Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230382e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3230382e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          +8weJGfbq8JPWtycfbAk0aROLNkM94AVsm08oA6NJcU=
Subject key identifier:   08:3F:BA:0A:7B:46:8B:55:E7:AB:8E:70:68:D6:98:DC:74:0C:7C:F0
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       3621E843713517589CC1561EB952B8B1DB1B517F
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230382e302f32342d3234203d3e203232333133.roa
Signing time:             Sun 22 Mar 2026 13:40:01 +0000
ROA not before:           Sun 22 Mar 2026 13:35:01 +0000
ROA not after:            Sun 21 Mar 2027 13:40:01 +0000
asID:                     22313
IP address blocks:        200.35.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:21:e8:43:71:35:17:58:9c:c1:56:1e:b9:52:b8:b1:db:1b:51:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 22 13:35:01 2026 GMT
            Not After : Mar 21 13:40:01 2027 GMT
        Subject: CN=083FBA0A7B468B55E7AB8E7068D698DC740C7CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:b6:f2:9b:89:cb:d0:67:ce:74:47:9d:db:
                    a1:f6:06:28:da:cd:5e:0f:90:2b:11:4b:4a:90:46:
                    6a:62:5c:0d:6e:c2:9a:e3:be:52:82:33:9a:26:5f:
                    8a:33:76:b7:e9:60:7a:22:4c:1d:4b:9a:e9:39:b3:
                    d4:e8:b4:6b:e9:66:ab:4b:bb:9a:40:d8:df:9a:92:
                    da:2b:da:ab:82:bd:44:2f:bf:86:24:48:34:0c:16:
                    ec:40:cb:f3:3a:17:e1:86:a7:3c:d0:fe:2f:65:35:
                    88:f4:35:3c:ac:14:79:a4:82:42:56:d1:0a:60:9e:
                    c6:97:99:8b:c3:bd:c6:25:23:3d:c1:d4:af:46:11:
                    14:f6:0a:9d:e6:55:83:6c:3c:48:9b:8c:8a:4d:94:
                    ba:f3:c2:ab:df:55:f9:22:30:5e:46:ff:50:6e:84:
                    19:5d:0f:19:42:47:38:d0:0b:2f:28:bd:1c:50:19:
                    74:3f:31:4f:00:e3:b9:86:58:8a:84:ba:a9:49:8d:
                    7b:0c:c5:36:42:a5:ca:5f:f7:82:aa:74:db:50:80:
                    75:7d:bc:37:6a:2a:b5:cc:d0:42:6a:a8:59:4f:f7:
                    66:a1:a7:ea:3f:c2:86:c7:13:50:bc:d5:ba:48:d3:
                    8a:c0:e1:a7:74:af:20:2b:b3:68:80:1c:42:4e:36:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3F:BA:0A:7B:46:8B:55:E7:AB:8E:70:68:D6:98:DC:74:0C:7C:F0
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230382e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:cc:dd:00:28:3e:93:e9:8b:3f:b6:3b:46:64:98:8d:fd:d6:
         6b:c8:e9:a9:0e:b2:66:20:d5:a3:f3:bb:e8:82:c3:c5:f8:11:
         4e:5f:21:b9:a5:65:96:00:80:f0:5d:cc:66:ea:d3:07:68:42:
         09:d3:c4:46:60:be:4d:36:1a:04:b4:f8:2b:bf:ed:42:bb:cb:
         96:b7:7a:8d:1d:f6:ef:e6:89:2c:1a:5e:91:9c:7c:af:07:6b:
         57:4a:e8:60:8b:32:1c:55:fa:df:93:4a:e5:8d:73:27:fb:b0:
         eb:e9:74:6b:e5:c3:de:03:f6:a9:36:de:6f:d7:45:ce:1e:48:
         62:61:ec:a2:c7:7f:6d:c8:30:39:74:39:c3:72:97:79:9f:d3:
         46:d5:0c:3a:ae:d4:69:6a:6f:2c:a1:31:6d:24:a3:5b:59:cf:
         76:c8:58:5b:d3:a7:ee:3c:bd:d0:08:5c:9d:4a:98:e2:61:f7:
         f4:b0:27:fa:0f:63:0c:37:51:c1:35:04:e9:b3:e6:4d:d3:db:
         6f:22:3b:ac:03:9c:8b:4f:41:c4:61:0d:a2:23:67:be:2a:87:
         de:f8:ab:f2:42:77:77:44:04:a9:c3:34:20:38:bb:20:af:34:
         f7:00:79:f4:23:7f:cf:80:64:59:1b:6c:d3:4c:39:da:8b:41:
         48:f7:89:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:00:42 2026 by rpki-client