Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139372e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3139372e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          hvIpxzkwjToQWkLI1xmwPZHucflaN5l21aDjptpMT60=
Subject key identifier:   F6:61:58:DB:39:F2:78:67:BF:ED:AA:05:5D:D6:12:21:24:3C:F5:83
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       2A73CE5A6971C72B6999E326B36EF0D9C1F61EEC
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139372e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:18 +0000
ROA not before:           Mon 07 Sep 2026 22:29:18 +0000
ROA not after:            Mon 06 Sep 2027 22:34:18 +0000
asID:                     41347
IP address blocks:        200.13.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:73:ce:5a:69:71:c7:2b:69:99:e3:26:b3:6e:f0:d9:c1:f6:1e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:18 2026 GMT
            Not After : Sep  6 22:34:18 2027 GMT
        Subject: CN=F66158DB39F27867BFEDAA055DD61221243CF583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:72:92:96:49:bf:11:67:d3:99:ae:4a:e7:
                    b6:85:2a:8b:d7:34:e1:b4:56:3d:6c:4c:be:00:a0:
                    93:08:47:f9:8e:5b:02:c3:a5:3a:f0:a6:2e:b2:26:
                    3c:81:74:29:0f:d9:08:8f:98:94:73:20:ad:8d:74:
                    8c:a7:a0:36:b5:e4:bd:d9:fc:d1:8b:f5:a9:8d:b5:
                    e2:41:a8:a3:ee:3c:29:b1:57:a6:4e:91:c7:3e:c3:
                    09:79:b4:61:90:8a:ef:90:7c:26:67:14:cb:f1:36:
                    2f:61:44:53:3b:79:3b:83:40:38:32:0f:21:68:11:
                    11:43:02:5f:99:c1:e1:ab:e3:5d:ca:54:d1:78:05:
                    ae:f9:12:dd:3b:8c:be:18:e3:1c:6e:a0:22:eb:34:
                    dc:f8:a4:00:6c:e3:5c:98:0b:ae:83:4d:4f:21:a8:
                    6b:48:ff:8d:ea:a1:c4:0c:7d:e3:85:99:f6:79:a2:
                    3d:3a:61:c1:ed:2e:ad:c2:7a:ff:30:84:cf:93:d6:
                    a9:70:d1:12:64:ac:21:85:7f:a7:05:23:6f:ae:0c:
                    aa:e9:70:59:d2:03:4f:dd:60:fd:25:43:86:25:c1:
                    10:33:7b:2e:95:04:32:b0:f2:e9:30:5d:ac:a3:87:
                    52:48:50:de:3c:cd:0f:64:2c:2a:04:2e:5d:3b:58:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:61:58:DB:39:F2:78:67:BF:ED:AA:05:5D:D6:12:21:24:3C:F5:83
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139372e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:7e:9e:4d:0b:50:18:f0:b4:e0:41:3a:5b:a3:53:f3:0e:
         99:42:c7:38:50:19:78:47:67:c0:8a:ab:5f:fc:00:45:27:12:
         1d:8c:d9:2f:9a:c8:d4:d8:29:4d:d2:a6:d3:9f:11:cb:fc:8a:
         86:a6:6e:ae:9d:42:ac:ac:1d:17:81:b9:c7:c4:91:52:21:50:
         11:56:73:e5:e4:d9:d6:2d:ed:7f:1e:5d:26:a4:31:0e:32:08:
         72:45:86:ed:e6:08:a3:8f:e8:60:02:d4:d8:69:cb:01:68:29:
         8c:90:08:36:3a:5e:44:b9:68:74:25:42:c0:f4:d8:23:29:a6:
         27:08:01:29:6c:f9:67:80:d0:be:bb:75:35:8c:f5:1e:a3:cc:
         db:a7:87:d4:fd:fb:c2:4e:2e:42:d6:45:c2:e8:a1:f5:29:48:
         c6:76:02:be:6d:23:fa:7f:d9:b6:4a:ae:3c:1f:6c:28:4a:ce:
         35:84:af:8d:47:90:47:d1:c3:88:d1:50:93:a8:74:6d:dd:00:
         52:02:77:2c:60:97:0a:27:9c:4b:94:9d:24:a1:77:a7:56:3e:
         67:e6:07:9c:04:05:42:af:0e:d3:22:34:de:f0:af:ce:47:d2:
         dc:78:1c:6e:22:82:df:43:87:8d:01:73:5c:e7:79:f1:b3:d9:
         7b:3d:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:38:29 2026 by rpki-client