Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132372e302f32342d3234203d3e203237393736.roa
File:                     3230302e36332e3132372e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          dPgwth6RisVKiM2LZn4UECnIQKVGfsavuYBLdAQQXrA=
Subject key identifier:   39:6F:2E:72:15:F1:04:1C:3D:7D:4C:58:F2:7F:48:8E:AD:F5:7E:0A
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       06D72675E5E5F86F6004B4D40A1E45202489157A
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132372e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:56 +0000
ROA not before:           Fri 02 Oct 2026 18:32:56 +0000
ROA not after:            Fri 01 Oct 2027 18:37:56 +0000
asID:                     27976
IP address blocks:        200.63.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d7:26:75:e5:e5:f8:6f:60:04:b4:d4:0a:1e:45:20:24:89:15:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:56 2026 GMT
            Not After : Oct  1 18:37:56 2027 GMT
        Subject: CN=396F2E7215F1041C3D7D4C58F27F488EADF57E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:a9:cc:07:37:95:cb:d7:18:17:fd:9f:1b:
                    36:51:d7:d9:08:38:b2:3e:df:9c:bc:7d:ed:e0:67:
                    2d:83:58:c6:19:4b:0c:66:74:db:8b:47:9c:e0:b3:
                    0d:74:74:d6:f8:cc:be:1d:2c:bb:a8:a1:11:44:8a:
                    05:54:de:28:d2:eb:ff:51:6e:f6:49:e0:ac:1f:b7:
                    63:f8:f6:c7:06:47:64:00:32:46:2f:a9:e2:b0:39:
                    fc:8e:d4:34:6b:15:64:6f:0c:dd:49:4e:db:71:aa:
                    4c:14:40:ad:b1:73:b7:c4:21:19:e2:0c:9f:87:66:
                    87:6b:3b:4a:a0:19:7b:12:83:ca:bf:6c:64:50:74:
                    28:0b:a4:84:68:5d:77:a7:5b:68:54:4f:0f:85:bc:
                    56:d0:6c:50:67:aa:bd:bd:60:85:e4:fa:f7:42:5d:
                    62:5c:1c:cb:87:d8:b2:9a:1f:19:fc:b1:16:0b:9b:
                    78:ef:65:38:ef:e6:9a:1b:ad:72:b3:d0:6c:e4:80:
                    c1:b4:43:c8:1e:de:b2:85:dd:12:88:91:db:3a:8e:
                    88:d4:21:1c:af:6c:28:a6:aa:e6:b2:33:24:97:76:
                    3c:ea:6d:60:3a:5d:a6:68:96:70:aa:ce:2d:27:70:
                    b8:cb:31:aa:5f:0c:4a:1d:58:70:97:37:c7:5f:dd:
                    34:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6F:2E:72:15:F1:04:1C:3D:7D:4C:58:F2:7F:48:8E:AD:F5:7E:0A
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132372e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:be:3b:a0:a6:90:05:5f:80:e7:2a:53:b7:05:94:78:b7:4f:
         ff:ac:d8:f8:27:24:41:26:2b:33:4d:3f:ee:e8:f9:a2:99:e9:
         aa:49:2f:32:36:af:c4:84:39:93:fa:80:21:23:50:cb:78:ff:
         9e:dc:e2:c8:b5:2e:d3:2a:69:51:7d:c3:4f:ae:9d:53:74:2d:
         e0:fa:9f:6a:db:f9:07:cc:46:8d:aa:90:10:52:20:84:b1:80:
         87:e8:ed:fa:fa:27:b5:0b:41:c6:cb:d0:1b:54:a1:45:04:0e:
         f8:dc:99:2f:a3:d2:c3:6e:e7:e8:a7:64:a2:6e:a1:e3:90:38:
         d1:91:a8:e9:c7:2d:bd:a2:b2:4e:5d:57:dc:35:5e:09:af:59:
         49:64:fb:c9:1d:08:8b:a2:92:c4:9e:77:8c:e7:bd:bc:fe:dd:
         9e:e0:d5:b8:3b:43:18:cf:db:7f:bd:57:5f:04:15:74:38:9d:
         99:92:88:53:ec:03:0e:fe:70:16:a1:73:b9:19:34:3c:5d:5c:
         98:5e:b6:2d:1d:0a:e3:2a:88:82:8e:5c:d1:8a:f3:3f:17:ca:
         38:ea:1f:2e:6b:06:b1:fd:91:8a:ca:ee:cb:af:31:eb:c9:76:
         d2:f0:17:90:75:f2:46:c6:0a:b0:2d:15:fe:85:63:a5:ac:f8:
         37:68:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:27:31 2026 by rpki-client