Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231312e302f32342d3234203d3e203237373437.roa
File:                     3230302e3131352e3231312e302f32342d3234203d3e203237373437.roa (raw, json)
Hash identifier:          6op22+8PtCdhcIvTFdWjUOjpkAzgh9hipGsHoV23QHs=
Subject key identifier:   8B:4F:9A:B6:FF:FA:AE:F8:0D:13:5B:01:28:1C:7B:A2:CE:8F:FC:A7
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       0B9BA427ACE54A3B60CBD8019693FDFE67DB0F5B
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231312e302f32342d3234203d3e203237373437.roa
Signing time:             Fri 01 May 2026 18:40:41 +0000
ROA not before:           Fri 01 May 2026 18:35:41 +0000
ROA not after:            Fri 30 Apr 2027 18:40:41 +0000
asID:                     27747
IP address blocks:        200.115.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9b:a4:27:ac:e5:4a:3b:60:cb:d8:01:96:93:fd:fe:67:db:0f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: May  1 18:35:41 2026 GMT
            Not After : Apr 30 18:40:41 2027 GMT
        Subject: CN=8B4F9AB6FFFAAEF80D135B01281C7BA2CE8FFCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2f:1f:04:5f:82:a6:d1:98:78:34:99:e7:b4:
                    73:a4:48:c2:7f:c5:5e:49:f2:be:fc:0e:78:5e:f5:
                    bf:a6:7b:61:e3:19:2c:27:57:7d:41:a7:9c:cf:d4:
                    ac:6b:58:4d:55:7c:ff:fb:59:dd:56:f4:c8:33:4b:
                    ef:1e:4f:9a:09:95:0f:56:39:f7:04:9f:24:98:3f:
                    bf:25:b6:e8:78:fc:9c:08:ef:4e:b3:c4:5a:5b:72:
                    0e:44:db:2d:e0:13:da:43:18:cd:ea:09:20:ec:4b:
                    48:e7:cc:b1:21:f9:4b:f7:fd:95:b5:b0:8e:49:ab:
                    b2:4f:52:c9:cb:ac:25:d0:68:3b:e9:48:60:25:b8:
                    9a:bc:c8:1f:d3:a6:cf:f4:98:50:8e:fc:01:74:22:
                    2e:4f:96:27:1a:f9:af:a4:0b:60:62:06:82:8e:28:
                    18:6c:6e:ae:c8:20:ad:de:b4:ea:41:34:69:47:f0:
                    f3:11:e6:5a:20:81:56:59:b9:f6:da:af:18:db:0d:
                    ce:df:7a:cf:e4:ac:c9:8c:b4:e2:92:ac:80:1d:1b:
                    0b:a3:c0:91:0e:1e:07:da:63:98:d0:7b:70:f8:ac:
                    98:75:cf:d9:a5:2c:9e:90:de:a1:35:83:19:3a:01:
                    75:e0:ea:19:36:2b:f2:42:9f:02:2f:66:f0:22:58:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4F:9A:B6:FF:FA:AE:F8:0D:13:5B:01:28:1C:7B:A2:CE:8F:FC:A7
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231312e302f32342d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:cc:5d:79:54:11:4f:bc:e0:df:a1:8d:58:77:b1:9d:5a:3f:
         ca:28:70:a3:15:19:21:95:16:47:5c:ad:f5:ec:43:33:b8:04:
         0e:eb:17:cd:31:67:80:27:43:cb:1b:dc:e7:f4:b2:ef:f8:af:
         18:6c:95:9f:af:fe:f1:44:e0:0f:16:5f:68:d4:5e:57:b8:f0:
         c2:31:10:d2:91:1e:67:b2:6b:02:4e:e2:32:4f:4d:91:c0:48:
         1b:65:53:a5:bb:39:38:e3:6f:3d:f9:ae:be:25:cb:10:db:76:
         2f:2a:01:06:f1:e7:15:5d:72:29:b9:72:83:c3:5b:e0:82:a9:
         99:ff:0d:f5:81:d5:9c:3f:62:6f:52:1c:88:61:9c:f8:41:2d:
         1f:04:b1:46:60:30:a9:64:04:c4:28:f6:84:dd:9e:9a:9e:34:
         87:0a:f8:b5:45:1b:b8:27:94:7a:2a:f4:3c:fc:05:c8:4b:f8:
         10:ed:e9:8e:7f:a0:2f:06:3f:d5:97:2c:f9:b7:3c:a4:8c:c6:
         8a:52:20:4d:5b:86:41:e5:3f:16:41:70:98:0a:9b:1e:68:eb:
         89:ba:89:6f:8f:f2:5e:f4:4d:70:84:06:44:6d:c3:41:47:ba:
         a6:1e:7d:5d:db:ee:c5:03:06:00:07:87:36:16:37:f7:96:30:
         9d:e1:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:03:19 2026 by rpki-client