Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233362e302f32342d3234203d3e20323730303031.roa
File:                     3230302e3134322e3233362e302f32342d3234203d3e20323730303031.roa (raw, json)
Hash identifier:          XpRcamJN6ihTDzzud9RzBbMTEwnsJeHnQNdC7X+k4Oc=
Subject key identifier:   A8:C7:F1:02:F1:BF:76:94:26:6F:BA:1B:88:F6:8A:A4:51:C0:81:8F
Certificate issuer:       /CN=9B540DCC1F1851D9B12A333F1AD063C3FBB33737
Certificate serial:       06F727782053073D667695336529D39A2BFE3612
Authority key identifier: 9B:54:0D:CC:1F:18:51:D9:B1:2A:33:3F:1A:D0:63:C3:FB:B3:37:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233362e302f32342d3234203d3e20323730303031.roa
Signing time:             Mon 19 Oct 2026 14:41:57 +0000
ROA not before:           Mon 19 Oct 2026 14:36:57 +0000
ROA not after:            Mon 18 Oct 2027 14:41:57 +0000
asID:                     270001
IP address blocks:        200.142.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 23:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f7:27:78:20:53:07:3d:66:76:95:33:65:29:d3:9a:2b:fe:36:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B540DCC1F1851D9B12A333F1AD063C3FBB33737
        Validity
            Not Before: Oct 19 14:36:57 2026 GMT
            Not After : Oct 18 14:41:57 2027 GMT
        Subject: CN=A8C7F102F1BF7694266FBA1B88F68AA451C0818F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:29:40:1c:37:91:06:d0:36:12:4b:5a:48:
                    81:12:3f:20:55:62:da:a2:4a:e3:e6:1c:dc:04:1a:
                    a1:c9:ad:ae:94:d8:05:ad:ed:c7:7d:76:1f:90:fe:
                    c7:13:fe:a7:26:c2:c3:10:72:50:d7:6b:9a:c4:b0:
                    17:65:45:af:cd:4b:c5:a4:f4:b0:bb:d9:08:71:b9:
                    db:76:61:08:23:d8:9f:e4:1b:2a:b2:78:c4:0e:2a:
                    74:96:1a:a6:e3:a7:52:39:b8:d8:34:bd:44:e2:ee:
                    9b:b8:e1:b6:52:73:b5:48:94:01:dd:b0:dd:e1:99:
                    3c:b5:cc:6d:35:cd:ec:42:6c:da:c3:38:f1:2c:8a:
                    e4:92:65:ac:e2:cb:57:e8:d3:3b:8b:b7:63:e5:ed:
                    c8:d5:ae:df:5b:8b:cf:1d:7f:48:19:50:62:19:be:
                    37:59:ff:43:7f:46:e7:ee:60:61:8b:33:1d:bf:8f:
                    c2:b2:07:9c:01:e2:5f:ba:9c:ed:d0:67:2e:73:a0:
                    80:71:10:7f:40:a6:f5:84:93:86:ed:21:e3:7a:7f:
                    c3:16:e6:bc:ed:16:99:31:96:16:42:49:74:8a:92:
                    82:59:3e:bf:63:8b:27:3c:15:ae:80:f2:3b:77:42:
                    50:a6:bc:1f:8e:de:65:09:a1:7c:59:7b:b3:c7:c6:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:F1:02:F1:BF:76:94:26:6F:BA:1B:88:F6:8A:A4:51:C0:81:8F
            X509v3 Authority Key Identifier:
                keyid:9B:54:0D:CC:1F:18:51:D9:B1:2A:33:3F:1A:D0:63:C3:FB:B3:37:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233362e302f32342d3234203d3e20323730303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:62:bc:ea:c6:09:42:d3:44:67:61:fc:bc:58:2c:5d:fe:ec:
         19:e9:bd:a3:84:46:c7:0f:6b:11:54:84:ab:31:6a:25:e6:9e:
         b9:07:46:04:e8:ed:d9:bf:38:00:ec:d5:87:67:0b:39:1d:82:
         2e:31:48:9a:c7:1f:f6:00:49:36:88:7a:de:1b:14:17:54:e0:
         c1:94:ae:8a:33:5d:8a:5c:c8:3e:6d:86:67:67:ca:8a:af:d0:
         ad:ac:ab:54:a3:fb:70:9a:c2:eb:71:0a:03:6c:5e:50:cf:f1:
         8e:fe:cd:3b:9e:b5:1d:d8:16:fd:55:68:ee:87:fd:70:23:a6:
         fa:aa:38:60:1d:2b:05:ba:96:92:31:cc:e1:a6:2d:ad:4c:99:
         7b:be:1e:61:14:ae:49:13:d9:33:6d:11:9d:f3:ec:b2:a5:95:
         fa:cd:15:62:72:89:8c:11:fe:0b:2c:aa:40:3b:90:d5:c8:01:
         d4:7e:8e:13:09:2f:8a:28:18:5f:db:d5:f5:a6:95:f5:89:be:
         37:78:01:a9:9a:12:89:cc:2f:cb:8a:63:af:b3:7e:9b:78:f5:
         e6:28:e5:17:7b:9a:67:de:9d:ae:71:e3:9b:d6:c4:96:af:bc:
         29:cc:28:46:a2:5d:99:2e:35:18:40:0a:20:45:dc:59:72:f5:
         c0:05:de:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:10:09 2026 by rpki-client