Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132342e302f32342d3234203d3e203237393736.roa
File:                     3230302e36332e3132342e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          90pHDsFrK0+QYOkqkP9MvL4NvIx0KOyOBsB2OqdGd3Q=
Subject key identifier:   86:B1:91:5B:4E:98:E8:BE:77:49:0C:F4:5A:C8:EB:40:A9:54:2E:BD
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       569B618A3AF6BE105569133DA7139ABFE740B7E3
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132342e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:52 +0000
ROA not before:           Fri 02 Oct 2026 18:32:52 +0000
ROA not after:            Fri 01 Oct 2027 18:37:52 +0000
asID:                     27976
IP address blocks:        200.63.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9b:61:8a:3a:f6:be:10:55:69:13:3d:a7:13:9a:bf:e7:40:b7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:52 2026 GMT
            Not After : Oct  1 18:37:52 2027 GMT
        Subject: CN=86B1915B4E98E8BE77490CF45AC8EB40A9542EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a1:9c:f9:df:d6:8f:13:69:dd:70:54:3f:4f:
                    4c:85:fa:b3:ea:62:b1:d9:b2:0d:36:fb:b8:a0:6c:
                    1a:aa:43:00:9a:ad:d3:d6:b5:f3:e9:67:e1:ed:0c:
                    f9:28:92:04:f9:3d:99:bf:7d:38:cb:08:3d:16:37:
                    a3:2a:83:4c:0b:9f:02:5a:cf:5a:fe:33:5f:8c:40:
                    d3:5a:ce:1a:8f:8c:ff:42:02:70:af:35:be:72:b7:
                    07:71:5a:52:dc:0c:2a:5d:ca:8d:65:8d:23:34:14:
                    38:e6:c9:67:85:1e:a3:cb:cb:75:bd:82:53:04:ad:
                    43:81:26:90:f0:a8:bc:bf:37:14:9a:1b:51:66:69:
                    29:89:9a:ab:8c:5b:6c:0a:f9:a4:44:16:ba:6a:7a:
                    06:07:ee:4c:1d:95:cb:e8:03:87:61:54:c0:87:e3:
                    98:48:03:04:63:73:d5:62:4a:97:6b:4a:d4:dc:8b:
                    ce:62:29:1f:05:e5:59:a2:7c:57:9e:7f:e1:6e:4a:
                    f9:a7:98:b9:72:c4:ec:55:e9:60:f2:22:8f:68:40:
                    51:f6:82:96:3f:64:0a:e0:2e:15:c2:60:0c:2a:fa:
                    04:41:38:9e:4e:f1:e9:3c:f4:84:56:81:5a:02:c1:
                    e8:95:0c:77:9c:fe:0b:6c:6c:0b:d0:c9:68:71:b7:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B1:91:5B:4E:98:E8:BE:77:49:0C:F4:5A:C8:EB:40:A9:54:2E:BD
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132342e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a3:39:2d:df:70:2e:ce:11:d5:95:5e:77:2e:a4:3c:3c:0e:
         06:52:f9:dd:da:a3:a0:27:cc:64:4d:c5:e8:97:99:4b:79:fc:
         1f:7e:4f:c1:b3:75:ce:bf:1e:bb:03:ae:a0:b0:00:df:8a:f4:
