Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056A971A53DBAC3601DE28F3E683EA4634E47E103C404205141180DD45BB966B/0/3230302e31302e3136332e302f32342d3235203d3e20323731393736.roa
File:                     3230302e31302e3136332e302f32342d3235203d3e20323731393736.roa (raw, json)
Hash identifier:          IHHRAVBLLeNZbBNguQ7j7JH+dLcWqCe2kItEH6/YxF0=
Subject key identifier:   38:C0:8B:0C:1F:AA:3E:DE:7A:3F:AC:9F:E3:E0:C2:51:24:41:C4:AD
Certificate issuer:       /CN=2C59244F01A181B150633A4C45298365C5F085DF
Certificate serial:       77C02FB9DBAD12850FB44912FD2168B5A94F3D85
Authority key identifier: 2C:59:24:4F:01:A1:81:B1:50:63:3A:4C:45:29:83:65:C5:F0:85:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C59244F01A181B150633A4C45298365C5F085DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/056A971A53DBAC3601DE28F3E683EA4634E47E103C404205141180DD45BB966B/0/3230302e31302e3136332e302f32342d3235203d3e20323731393736.roa
Signing time:             Thu 19 Mar 2026 22:50:00 +0000
ROA not before:           Thu 19 Mar 2026 22:45:00 +0000
ROA not after:            Thu 18 Mar 2027 22:50:00 +0000
asID:                     271976
IP address blocks:        200.10.163.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/056A971A53DBAC3601DE28F3E683EA4634E47E103C404205141180DD45BB966B/0/2C59244F01A181B150633A4C45298365C5F085DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/056A971A53DBAC3601DE28F3E683EA4634E47E103C404205141180DD45BB966B/0/2C59244F01A181B150633A4C45298365C5F085DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C59244F01A181B150633A4C45298365C5F085DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c0:2f:b9:db:ad:12:85:0f:b4:49:12:fd:21:68:b5:a9:4f:3d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C59244F01A181B150633A4C45298365C5F085DF
        Validity
            Not Before: Mar 19 22:45:00 2026 GMT
            Not After : Mar 18 22:50:00 2027 GMT
        Subject: CN=38C08B0C1FAA3EDE7A3FAC9FE3E0C2512441C4AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:fc:79:b5:ab:30:12:da:9f:f5:04:f5:7b:
                    30:8d:27:7f:b3:d4:65:5b:01:6b:6b:df:cf:6e:c1:
                    c4:b9:5c:14:a8:ae:cb:f4:1a:3b:73:3a:80:a7:05:
                    3e:7a:63:c6:60:87:82:94:5b:26:89:44:6d:e7:e3:
                    3f:d8:86:23:26:e5:64:7a:f8:e1:91:db:a2:92:73:
                    af:4a:36:f1:ca:34:8c:09:1f:4b:11:8c:25:2e:fb:
                    87:4c:40:ee:10:a6:15:46:16:89:2a:f1:e3:16:c9:
                    60:4b:54:41:a1:06:81:40:ee:91:5c:97:ff:0b:10:
                    35:94:41:0a:67:18:49:2c:7e:9e:6a:6b:56:37:f6:
                    58:03:89:4d:24:00:15:56:9d:12:6d:c1:ac:7c:f8:
                    53:cf:cc:d7:67:63:92:35:9e:c6:54:0e:66:52:b7:
                    98:dd:37:10:bd:03:d1:ec:3d:44:1a:47:6f:51:dd:
                    a0:09:81:26:41:25:d9:66:5c:90:9d:61:5b:cf:87:
                    a9:72:cb:91:65:7d:08:b9:61:f8:ab:cf:5f:3d:1c:
                    47:c5:9a:41:ac:f9:b7:f6:76:63:83:d3:d5:35:4a:
                    cb:04:a5:dc:65:5d:49:3b:2d:6f:06:23:92:f1:bd:
                    c4:53:d1:77:24:6f:d5:e2:35:b0:78:6c:fa:bc:d9:
                    3c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:8B:0C:1F:AA:3E:DE:7A:3F:AC:9F:E3:E0:C2:51:24:41:C4:AD
            X509v3 Authority Key Identifier:
                keyid:2C:59:24:4F:01:A1:81:B1:50:63:3A:4C:45:29:83:65:C5:F0:85:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/056A971A53DBAC3601DE28F3E683EA4634E47E103C404205141180DD45BB966B/0/2C59244F01A181B150633A4C45298365C5F085DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C59244F01A181B150633A4C45298365C5F085DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056A971A53DBAC3601DE28F3E683EA4634E47E103C404205141180DD45BB966B/0/3230302e31302e3136332e302f32342d3235203d3e20323731393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:1d:db:c1:f0:17:b6:0e:60:9a:f5:4a:77:f7:c9:a6:c6:92:
         95:13:9b:13:b2:d3:87:ba:2a:77:33:f7:eb:55:94:0e:2a:9e:
         ed:2b:84:77:13:76:07:46:2e:9c:dd:3d:b9:10:db:df:ca:23:
         b3:28:68:d6:17:62:bf:cf:59:14:20:3b:5f:f8:ac:ae:91:26:
         ea:fd:17:32:4e:8a:e1:dd:cf:54:9b:f9:6f:ba:22:c3:c9:7b:
         91:7b:b9:34:b7:c2:c3:48:0f:a1:43:e0:7d:6a:bf:5e:13:20:
         e5:0a:3d:a1:77:30:c2:44:6f:3e:4d:55:96:2f:16:a7:49:36:
         46:bb:77:6c:66:ee:17:c1:78:a2:15:34:97:f5:47:e2:7e:b9:
         ab:6b:b7:4a:5e:4c:1c:22:ad:7f:ef:43:28:63:a4:34:b6:f4:
         1b:75:71:d9:d1:6f:07:e5:07:ad:a1:0e:3a:65:ff:a8:88:bc:
         dd:fc:a8:fb:7c:c2:1b:16:05:da:a7:31:e7:df:da:c6:0b:66:
         42:e3:7e:7c:58:c7:cc:1c:db:a8:c8:6b:30:fa:04:ab:ba:92:
         8c:dc:5b:33:f0:72:ce:00:2d:94:3b:71:fa:c4:11:9a:f4:36:
         18:6f:5b:b2:70:bb:b9:e6:55:49:6c:de:77:4e:60:c6:50:ab:
         cb:95:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:22:49 2026 by rpki-client