Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132362e302f32342d3234203d3e203237393736.roa
File:                     3230302e36332e3132362e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          UIQ4Nsjbw9mpMq8GHWlk0Ny+u0PbfwFtH0lD20oJECQ=
Subject key identifier:   27:A3:02:26:1B:A0:E7:3D:00:D8:9C:F5:99:B8:47:5F:25:6A:0B:58
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       2B5A1704E566DA98A250F49400FC6F943EFF1694
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132362e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:59 +0000
ROA not before:           Fri 02 Oct 2026 18:32:59 +0000
ROA not after:            Fri 01 Oct 2027 18:37:59 +0000
asID:                     27976
IP address blocks:        200.63.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5a:17:04:e5:66:da:98:a2:50:f4:94:00:fc:6f:94:3e:ff:16:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:59 2026 GMT
            Not After : Oct  1 18:37:59 2027 GMT
        Subject: CN=27A302261BA0E73D00D89CF599B8475F256A0B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:84:7a:03:51:e9:8b:c8:75:a1:74:e2:1b:d5:
                    0a:62:3f:3d:78:8f:17:ab:c7:19:02:7a:b8:7e:51:
                    c2:49:2b:6a:eb:f2:08:0d:45:b5:7b:93:bf:d2:39:
                    72:33:55:f6:08:66:22:2e:d1:5c:58:5d:3e:88:83:
                    61:a8:08:56:a8:db:fb:58:5c:cf:62:1f:d8:55:d9:
                    53:c0:54:75:1b:81:4b:2e:ee:f7:56:1f:f0:9e:60:
                    3c:9a:3e:80:e2:66:5c:df:5f:12:12:cd:6d:de:9d:
                    e3:1b:3e:ff:ff:84:1c:23:ce:95:2f:58:98:da:13:
                    98:df:dc:3d:f9:92:bb:ca:1f:7f:c3:0f:2d:a6:f8:
                    ad:f8:f4:9e:23:4a:5a:21:db:51:02:98:fc:9c:f0:
                    cf:82:9e:85:fc:e2:8c:d6:23:f2:41:d0:3d:cc:0c:
                    c0:e3:9b:50:a1:c6:d0:65:8a:e5:33:30:0b:fa:df:
                    5c:ec:44:d9:50:8a:07:d4:42:69:f5:3a:c9:43:46:
                    0e:dd:4f:33:21:2e:89:b2:d1:72:1e:a7:aa:0c:2f:
                    ce:e8:92:4b:3d:e8:ae:8d:11:76:76:03:83:db:79:
                    88:cc:0b:6b:17:b1:9d:fd:9b:41:54:ad:c0:3f:98:
                    63:89:85:b4:d8:21:a6:d0:b1:8a:b3:ed:a4:93:37:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A3:02:26:1B:A0:E7:3D:00:D8:9C:F5:99:B8:47:5F:25:6A:0B:58
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132362e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d5:e5:11:7c:6c:8f:69:6c:85:cc:ef:bb:32:9d:88:f1:9c:
         04:62:e6:83:72:af:53:37:55:8b:90:d7:ff:28:cb:74:ee:96:
         64:4d:0c:f3:90:4a:91:3f:99:b2:d9:cd:38:e6:b0:58:c9:b7:
         b3:5c:c3:13:1a:8d:a1:d6:4c:0f:d8:7b:ec:3c:08:5a:cb:74:
         3a:1b:49:d6:7a:6a:b0:33:39:3b:be:c6:59:bc:64:08:03:69:
         84:c1:f2:dc:6d:05:42:56:7b:51:d6:67:2f:aa:76:72:b5:84:
         20:e3:bb:33:99:44:fb:4f:cc:3f:62:55:7a:38:5d:95:5a:b5:
         e9:d5:11:a1:e4:50:01:1a:1d:e8:5b:1e:67:64:40:e4:f9:d5:
         a2:11:87:50:f9:7e:a1:06:05:90:00:e4:5d:70:84:d0:e9:a1:
         3d:de:41:96:08:1a:b2:d9:6d:57:61:6a:bb:f1:90:cc:5d:b3:
         a3:20:de:c2:27:15:6d:cf:c4:9b:29:1a:4c:fe:c6:c5:0c:6b:
         a4:20:4a:80:cd:f2:15:3a:4e:fc:2c:9c:94:5a:79:1d:a0:04:
         9b:d1:e2:6e:e9:30:cc:7e:57:69:46:89:83:22:43:08:7e:18:
         69:75:2a:33:ba:64:ef:27:49:5f:d4:78:e2:f6:d1:0e:de:bd:
         6f:c0:ea:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:52:55 2026 by rpki-client