7A:1F:3F:C8:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFAC6BB4FFE3FA081C158895C257DC7A1F3FC8B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFE431D7AC4BD52B0BBBADBBC45C4EF0D08D62C7764D4877EB4D3353A4CD08D7/0/3134332e3230322e3230302e302f32322d3234203d3e203237393833.roa
Signing time:             Thu 17 Sep 2026 16:35:59 +0000
ROA not before:           Thu 17 Sep 2026 16:30:59 +0000
ROA not after:            Thu 16 Sep 2027 16:35:59 +0000
asID:                     27983
IP address blocks:        143.202.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFE431D7AC4BD52B0BBBADBBC45C4EF0D08D62C7764D4877EB4D3353A4CD08D7/0/EFAC6BB4FFE3FA081C158895C257DC7A1F3FC8B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFE431D7AC4BD52B0BBBADBBC45C4EF0D08D62C7764D4877EB4D3353A4CD08D7/0/EFAC6BB4FFE3FA081C158895C257DC7A1F3FC8B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFAC6BB4FFE3FA081C158895C257DC7A1F3FC8B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b3:11:36:c2:eb:1f:5d:c8:c9:6a:db:e4:63:f9:f4:f7:24:1a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAC6BB4FFE3FA081C158895C257DC7A1F3FC8B3
        Validity
            Not Before: Sep 17 16:30:59 2026 GMT
            Not After : Sep 16 16:35:59 2027 GMT
        Subject: CN=CCDB8A62EE1C978FEC5124D298C36406F41377AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:f3:25:34:44:55:66:54:71:ef:f8:af:35:
                    b3:52:b2:36:b8:ea:38:bd:d0:b0:ef:e1:87:4c:49:
                    e1:e6:f2:41:5e:50:e2:fe:34:87:03:f9:27:79:21:
                    b6:fb:47:63:c2:63:7e:11:d4:68:90:9a:ee:1f:11:
                    cb:ac:49:e1:77:76:47:45:2c:5c:b9:c3:4d:09:8b:
                    22:11:f4:4e:e7:5d:ea:33:63:3d:ba:5d:04:ee:b6:
                    7b:51:36:45:19:1e:3f:80:ea:7c:13:99:e8:7a:e4:
                    d3:29:07:f2:a0:6c:40:86:d2:3c:cd:ea:06:6e:2a:
                    9d:2d:6f:2a:fb:ab:ed:a5:d3:66:c2:9f:0c:6b:94:
                    37:fd:2b:fe:0d:79:7c:5f:3f:cd:2e:99:2a:e8:1a:
                    ca:1f:34:37:df:46:79:74:fc:93:65:8a:1e:f5:8d:
                    72:e5:58:04:1d:85:00:27:50:16:1d:78:e8:82:49:
                    a8:6e:a6:3b:77:69:fc:19:ef:cd:b3:f6:06:ed:36:
                    c0:16:a4:d9:68:84:06:45:a0:a5:21:1a:0c:11:10:
                    ad:0a:e6:eb:c9:07:e6:b3:32:07:83:fe:01:48:f7:
                    69:58:9c:f3:24:ac:6f:48:52:7e:4f:c8:9e:84:d1:
                    f4:f3:bd:98:1d:c5:93:76:4e:17:8d:f7:15:77:38:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DB:8A:62:EE:1C:97:8F:EC:51:24:D2:98:C3:64:06:F4:13:77:AF
            X509v3 Authority Key Identifier:
                keyid:EF:AC:6B:B4:FF:E3:FA:08:1C:15:88:95:C2:57:DC:7A:1F:3F:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFE431D7AC4BD52B0BBBADBBC45C4EF0D08D62C7764D4877EB4D3353A4CD08D7/0/EFAC6BB4FFE3FA081C158895C257DC7A1F3FC8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFAC6BB4FFE3FA081C158895C257DC7A1F3FC8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFE431D7AC4BD52B0BBBADBBC45C4EF0D08D62C7764D4877EB4D3353A4CD08D7/0/3134332e3230322e3230302e302f32322d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:e1:00:b8:e6:fb:7c:a7:14:9e:36:a9:f8:f7:f3:9b:9c:5e:
         f5:42:c4:8a:19:13:67:07:7d:5d:aa:45:20:5f:4d:ac:db:ac:
         87:65:eb:13:cd:bd:aa:a2:18:74:b3:70:a9:b0:26:0c:99:f0:
         b4:37:a5:86:b5:27:30:7f:5b:c1:ea:79:a0:c8:1d:a7:40:a5:
         8c:a8:6e:69:84:a4:8f:85:8d:9a:49:4a:41:f1:97:e2:60:3a:
         80:f3:33:e0:7b:85:35:54:72:c6:2c:c9:0c:86:03:48:b7:9a:
         28:8e:4f:f9:2e:e9:91:1a:39:ec:be:e9:86:21:8b:4a:f4:ce:
         58:56:cb:fb:76:7f:53:f3:e3:17:4f:12:3c:0e:d6:2a:0e:a7:
         38:1e:7b:d7:54:f9:8c:16:8c:04:fa:97:e8:0b:9a:8e:1b:ca:
         18:8b:50:ca:bf:48:a5:8c:ef:28:eb:15:96:a6:18:87:4a:7e:
         74:64:fd:8c:2a:64:4d:ad:b9:5e:56:72:ba:a8:c3:a8:b3:1f:
         a1:89:78:e1:2c:f1:74:56:12:8c:a8:63:33:d4:bd:b2:b5:89:
         93:12:b2:5c:60:af:ef:f1:38:78:77:b8:a1:dd:d2:5b:e7:96:
         5e:50:36:91:48:62:cb:ee:ab:ae:33:d9:0c:28:0b:51:16:1e:
         a3:84:37:d7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJLMRNsLrH13IyWrb5GP59PckGrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZBQzZCQjRGRkUzRkEwODFDMTU4ODk1QzI1N0RDN0Ex
RjNGQzhCMzAeFw0yNjA5MTcxNjMwNTlaFw0yNzA5MTYxNjM1NTlaMDMxMTAvBgNV
BAMTKENDREI4QTYyRUUxQzk3OEZFQzUxMjREMjk4QzM2NDA2RjQxMzc3QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1vMlNERVZlRx7/ivNbNSsja4
6ji90LDv4YdMSeHm8kFeUOL+NIcD+Sd5Ibb7R2PCY34R1GiQmu4fEcusSeF3dkdF
LFy5w00JiyIR9E7nXeozYz26XQTutntRNkUZHj+A6nwTmeh65NMpB/KgbECG0jzN
6gZuKp0tbyr7q+2l02bCnwxrlDf9K/4NeXxfP80umSroGsofNDffRnl0/JNlih71
jXLlWAQdhQAnUBYdeOiCSahupjt3afwZ782z9gbtNsAWpNlohAZFoKUhGgwREK0K
5uvJB+azMgeD/gFI92lYnPMkrG9IUn5PyJ6E0fTzvZgdxZN2TheN9xV3OJBpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzNuKYu4cl4/sUSTSmMNkBvQTd68wHwYDVR0j
BBgwFoAU76xrtP/j+ggcFYiVwlfceh8/yLMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRkU0MzFEN0FDNEJENTJCMEJCQkFEQkJDNDVDNEVGMEQw
OEQ2MkM3NzY0RDQ4NzdFQjREMzM1M0E0Q0QwOEQ3LzAvRUZBQzZCQjRGRkUzRkEw
ODFDMTU4ODk1QzI1N0RDN0ExRjNGQzhCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRkFDNkJCNEZGRTNGQTA4MUMx
NTg4OTVDMjU3REM3QTFGM0ZDOEIzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUZFNDMxRDdBQzRCRDUyQjBCQkJBREJCQzQ1QzRFRjBEMDhENjJDNzc2
NEQ0ODc3RUI0RDMzNTNBNENEMDhENy8wLzMxMzQzMzJlMzIzMDMyMmUzMjMwMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzkzODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj8rI
MA0GCSqGSIb3DQEBCwUAA4IBAQCt4QC45vt8pxSeNqn49/ObnF71QsSKGRNnB31d
qkUgX02s26yHZesTzb2qohh0s3CpsCYMmfC0N6WGtScwf1vB6nmgyB2nQKWMqG5p
hKSPhY2aSUpB8ZfiYDqA8zPge4U1VHLGLMkMhgNIt5oojk/5LumRGjnsvumGIYtK
9M5YVsv7dn9T8+MXTxI8DtYqDqc4HnvXVPmMFowE+pfoC5qOG8oYi1DKv0iljO8o
6xWWphiHSn50ZP2MKmRNrbleVnK6qMOosx+hiXjhLPF0VhKMqGMz1L2ytYmTErJc
YK/v8Th4d7ih3dJb55ZeUDaRSGLL7quuM9kMKAtRFh6jhDfX
-----END CERTIFICATE-----
Generated at Sat Sep 19 05:45:07 2026 by rpki-client