Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132342e302f32332d3233203d3e203237393736.roa
File:                     3230302e36332e3132342e302f32332d3233203d3e203237393736.roa (raw, json)
Hash identifier:          ZJH4V1CqYIeRknNH/PO7qVS3DNw0Kj7SKpU7D7LZWj4=
Subject key identifier:   5B:D2:C1:DD:15:19:6B:E2:73:08:B6:4C:64:A5:8E:5E:AF:F5:85:96
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       2C914C2ABE542345A0AD382E5F87AC746CE47286
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132342e302f32332d3233203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:56 +0000
ROA not before:           Fri 02 Oct 2026 18:32:56 +0000
ROA not after:            Fri 01 Oct 2027 18:37:56 +0000
asID:                     27976
IP address blocks:        200.63.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:91:4c:2a:be:54:23:45:a0:ad:38:2e:5f:87:ac:74:6c:e4:72:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:56 2026 GMT
            Not After : Oct  1 18:37:56 2027 GMT
        Subject: CN=5BD2C1DD15196BE27308B64C64A58E5EAFF58596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:51:17:ae:a5:27:96:03:0a:b6:ef:5d:dc:
                    40:fe:1d:cd:05:55:69:b7:53:61:3f:c7:7c:6a:ab:
                    ad:ba:f0:99:95:29:9c:7c:c8:78:cf:4b:6d:46:13:
                    69:bc:f6:30:a3:da:0f:7a:37:b4:83:64:4f:52:95:
                    3f:0e:04:92:8d:39:e9:95:bd:6d:c5:a6:66:26:bc:
                    08:7a:8f:ce:1e:fe:3b:ed:53:7f:d9:ce:45:88:3a:
                    47:5c:55:9c:d4:ff:72:9b:e6:e3:26:7e:73:77:dc:
                    0f:dd:dc:78:04:c4:da:0b:ed:59:fb:29:72:e7:d1:
                    48:b8:b6:bf:6f:96:d5:f2:c8:5a:68:12:d6:66:5b:
                    26:84:34:4d:d2:91:a1:e6:0d:42:f8:01:39:d6:5f:
                    4c:8b:da:51:81:01:ef:39:23:31:a4:9c:94:9e:02:
                    66:69:f2:b4:58:dc:71:53:00:26:fa:7b:2f:85:f1:
                    a2:78:bd:bb:97:a5:51:39:3c:d3:29:d4:3d:ae:61:
                    65:45:d3:da:d9:31:ba:f7:72:94:f6:4d:94:b0:d8:
                    e4:aa:a5:5d:dd:06:e3:b4:26:a4:93:89:f2:3d:ff:
                    21:f3:f3:36:72:81:61:ab:c1:76:53:6c:ce:6c:8e:
                    78:b0:4a:f4:a9:25:75:db:da:70:5d:e0:77:fc:a4:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D2:C1:DD:15:19:6B:E2:73:08:B6:4C:64:A5:8E:5E:AF:F5:85:96
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132342e302f32332d3233203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:f4:22:64:8b:4d:3e:f8:0d:ce:b8:2a:e6:a3:c1:07:03:64:
         60:9d:de:5b:fb:3e:5b:cc:e1:6c:55:12:c2:1a:37:b4:4a:f4:
         50:d4:27:14:0a:eb:3e:f4:f9:39:56:f5:0e:e8:0d:c9:e4:cf:
         a0:ce:3b:d4:ed:16:5f:c0:2a:11:54:ba:85:58:31:2e:0f:61:
         91:79:a6:9c:4f:e9:e2:c4:b9:de:45:30:09:91:8f:ab:96:08:
         1b:f2:0a:b5:10:aa:f3:9a:b4:a4:4f:96:67:51:3b:d2:cc:2c:
         4f:d2:bd:cf:2b:df:5e:30:30:60:42:73:37:33:01:8e:10:e2:
         47:7f:6d:0e:fc:3a:cb:6e:28:80:c9:f9:a2:64:d4:e5:01:39:
         cc:09:99:80:75:f1:dc:7f:c4:8a:c3:9d:2e:7c:ec:ce:8f:0a:
         6c:ba:f8:a6:ec:ab:03:bd:59:8d:7f:e3:7d:a6:27:c1:55:74:
         96:dd:3b:0f:1f:b0:02:50:f3:84:ce:52:78:67:a1:ba:aa:3f:
         7f:6d:7c:0f:28:12:8d:91:45:20:2a:e4:10:a5:af:37:65:bf:
         68:2c:c4:05:89:94:3a:b6:2b:7e:dd:5d:6e:4b:0e:91:2d:fe:
         fe:95:e9:0a:8f:0a:47:1e:09:4a:7f:f8:47:31:1e:79:e8:cf:
         2e:ab:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:25:15 2026 by rpki-client