Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/3230302e35392e3138322e302f32332d3234203d3e203237393934.roa
File:                     3230302e35392e3138322e302f32332d3234203d3e203237393934.roa (raw, json)
Hash identifier:          eLnYtWC0JoDDIAoW3s6XqWf9ZuFDc8e0IdAyBvVrhg8=
Subject key identifier:   C0:DC:16:C8:88:6D:83:C2:DF:26:A4:6E:F5:D1:4C:62:B9:9C:77:8F
Certificate issuer:       /CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184
Certificate serial:       2744BBA386364721F1DA8752C913604C348FC3FA
Authority key identifier: 9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/3230302e35392e3138322e302f32332d3234203d3e203237393934.roa
Signing time:             Mon 13 Jul 2026 13:52:06 +0000
ROA not before:           Mon 13 Jul 2026 13:47:06 +0000
ROA not after:            Mon 12 Jul 2027 13:52:06 +0000
asID:                     27994
IP address blocks:        200.59.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:44:bb:a3:86:36:47:21:f1:da:87:52:c9:13:60:4c:34:8f:c3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184
        Validity
            Not Before: Jul 13 13:47:06 2026 GMT
            Not After : Jul 12 13:52:06 2027 GMT
        Subject: CN=C0DC16C8886D83C2DF26A46EF5D14C62B99C778F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:09:e4:2d:dc:74:75:cb:50:c2:43:b3:f4:87:
                    c3:b7:6e:55:4f:49:33:09:e8:40:fd:af:22:90:54:
                    68:40:e3:1c:23:17:25:7e:57:d1:11:b9:1b:c3:f9:
                    44:45:f3:8b:a2:74:f0:45:c8:83:ba:6f:e1:36:a2:
                    b0:fb:91:bd:1e:a1:f2:d0:d1:aa:60:e9:6d:de:71:
                    b4:89:d0:2f:46:f0:8b:02:50:95:48:be:6c:c7:c8:
                    17:f9:7d:27:a6:cb:f5:7a:b3:62:cb:ad:00:3e:4f:
                    4c:1f:1e:52:e4:bd:08:03:76:8b:1a:c9:8f:02:3d:
                    cb:a3:1c:d1:b9:0d:6e:68:10:23:49:61:84:3c:ca:
                    2c:51:b5:f5:90:72:67:fd:01:b9:56:1f:f2:9e:c0:
                    9d:ab:7c:6b:e8:86:9d:7f:6e:1f:ea:cc:a2:30:f6:
                    1e:0f:ea:53:05:ce:2d:95:91:e6:9b:0d:de:42:ae:
                    47:61:b9:d6:06:03:1d:3d:5c:17:91:04:08:77:ee:
                    99:21:f2:b4:4a:17:5f:bc:da:0e:1e:ed:48:35:0c:
                    29:a8:c4:2a:24:59:9e:08:aa:bf:23:9e:c0:6f:8b:
                    ea:fa:10:f7:d0:b9:03:16:08:70:fc:16:bf:f6:6c:
                    07:6f:2a:82:35:cc:96:81:f5:48:91:0a:34:9e:ea:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DC:16:C8:88:6D:83:C2:DF:26:A4:6E:F5:D1:4C:62:B9:9C:77:8F
            X509v3 Authority Key Identifier:
                keyid:9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/3230302e35392e3138322e302f32332d3234203d3e203237393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:0c:d7:b7:22:ca:9a:28:29:4f:cc:bc:e0:c8:31:11:35:b7:
         36:cb:49:a7:ed:6c:2e:63:f5:97:0b:66:45:67:c7:d4:be:bf:
         69:f7:68:00:af:6c:33:fd:24:f9:9d:13:71:7f:89:2e:c5:e7:
         99:8e:c6:69:ec:cd:d7:8a:66:eb:81:59:4e:51:07:54:4d:db:
         4b:fb:53:97:da:8f:bf:f1:4b:94:f5:62:29:7f:2b:a3:cc:25:
         e6:8d:d6:42:cd:66:01:bc:1e:33:f4:5d:c3:09:56:58:b5:8e:
         19:de:98:5f:c9:ad:3b:76:65:29:59:41:fc:1c:0f:be:3a:e4:
         be:82:46:c5:33:1c:f4:b0:f1:51:4a:88:50:93:a9:b0:69:7d:
         36:ff:f5:fc:0c:21:6c:53:d3:f6:63:3f:1b:00:47:57:00:3c:
         dc:97:ba:d1:37:d6:ab:58:f8:12:54:6e:c0:fe:ff:a8:22:07:
         db:df:d8:11:9c:2a:30:dc:f6:9a:af:54:6d:f5:36:ef:5a:d6:
         db:5a:bb:48:b9:a3:b2:e7:37:79:66:73:22:ca:43:af:1b:8e:
         1a:40:b7:4b:cc:a1:a3:b2:d7:c8:c9:2b:7d:52:da:fb:d2:a3:
         dc:71:39:90:db:c6:10:1e:a3:3a:50:9f:19:6c:23:58:44:17:
         4b:53:b8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:43:51 2026 by rpki-client