         17:81:3d:18:45:fa:d2:f8:85:2d:e7:e6:fd:ab:ff:98:06:f1:
         c7:98:d9:66:8e:57:33:0b:47:d3:89:d4:ca:51:5f:8a:05:c0:
         ef:32:c5:cc:84:14:81:67:34:ec:60:5a:92:e1:6b:1b:67:4f:
         5a:31:0f:43:3e:94:21:c2:a8:fb:b5:82:10:75:1b:26:bb:23:
         e8:80:23:a8:12:06:b4:e3:40:7b:29:c4:07:f1:d1:32:48:3a:
         62:83:5c:d5:04:ce:c5:89:60:8e:b3:bf:44:55:8c:90:72:69:
         55:9d:de:4f:df:d4:91:0b:fe:5b:c9:ca:ef:89:26:e1:22:b1:
         32:ad:a4:95:7a:7a:41:db:fd:f5:71:ee:99:ce:0e:bd:2a:88:
         b6:0d:4b:2f:f6:28:82:70:33:30:8b:40:de:f0:f1:95:b7:e1:
         31:71:e8:74:01:f5:8f:39:07:7c:e5:37:9a:4a:dc:33:6e:1a:
         fe:93:d9:f3:d3:35:8b:4b:13:99:6b:47:01:4e:97:2e:9a:00:
         ba:36:71:cc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVpthijr2vhBVaRM9pxOav+dAt+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRFNDczMjY3QzdFRDhEQkZDQ0QyMDlBQzA5QTFDQTdC
ODRBN0MzOTAeFw0yNjEwMDIxODMyNTJaFw0yNzEwMDExODM3NTJaMDMxMTAvBgNV
BAMTKDg2QjE5MTVCNEU5OEU4QkU3NzQ5MENGNDVBQzhFQjQwQTk1NDJFQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnoZz539aPE2ndcFQ/T0yF+rPq
YrHZsg02+7igbBqqQwCardPWtfPpZ+HtDPkokgT5PZm/fTjLCD0WN6Mqg0wLnwJa
z1r+M1+MQNNazhqPjP9CAnCvNb5ytwdxWlLcDCpdyo1ljSM0FDjmyWeFHqPLy3W9
glMErUOBJpDwqLy/NxSaG1FmaSmJmquMW2wK+aREFrpqegYH7kwdlcvoA4dhVMCH
45hIAwRjc9ViSpdrStTci85iKR8F5VmifFeef+FuSvmnmLlyxOxV6WDyIo9oQFH2
gpY/ZArgLhXCYAwq+gRBOJ5O8ek89IRWgVoCweiVDHec/gtsbAvQyWhxt4bJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhrGRW06Y6L53SQz0WsjrQKlULr0wHwYDVR0j
BBgwFoAUxORzJnx+2Nv8zSCawJocp7hKfDkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzJEOUIxRTYxNkJGQzYwMzBGM0RBMUQ2RjIwQjZCNDE0
MzE5QThDREQ0NEVFNjQyMEI2RkZFNzBENjVDNUI5LzAvQzRFNDczMjY3QzdFRDhE
QkZDQ0QyMDlBQzA5QTFDQTdCODRBN0MzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEU0NzMyNjdDN0VEOERCRkND
RDIwOUFDMDlBMUNBN0I4NEE3QzM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMyRDlCMUU2MTZCRkM2MDMwRjNEQTFENkYyMEI2QjQxNDMxOUE4Q0RE
NDRFRTY0MjBCNkZGRTcwRDY1QzVCOS8wLzMyMzAzMDJlMzYzMzJlMzEzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg/fDAN
BgkqhkiG9w0BAQsFAAOCAQEAjqM5Ld9wLs4R1ZVedy6kPDwOBlL53dqjoCfMZE3F
6JeZS3n8H35PwbN1zr8euwOuoLAA34r0F4E9GEX60viFLefm/av/mAbxx5jZZo5X
MwtH04nUylFfigXA7zLFzIQUgWc07GBakuFrG2dPWjEPQz6UIcKo+7WCEHUbJrsj
6IAjqBIGtONAeynEB/HRMkg6YoNc1QTOxYlgjrO/RFWMkHJpVZ3eT9/UkQv+W8nK
74km4SKxMq2klXp6Qdv99XHumc4OvSqItg1LL/YognAzMItA3vDxlbfhMXHodAH1
jzkHfOU3mkrcM24a/pPZ89M1i0sTmWtHAU6XLpoAujZxzA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:40:05 2026 by rpki-client