Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32332d3233203d3e203237393736.roa
File:                     3230302e36332e3132302e302f32332d3233203d3e203237393736.roa (raw, json)
Hash identifier:          Qa1xpU0Rz03FbL7ink6M4LM7YZceL+RvSnCcaDJS1VY=
Subject key identifier:   2F:80:E7:82:D3:B2:6D:5E:81:98:7E:DA:4B:78:01:50:F4:F9:35:86
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       6BC7A2DC25E60CC27981637713126D07AFE4C61E
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32332d3233203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:38:05 +0000
ROA not before:           Fri 02 Oct 2026 18:33:05 +0000
ROA not after:            Fri 01 Oct 2027 18:38:05 +0000
asID:                     27976
IP address blocks:        200.63.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c7:a2:dc:25:e6:0c:c2:79:81:63:77:13:12:6d:07:af:e4:c6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:33:05 2026 GMT
            Not After : Oct  1 18:38:05 2027 GMT
        Subject: CN=2F80E782D3B26D5E81987EDA4B780150F4F93586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:20:06:63:61:18:04:df:4c:6c:20:73:f7:86:
                    e0:c4:5a:ec:c2:c2:e1:26:21:ac:89:1e:62:b7:cf:
                    4a:d4:fd:d3:a1:8f:73:7d:26:24:e4:35:28:89:7f:
                    fc:54:74:0a:c6:ae:0c:37:9d:57:6b:c1:d1:59:aa:
                    28:51:b2:ad:02:85:22:90:20:20:b6:1c:82:75:ab:
                    fe:f8:9a:5c:39:6a:0d:14:55:1b:68:82:91:d5:59:
                    82:65:e8:4c:a6:2c:86:7f:b5:9c:f0:90:c8:6c:4a:
                    0a:19:bb:ea:83:7f:d5:de:6f:a3:38:b0:54:53:d3:
                    69:1d:04:0d:fa:77:14:fe:9d:52:f4:87:6b:ab:c0:
                    24:4d:87:95:48:80:9b:3c:aa:87:9e:55:19:bb:4f:
                    cd:10:5c:8b:80:e0:6f:3f:3a:df:e4:dc:5f:2f:ff:
                    05:24:a8:ba:71:3d:b0:91:c9:9f:92:ec:6d:12:f7:
                    db:ee:4a:7e:08:3e:6b:da:40:9f:a8:94:36:fa:b5:
                    33:68:5b:b0:04:02:e4:9c:63:ed:89:9d:5f:fd:68:
                    c0:55:9e:a0:57:67:6b:c8:a4:43:98:9b:cc:54:70:
                    fc:45:1b:ce:df:a3:92:48:c1:8f:4e:c5:61:39:85:
                    9d:a3:79:07:e0:94:b3:81:e5:3a:e3:bb:07:5d:36:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:80:E7:82:D3:B2:6D:5E:81:98:7E:DA:4B:78:01:50:F4:F9:35:86
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32332d3233203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:6d:ef:fc:c2:aa:31:d9:f6:e6:64:d6:25:24:8b:6a:65:a4:
         8f:60:df:b8:04:b6:e0:44:37:2c:0e:bf:46:74:97:b1:a3:bd:
         11:ea:8f:f4:6a:b5:ea:06:da:f9:e9:05:8e:40:c3:b1:99:ea:
         56:a4:bd:3a:27:95:66:17:46:3a:22:d8:cd:80:ef:a3:90:50:
         07:7a:5d:8e:17:bc:b8:6a:ea:87:95:69:5f:05:a1:39:8b:b9:
         27:97:f1:33:1d:cb:eb:bf:a4:ba:48:db:0d:4f:28:91:2b:09:
         af:da:f6:3c:7f:d9:af:81:0b:22:96:b8:94:da:c4:2c:06:58:
         8a:14:43:1d:30:16:cc:f1:ed:06:b2:0b:d2:93:c5:bd:3e:59:
         60:9b:5b:f9:7f:8a:f5:59:68:15:19:4f:1e:c8:df:91:16:7d:
         17:c1:72:88:39:fb:d7:b5:e4:57:84:6c:f4:bb:ac:95:fc:f1:
         18:47:ad:4d:ce:d4:8b:5f:ef:da:fe:04:27:cc:b8:8a:af:fa:
         33:71:e4:70:7a:36:f8:c1:b1:98:ac:b0:d7:58:78:84:69:8c:
         0d:8a:f4:be:f5:8b:c1:dd:85:8a:fd:48:54:43:40:82:dd:7f:
         15:cf:4d:9d:ae:fa:3e:f3:81:33:cb:a0:20:6f:7f:6e:26:d0:
         e2:b6:f4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:34:47 2026 by rpki-client