Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04362D823B1C8D6C65C0702AE7A663EDB034E32950EB5C4A0C8A0E799A0841F5/0/3230302e31332e302e302f32312d3234203d3e203131333430.roa
File:                     3230302e31332e302e302f32312d3234203d3e203131333430.roa (raw, json)
Hash identifier:          nrKZl/R35eUcWSn4O4KndDbyByJyit74mkX1/6tKVi8=
Subject key identifier:   01:2D:02:BA:05:10:59:56:0F:0A:EC:D6:EB:41:42:07:55:A4:CA:7B
Certificate issuer:       /CN=9C76471738E9A6250543A1FB7CB5144EC30E94B4
Certificate serial:       4B3BC68ADA6BB6598C3D22CD83791DC0762EEFDD
Authority key identifier: 9C:76:47:17:38:E9:A6:25:05:43:A1:FB:7C:B5:14:4E:C3:0E:94:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C76471738E9A6250543A1FB7CB5144EC30E94B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04362D823B1C8D6C65C0702AE7A663EDB034E32950EB5C4A0C8A0E799A0841F5/0/3230302e31332e302e302f32312d3234203d3e203131333430.roa
Signing time:             Mon 06 Jul 2026 19:55:00 +0000
ROA not before:           Mon 06 Jul 2026 19:50:00 +0000
ROA not after:            Mon 05 Jul 2027 19:55:00 +0000
asID:                     11340
IP address blocks:        200.13.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04362D823B1C8D6C65C0702AE7A663EDB034E32950EB5C4A0C8A0E799A0841F5/0/9C76471738E9A6250543A1FB7CB5144EC30E94B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04362D823B1C8D6C65C0702AE7A663EDB034E32950EB5C4A0C8A0E799A0841F5/0/9C76471738E9A6250543A1FB7CB5144EC30E94B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C76471738E9A6250543A1FB7CB5144EC30E94B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 00:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3b:c6:8a:da:6b:b6:59:8c:3d:22:cd:83:79:1d:c0:76:2e:ef:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C76471738E9A6250543A1FB7CB5144EC30E94B4
        Validity
            Not Before: Jul  6 19:50:00 2026 GMT
            Not After : Jul  5 19:55:00 2027 GMT
        Subject: CN=012D02BA051059560F0AECD6EB41420755A4CA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:78:0f:cc:ca:df:24:0b:f2:c4:b1:f7:6e:bb:
                    33:5c:59:3e:c6:4e:98:4a:fa:29:9d:34:c2:92:0a:
                    50:f0:4c:22:4c:d2:24:7d:58:b6:c4:35:5e:b8:3f:
                    14:69:3f:81:f9:5a:6d:81:cb:30:fb:f9:80:d6:62:
                    7a:b8:99:77:8d:22:6e:cb:4f:bf:08:21:81:26:25:
                    62:97:df:e8:da:01:eb:be:fa:01:9f:ee:cd:87:d5:
                    f0:b3:45:ee:6b:2e:0e:01:e0:4a:01:79:43:1f:22:
                    7a:b3:3d:7e:00:cb:56:31:d5:d1:98:b8:23:d3:ad:
                    52:34:82:db:4c:f8:1b:32:9f:71:67:5a:d8:66:25:
                    82:a9:1f:58:e1:c3:08:82:25:07:d5:3c:8f:d5:66:
                    32:af:54:58:64:d6:c2:16:b0:37:a9:f3:37:ff:db:
                    9e:b9:3f:d4:02:85:77:cd:45:f3:e7:3e:4a:df:b7:
                    41:0f:fd:12:d5:d1:f4:20:97:ea:3b:e4:cf:61:f5:
                    fa:2a:c6:b3:be:ef:06:d5:e2:18:c2:d0:1e:24:e0:
                    c7:f5:3a:57:3c:a4:86:ed:dd:f4:4c:68:51:76:65:
                    3b:3f:f9:7c:40:e7:f7:62:b5:2a:7a:6e:85:65:b6:
                    56:5e:a3:ec:8c:6c:e3:43:87:4b:7d:da:2a:d3:94:
                    8c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2D:02:BA:05:10:59:56:0F:0A:EC:D6:EB:41:42:07:55:A4:CA:7B
            X509v3 Authority Key Identifier:
                keyid:9C:76:47:17:38:E9:A6:25:05:43:A1:FB:7C:B5:14:4E:C3:0E:94:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04362D823B1C8D6C65C0702AE7A663EDB034E32950EB5C4A0C8A0E799A0841F5/0/9C76471738E9A6250543A1FB7CB5144EC30E94B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C76471738E9A6250543A1FB7CB5144EC30E94B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04362D823B1C8D6C65C0702AE7A663EDB034E32950EB5C4A0C8A0E799A0841F5/0/3230302e31332e302e302f32312d3234203d3e203131333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:fa:2d:17:a6:3f:d7:c3:dc:c3:9f:99:91:cb:2f:00:c6:
         a4:95:c4:c1:4a:43:1b:fb:c0:f7:3a:54:0a:62:e9:03:4a:c6:
         60:11:a6:3e:a0:e3:44:e9:7d:42:71:81:6f:04:9a:4d:51:93:
         87:c8:cb:a3:a4:fa:da:e7:0c:35:9f:75:d0:f7:df:b8:a6:20:
         f7:8a:c6:fc:dd:3d:c6:e0:23:a0:1e:45:fb:57:9f:ba:a3:10:
         e7:09:38:83:62:73:28:8d:e0:03:87:d6:97:07:7f:91:6d:01:
         95:c1:85:87:f1:ae:93:60:68:23:a6:5e:fc:6c:c9:a2:fd:f9:
         a3:46:b7:c2:82:22:b3:e0:a4:2c:e4:23:c4:74:de:0f:51:e6:
         dd:0f:bb:b6:f6:92:44:43:7a:49:e8:f2:49:4c:9e:3c:7a:f9:
         dc:57:bb:3f:40:29:c8:6d:5f:83:ab:e2:91:f7:ba:38:86:0e:
         ba:06:08:e6:cf:b2:cf:8a:a8:ba:be:d2:72:a1:54:47:54:4d:
         d5:bf:54:36:fe:67:c2:24:8a:15:2e:4d:af:0e:e8:70:73:b0:
         45:9c:98:d5:a4:56:a1:10:70:c7:d8:68:18:b7:2a:06:fc:04:
         20:34:ad:bd:56:74:de:71:80:0f:4a:40:1f:67:ec:60:cd:f7:
         d2:37:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:43 2026 by rpki-client