Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230312e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3230312e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          VlO7jSfT74Lek4UlgB7yMaVLli8sLzrnlaHDhEnzNFY=
Subject key identifier:   65:9F:61:C9:24:97:FC:C7:BF:AC:34:60:A9:D9:7C:1D:25:DF:E4:C2
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       27C240B267D05F6963E293386C67F242CF7AC393
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230312e302f32342d3234203d3e203232333133.roa
Signing time:             Sun 22 Mar 2026 13:40:03 +0000
ROA not before:           Sun 22 Mar 2026 13:35:03 +0000
ROA not after:            Sun 21 Mar 2027 13:40:03 +0000
asID:                     22313
IP address blocks:        200.35.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c2:40:b2:67:d0:5f:69:63:e2:93:38:6c:67:f2:42:cf:7a:c3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 22 13:35:03 2026 GMT
            Not After : Mar 21 13:40:03 2027 GMT
        Subject: CN=659F61C92497FCC7BFAC3460A9D97C1D25DFE4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3a:cd:66:2e:91:df:b5:01:63:96:80:d2:03:
                    05:72:45:a2:78:ad:77:4c:18:2b:50:19:54:8b:11:
                    bb:06:0a:23:72:c4:c8:02:4e:8e:7d:a7:00:2d:a6:
                    c5:d4:7d:e3:d8:02:c4:46:f3:a2:56:f7:50:f2:f8:
                    8c:53:5f:1c:00:81:68:de:10:c8:2a:3e:1b:f7:75:
                    55:1a:74:70:ae:4b:a8:e8:ce:1e:24:d4:23:d9:2f:
                    8e:c7:cb:82:68:97:e2:2a:a3:a4:fb:e5:c4:11:56:
                    df:1a:ce:a5:f2:11:a2:ee:44:c4:a9:b2:dd:10:d9:
                    a7:3a:ca:2b:ac:48:31:92:b9:68:1e:bc:1e:af:ee:
                    b5:f8:ce:15:6e:90:46:ee:80:14:4c:4e:4d:4a:33:
                    9b:f5:f1:cf:fb:93:97:11:7a:37:c2:21:86:b3:8b:
                    c7:28:a0:d6:61:0e:10:41:ad:ad:6a:de:27:08:19:
                    cd:be:5f:28:cd:8e:be:15:cd:a5:e1:67:79:85:66:
                    6f:9f:db:a5:31:ec:43:b0:a4:c5:5c:17:3d:9d:5f:
                    f3:48:7c:e5:94:d7:d5:bc:75:49:95:f2:fc:f5:55:
                    15:42:35:81:9a:35:02:ca:15:68:51:82:ed:fa:1b:
                    31:5c:3f:ce:c8:8a:33:3f:3b:62:63:c4:79:4f:70:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9F:61:C9:24:97:FC:C7:BF:AC:34:60:A9:D9:7C:1D:25:DF:E4:C2
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230312e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:fc:d8:52:c0:52:7c:61:96:08:6c:bb:7c:03:ce:a6:8f:
         19:55:0d:3f:0c:87:7f:4e:99:56:80:7f:9b:3c:8e:2e:32:1c:
         17:bf:19:43:98:2d:5a:a0:64:d5:62:f9:47:3f:aa:07:f5:a1:
         93:43:67:47:c7:2d:28:68:67:2a:71:6d:36:59:82:dd:be:0e:
         f3:57:a4:d6:1c:fa:2d:b9:67:57:34:3e:ca:5f:79:aa:e9:47:
         d3:d8:15:05:02:6b:3b:be:62:b2:51:53:01:ef:20:fe:a0:87:
         ad:38:3e:7b:c4:3c:64:4b:f5:7a:19:6a:1d:65:42:e5:ee:c6:
         7b:3b:88:b8:1e:65:53:9e:10:11:d8:8b:e5:44:38:06:8b:2f:
         69:67:8b:2b:2a:1d:05:a3:ad:62:65:96:93:bf:3c:d8:f2:bc:
         4a:fa:9a:03:82:bf:ee:96:ff:3f:0d:da:b9:5b:ec:9b:72:d7:
         ea:0e:83:bd:7b:9a:a2:8b:1d:fc:1e:2d:13:dc:94:4a:d2:cd:
         17:2a:6f:09:29:c5:a9:db:6d:8b:9d:55:db:d9:9b:50:d0:d0:
         96:09:aa:90:70:c4:89:c5:1b:9c:b2:b1:86:2d:d2:f2:9e:99:
         a3:5b:3e:f4:c7:fb:87:d7:74:79:32:07:6e:73:14:8c:c3:0f:
         b6:93:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:00:42 2026 by rpki-client