Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233362e302f32322d3232203d3e20323730303031.roa
File:                     3230302e3134322e3233362e302f32322d3232203d3e20323730303031.roa (raw, json)
Hash identifier:          bIInjwaBhsIQeFlh1nnBnih7p5FMM1CnzcmLGUqEZX4=
Subject key identifier:   96:73:DA:24:D8:6B:2B:44:8F:F2:D3:EE:0D:16:C9:A2:47:67:85:49
Certificate issuer:       /CN=9B540DCC1F1851D9B12A333F1AD063C3FBB33737
Certificate serial:       25E5AF34D3AEAFDBC85D61CBDE73C55AF23C8868
Authority key identifier: 9B:54:0D:CC:1F:18:51:D9:B1:2A:33:3F:1A:D0:63:C3:FB:B3:37:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233362e302f32322d3232203d3e20323730303031.roa
Signing time:             Mon 19 Oct 2026 14:41:57 +0000
ROA not before:           Mon 19 Oct 2026 14:36:57 +0000
ROA not after:            Mon 18 Oct 2027 14:41:57 +0000
asID:                     270001
IP address blocks:        200.142.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e5:af:34:d3:ae:af:db:c8:5d:61:cb:de:73:c5:5a:f2:3c:88:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B540DCC1F1851D9B12A333F1AD063C3FBB33737
        Validity
            Not Before: Oct 19 14:36:57 2026 GMT
            Not After : Oct 18 14:41:57 2027 GMT
        Subject: CN=9673DA24D86B2B448FF2D3EE0D16C9A247678549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:33:44:96:8a:b5:bb:a9:46:03:f6:9c:d8:
                    13:7c:ec:6e:6a:aa:24:20:26:11:47:16:0f:5d:3d:
                    64:37:93:6c:2a:f3:64:6a:d9:29:24:45:f0:38:d8:
                    72:2c:a7:66:7f:f5:cb:83:32:1b:83:41:07:36:1a:
                    28:ed:36:62:07:31:07:03:ee:35:a3:a6:64:50:f1:
                    70:14:0f:c5:6a:22:a1:e1:7e:fc:28:bf:98:91:89:
                    80:c4:47:60:29:65:51:27:d8:a7:a4:dd:17:33:52:
                    0a:ba:55:f7:42:e8:17:63:20:bb:df:67:88:a3:30:
                    c6:06:9f:89:36:c0:67:20:ae:ab:65:a2:f1:51:e4:
                    86:4a:d7:04:e6:d9:9d:2a:bd:a3:71:aa:17:65:95:
                    e7:69:b2:51:25:d7:0d:7e:03:15:fb:cb:ba:8e:cf:
                    71:c5:a0:c7:6a:0b:43:37:14:6d:ce:ba:7a:b9:8c:
                    03:f3:2c:34:12:6e:77:f9:96:fd:71:fd:04:d7:c9:
                    c9:c4:1e:12:cf:ba:35:ad:6e:bb:37:b2:ab:0e:19:
                    bf:7c:50:02:e9:a4:e2:f6:56:ab:76:7d:c2:5f:fd:
                    15:27:ea:ba:3a:56:a9:33:bb:79:8d:54:2c:e2:42:
                    e8:04:58:09:d2:b5:14:3a:24:d5:5a:58:50:5a:d3:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:73:DA:24:D8:6B:2B:44:8F:F2:D3:EE:0D:16:C9:A2:47:67:85:49
            X509v3 Authority Key Identifier:
                keyid:9B:54:0D:CC:1F:18:51:D9:B1:2A:33:3F:1A:D0:63:C3:FB:B3:37:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233362e302f32322d3232203d3e20323730303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:ad:d6:3a:c0:1c:4c:ee:e4:47:79:c8:cf:a1:0f:73:f8:9f:
         01:82:3b:4a:77:c5:34:cf:21:b7:49:b2:ba:dc:8c:75:02:93:
         71:2a:f8:75:78:f9:93:00:dd:31:6b:d5:a5:7a:90:e2:7c:67:
         cc:2d:27:b1:ea:97:d3:0b:76:82:85:a4:c3:04:4a:93:68:13:
         28:fa:ee:fa:c1:ce:6d:17:7b:85:58:ff:9f:6e:8a:ee:6d:92:
         92:da:40:08:4e:ab:96:d0:f2:68:71:fc:01:6c:18:11:ed:02:
         a3:87:35:af:4d:8d:2f:26:e5:5e:2f:db:77:d2:bb:2d:64:70:
         de:d6:31:76:1b:a6:c5:4a:81:5e:54:03:77:9f:67:ae:6f:3c:
         fb:6c:24:d1:2f:d4:1c:26:08:8b:ad:5c:2b:44:6d:0f:11:0f:
         6d:f5:d9:09:b6:aa:7b:5d:49:0b:72:53:15:6e:4d:eb:bc:6e:
         05:74:3a:7f:c4:2a:6e:cd:a3:b2:33:1e:4d:8f:4a:19:38:5e:
         81:58:80:55:c8:13:fa:ed:4b:0d:56:a8:6d:77:3a:02:95:f2:
         29:16:0d:85:55:a7:5c:1c:d5:dd:3d:6c:ab:58:52:a1:28:33:
         d6:fb:db:cb:78:f4:f7:ac:88:99:d3:09:c5:12:62:a8:ce:58:
         8d:de:bf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:35:53 2026 by rpki-client