Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230302e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3230302e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          hOVR8VaGQTGy1s4xQlGX6Z0ogbYPuY7Ehr/iQIE/H34=
Subject key identifier:   23:5A:BF:0E:77:BC:13:65:DA:2B:9D:DD:A6:1F:A7:37:7A:FD:6A:04
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       4FF605F425E1245A67DD1E6A3FFA82FCBD86FC57
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230302e302f32342d3234203d3e203232333133.roa
Signing time:             Sun 22 Mar 2026 13:40:02 +0000
ROA not before:           Sun 22 Mar 2026 13:35:02 +0000
ROA not after:            Sun 21 Mar 2027 13:40:02 +0000
asID:                     22313
IP address blocks:        200.35.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f6:05:f4:25:e1:24:5a:67:dd:1e:6a:3f:fa:82:fc:bd:86:fc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 22 13:35:02 2026 GMT
            Not After : Mar 21 13:40:02 2027 GMT
        Subject: CN=235ABF0E77BC1365DA2B9DDDA61FA7377AFD6A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e2:89:70:58:2c:ec:8a:f6:16:84:d3:22:9e:
                    e8:f2:63:76:67:9a:6e:f7:f9:d0:c5:ca:48:66:a6:
                    f9:14:49:17:59:d0:e3:6a:f9:f0:0a:c2:27:f7:cd:
                    a2:ed:9d:ef:60:e4:25:c0:8a:bf:af:e4:cc:e8:b8:
                    24:af:50:78:29:1d:db:f0:1f:bd:05:e5:af:ea:44:
                    63:15:70:ff:79:52:d6:77:ac:21:79:2f:c2:50:95:
                    8d:ed:8f:65:1d:79:85:c5:38:ba:96:a9:d0:c5:98:
                    0c:f0:5c:b3:52:5b:d5:39:eb:09:23:b1:20:58:a9:
                    1f:9b:bf:10:5f:ac:d8:ff:83:78:b8:84:1f:f6:58:
                    9a:22:be:a8:e0:14:47:b6:07:d7:88:77:8e:1c:10:
                    c2:01:43:91:75:04:15:58:21:84:9c:7e:5b:da:99:
                    04:ee:da:b4:4b:5a:b8:74:73:d5:1d:e0:c3:ef:76:
                    d1:05:af:ff:02:41:db:01:c0:a0:9f:91:f2:89:b6:
                    77:09:81:52:b0:f6:3a:d2:d5:ea:29:c5:7d:e0:f9:
                    35:b0:5b:6e:2c:49:9e:ba:02:d9:4e:1c:6e:b5:03:
                    09:57:07:57:cc:21:eb:d9:05:b3:40:1d:84:52:2b:
                    ed:47:e7:ec:60:ec:2a:ef:7a:9b:03:f2:36:18:9d:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5A:BF:0E:77:BC:13:65:DA:2B:9D:DD:A6:1F:A7:37:7A:FD:6A:04
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230302e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:d2:4a:40:22:59:1a:97:b6:fa:14:6e:e6:00:a0:7e:4d:35:
         0e:c5:61:10:42:55:bf:1c:84:a2:26:db:af:e8:e2:88:ea:80:
         81:28:e5:c7:05:c8:70:b1:8f:6a:80:84:7b:8c:4e:29:1c:d7:
