Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132322e302f32342d3234203d3e203237393736.roa
File:                     3230302e36332e3132322e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          9QQV0RpF/rhw4EPLZwsAf3Or5CLP6rkV9vK/cIratRw=
Subject key identifier:   B2:E0:6B:73:A1:16:18:9D:D8:0F:5D:1C:23:4C:BA:02:25:83:AA:48
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       2E127847EE463034AA83E2470FBB0A2D90373410
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132322e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:54 +0000
ROA not before:           Fri 02 Oct 2026 18:32:54 +0000
ROA not after:            Fri 01 Oct 2027 18:37:54 +0000
asID:                     27976
IP address blocks:        200.63.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:12:78:47:ee:46:30:34:aa:83:e2:47:0f:bb:0a:2d:90:37:34:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:54 2026 GMT
            Not After : Oct  1 18:37:54 2027 GMT
        Subject: CN=B2E06B73A116189DD80F5D1C234CBA022583AA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:26:82:9a:da:cf:c1:58:f0:2e:ec:b1:e5:
                    f3:f1:43:b4:4d:e3:5d:35:08:d1:99:05:58:01:7b:
                    42:09:61:48:a9:51:60:77:2f:c4:bc:31:ec:04:a8:
                    f9:cd:ed:7d:56:e3:f0:2c:02:b3:45:62:af:2c:1c:
                    19:90:77:d5:c5:87:75:43:1f:04:8d:52:a6:e8:11:
                    c2:12:52:a2:58:6c:26:cf:36:91:c0:be:b9:5f:95:
                    e8:c9:48:c2:ac:77:55:16:2d:85:d4:5d:87:ad:14:
                    95:25:2c:87:e8:7f:39:66:0e:56:f5:15:7a:39:5b:
                    6d:3f:b2:3e:ce:c6:2a:92:e1:5a:91:d9:26:be:3c:
                    c0:a1:40:f4:e9:1b:f6:7f:7c:5c:4c:da:0a:b4:0e:
                    82:23:62:6a:c8:0d:69:76:04:64:19:29:05:51:32:
                    3d:46:d4:d9:f5:09:a4:d1:36:2c:50:aa:e1:de:9e:
                    32:a2:37:19:ea:98:64:ce:ce:aa:0e:44:a3:94:24:
                    20:82:a4:46:ad:09:c9:57:7b:62:cf:e0:80:dd:ad:
                    17:0d:f1:64:26:de:d5:61:04:25:d4:14:d5:47:06:
                    77:56:c5:bd:be:7a:6c:84:1b:1e:32:31:88:73:9b:
                    26:27:8d:58:6a:c6:f8:70:cc:a4:5a:1a:1e:40:d0:
                    e0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:6B:73:A1:16:18:9D:D8:0F:5D:1C:23:4C:BA:02:25:83:AA:48
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132322e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b2:a1:f7:4e:82:a1:9b:e0:45:77:8a:d4:67:a8:f2:f8:76:
         bd:a6:ac:df:b6:73:df:9a:07:79:eb:e3:f7:9c:9b:0b:2a:68:
         38:b4:34:64:76:51:a8:c0:1d:0a:d1:39:1a:8c:57:73:10:c7:
         4e:46:83:23:a9:9d:f8:c8:e1:81:56:99:48:ee:f3:19:dd:29:
         41:86:9d:8d:ed:08:51:ca:47:6a:03:79:82:23:f3:80:50:03:
         49:0d:bc:96:77:04:b4:7f:cb:a1:cc:7e:eb:16:9c:9f:23:4e:
         b2:63:c5:37:c0:03:85:08:49:d1:8b:58:c1:4a:49:14:66:3f:
         98:33:3e:2e:8c:cb:12:cd:82:b5:71:f5:c6:51:c3:f7:9b:ff:
         ee:cb:a6:55:d3:64:04:b6:93:b7:ee:39:23:ce:ff:90:1f:77:
         79:cd:7f:05:82:29:30:01:0f:a6:5c:c4:33:8d:e1:97:7c:05:
         51:82:b8:f0:2b:7b:00:cf:b2:1a:f1:79:f5:35:fc:9e:af:79:
         86:9d:c7:f4:02:fa:8c:fe:ef:56:56:ef:88:9e:36:18:07:5f:
         f8:54:17:f2:ab:d0:58:b2:72:80:a7:fb:38:93:90:5c:ec:91:
         da:6f:bd:69:0f:58:5c:1b:f9:65:bd:02:50:22:5e:55:25:34:
         b1:b0:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:56:01 2026 by rpki-client