Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38382e302f32342d3239203d3e203532333630.roa
File:                     3230302e3131352e38382e302f32342d3239203d3e203532333630.roa (raw, json)
Hash identifier:          xajlTcZOK1jWOqswLoYhXhI497KmVGqJAG3ZKqWySnk=
Subject key identifier:   B1:E1:B3:A4:EA:10:AA:61:81:52:C6:17:C6:3C:3E:81:3D:C5:79:0E
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       69E9D801F91C0BFD2A33628AE41EF7C4C38CFE12
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38382e302f32342d3239203d3e203532333630.roa
Signing time:             Tue 17 Mar 2026 12:34:10 +0000
ROA not before:           Tue 17 Mar 2026 12:29:10 +0000
ROA not after:            Tue 16 Mar 2027 12:34:10 +0000
asID:                     52360
IP address blocks:        200.115.88.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e9:d8:01:f9:1c:0b:fd:2a:33:62:8a:e4:1e:f7:c4:c3:8c:fe:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar 17 12:29:10 2026 GMT
            Not After : Mar 16 12:34:10 2027 GMT
        Subject: CN=B1E1B3A4EA10AA618152C617C63C3E813DC5790E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:9a:14:40:4f:58:10:8f:d9:35:52:9f:4c:
                    3a:57:e3:53:60:6d:f3:4f:79:e5:3c:9b:5f:38:94:
                    d9:ba:8e:03:82:38:42:38:0f:be:d3:d2:2f:3d:d9:
                    cd:f7:26:36:03:bb:9b:0b:a8:68:0f:c8:d5:ec:38:
                    45:44:ab:26:82:2e:e3:56:69:30:da:de:29:34:70:
                    62:7a:4a:ac:a2:5b:55:ff:b6:b5:a9:51:22:eb:12:
                    c7:02:1c:e8:d9:d3:d5:f1:b1:2e:67:76:03:09:59:
                    b7:7d:bc:c1:77:a7:d2:3e:12:1b:d6:c9:dd:88:07:
                    a1:4f:bd:d9:5b:2c:4f:de:61:aa:b0:75:cb:4a:68:
                    6d:0b:e3:0b:2c:82:2e:aa:1e:32:7b:3e:f2:df:ba:
                    6c:30:ad:b8:75:43:1d:aa:b2:50:1d:d6:aa:2b:43:
                    0e:6b:f8:3c:32:76:f6:8f:1d:4c:76:a3:d8:a1:d1:
                    e1:ba:af:a2:8e:65:e7:64:51:8b:45:73:a0:d6:f8:
                    86:b0:8b:e3:9b:3d:03:57:ef:bd:51:9f:e0:95:30:
                    48:88:f6:db:3a:47:35:f4:a2:ed:4b:c4:51:46:44:
                    58:62:46:15:31:88:1d:06:ff:9b:6d:07:2b:f5:04:
                    b9:45:83:da:59:e5:00:16:1d:33:9d:7e:a4:e4:40:
                    8a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E1:B3:A4:EA:10:AA:61:81:52:C6:17:C6:3C:3E:81:3D:C5:79:0E
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38382e302f32342d3239203d3e203532333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d0:91:53:0d:9c:b7:99:92:f2:26:78:c7:91:8f:06:27:a0:
         5c:55:e5:dc:9f:9f:b2:46:2d:f7:59:a8:90:cf:86:ec:7e:e3:
         59:de:f7:12:bc:fe:96:4d:e5:6e:28:fd:e9:e0:b3:3e:ba:2a:
         cf:75:34:9d:30:63:85:94:19:c9:f2:68:d3:01:fc:36:e2:57:
         5e:99:32:f0:55:f0:dc:6c:cc:75:e3:87:6e:69:72:cf:58:d0:
         ec:ba:af:f1:19:76:4a:9f:6d:5a:4f:ba:d1:bb:13:25:9a:57:
         d1:d6:68:7c:b1:22:d8:0b:81:e3:e0:12:13:dd:e7:b6:ab:47:
         f4:99:f7:60:df:f0:78:26:5a:01:c3:d1:72:c7:1f:00:85:6f:
         c7:b6:1a:de:ec:40:5c:52:64:6a:8e:19:d0:d4:c5:39:41:14:
         0e:41:bd:10:7b:c1:53:85:2f:e3:f2:bc:67:bc:d4:ad:92:b1:
         36:e7:15:00:ef:07:87:e4:c4:4c:f8:18:85:71:e4:02:57:93:
         a1:ed:16:66:a5:ea:5d:8b:8e:af:b3:23:af:24:15:5f:07:8d:
         ff:ec:8f:75:89:4f:5c:51:01:0e:4b:2f:8c:ae:06:24:cb:7d:
         96:96:31:a5:9e:56:b3:ec:1c:fa:c0:f7:06:50:c5:b8:95:4c:
         47:b5:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:56:19 2026 by rpki-client