         57:4c:80:ef:c1:80:33:bf:44:18:25:cb:78:38:3f:81:88:2e:
         f3:d8:be:e0:28:a1:3f:ff:52:39:03:d2:a6:67:de:27:6d:36:
         52:f4:a8:9b:07:a6:49:9a:e2:4c:19:d4:8a:d6:e7:32:a5:47:
         8f:60:40:0c:92:fd:71:59:b6:8e:7e:0b:04:5f:c7:31:55:10:
         83:c0:f0:1c:0b:3f:5f:f5:6d:a7:eb:cd:38:3b:a7:bf:4e:8e:
         5d:06:7d:39:22:fb:10:6c:36:4c:43:fd:e3:87:51:80:f4:a0:
         76:6a:6b:99:61:0f:3b:94:06:64:c8:f3:10:a5:62:1b:13:62:
         14:fe:fe:d9:f5:d2:d8:39:d0:e1:2d:20:e4:8a:12:65:ec:3c:
         28:2e:43:93:ec:3f:2d:95:ea:3d:4f:3e:26:d0:52:02:2c:52:
         1b:d9:e6:c6:e5:70:00:64:69:f4:ad:20:e8:8e:e8:8e:24:cc:
         0c:9b:da:06:3c:19:49:87:ac:30:20:8f:40:59:77:24:1c:2a:
         b5:85:28:e9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUT/YF9CXhJFpn3R5qP/qC/L2G/FcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NjI5QTY5NEVGNzIxN0VGM0RFNUUxMjgxMDRDMUUx
NEI0QkVCMzAeFw0yNjAzMjIxMzM1MDJaFw0yNzAzMjExMzQwMDJaMDMxMTAvBgNV
BAMTKDIzNUFCRjBFNzdCQzEzNjVEQTJCOUREREE2MUZBNzM3N0FGRDZBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi4olwWCzsivYWhNMinujyY3Zn
mm73+dDFykhmpvkUSRdZ0ONq+fAKwif3zaLtne9g5CXAir+v5MzouCSvUHgpHdvw
H70F5a/qRGMVcP95UtZ3rCF5L8JQlY3tj2UdeYXFOLqWqdDFmAzwXLNSW9U56wkj
sSBYqR+bvxBfrNj/g3i4hB/2WJoivqjgFEe2B9eId44cEMIBQ5F1BBVYIYScflva
mQTu2rRLWrh0c9Ud4MPvdtEFr/8CQdsBwKCfkfKJtncJgVKw9jrS1eopxX3g+TWw
W24sSZ66AtlOHG61AwlXB1fMIevZBbNAHYRSK+1H5+xg7CrvepsD8jYYnduRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUI1q/Dne8E2XaK53dph+nN3r9agQwHwYDVR0j
BBgwFoAUs2YpppTvchfvPeXhKBBMHhS0vrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDc2ODMxMjlDQTNFODAwRDY5QUY1RjVCMjcxQjE3NkYw
OEE3MjkyQzZDRUFGQzExMDU4REY3RUU5MTMzMTRDLzAvQjM2NjI5QTY5NEVGNzIx
N0VGM0RFNUUxMjgxMDRDMUUxNEI0QkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzY2MjlBNjk0RUY3MjE3RUYz
REU1RTEyODEwNEMxRTE0QjRCRUIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA3NjgzMTI5Q0EzRTgwMEQ2OUFGNUY1QjI3MUIxNzZGMDhBNzI5MkM2
Q0VBRkMxMTA1OERGN0VFOTEzMzE0Qy8wLzMyMzAzMDJlMzMzNTJlMzIzMDMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjMzMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgjyDAN
BgkqhkiG9w0BAQsFAAOCAQEAiNJKQCJZGpe2+hRu5gCgfk01DsVhEEJVvxyEoibb
r+jiiOqAgSjlxwXIcLGPaoCEe4xOKRzXV0yA78GAM79EGCXLeDg/gYgu89i+4Cih
P/9SOQPSpmfeJ202UvSomwemSZriTBnUitbnMqVHj2BADJL9cVm2jn4LBF/HMVUQ
g8DwHAs/X/Vtp+vNODunv06OXQZ9OSL7EGw2TEP944dRgPSgdmprmWEPO5QGZMjz
EKViGxNiFP7+2fXS2DnQ4S0g5IoSZew8KC5Dk+w/LZXqPU8+JtBSAixSG9nmxuVw
AGRp9K0g6I7ojiTMDJvaBjwZSYesMCCPQFl3JBwqtYUo6Q==
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:57:55 2026 by rpki-client