Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233372e302f32342d3234203d3e20323730303031.roa
File:                     3230302e3134322e3233372e302f32342d3234203d3e20323730303031.roa (raw, json)
Hash identifier:          3s37djZXHyW6rCAugMoKYvN5TPvXEc2h00eo6CEVUlM=
Subject key identifier:   60:30:A0:14:BF:8F:19:AF:59:EC:84:80:83:0F:F8:9C:9F:58:7B:A6
Certificate issuer:       /CN=9B540DCC1F1851D9B12A333F1AD063C3FBB33737
Certificate serial:       7BFC6B7E0EA312BE128E450476AD4770ADBFCEC9
Authority key identifier: 9B:54:0D:CC:1F:18:51:D9:B1:2A:33:3F:1A:D0:63:C3:FB:B3:37:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233372e302f32342d3234203d3e20323730303031.roa
Signing time:             Mon 19 Oct 2026 14:41:57 +0000
ROA not before:           Mon 19 Oct 2026 14:36:57 +0000
ROA not after:            Mon 18 Oct 2027 14:41:57 +0000
asID:                     270001
IP address blocks:        200.142.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 23:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fc:6b:7e:0e:a3:12:be:12:8e:45:04:76:ad:47:70:ad:bf:ce:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B540DCC1F1851D9B12A333F1AD063C3FBB33737
        Validity
            Not Before: Oct 19 14:36:57 2026 GMT
            Not After : Oct 18 14:41:57 2027 GMT
        Subject: CN=6030A014BF8F19AF59EC8480830FF89C9F587BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:49:b0:3d:d0:46:83:4f:53:0c:74:84:41:
                    c4:d2:77:b9:32:26:46:98:c7:8a:c8:6c:8f:f4:e5:
                    6e:86:39:66:ba:67:2b:67:b3:97:68:0d:71:83:3b:
                    f7:3f:d1:a2:dc:ce:0f:49:87:57:a4:00:8c:4c:58:
                    29:4c:ed:7e:8c:8e:39:bb:9e:cb:3f:5b:eb:f8:06:
                    fc:c2:88:a3:d6:b9:f7:3a:c9:cf:ad:f7:57:f2:36:
                    d7:81:30:d4:13:3c:ac:54:c4:96:f2:0c:81:97:76:
                    b4:10:51:70:6a:2c:91:1a:ec:ba:0a:be:64:f5:93:
                    e0:ff:88:ee:5f:86:83:9b:47:da:6b:ec:cf:c8:aa:
                    37:48:9e:33:91:e7:c4:ac:14:ff:b1:68:c1:47:33:
                    b0:85:1b:20:89:2d:6f:f6:35:ef:e8:ea:5b:af:d3:
                    b4:f2:a3:46:c9:e3:e3:62:d6:f1:19:00:30:99:10:
                    f8:f4:5c:5e:5a:4f:5d:85:cf:d5:bc:fe:a1:2d:f8:
                    cd:d3:b6:e9:f9:5e:58:d4:5e:f9:ea:06:61:92:98:
                    68:c1:49:d0:fa:fc:1e:b0:cd:c1:71:c2:41:76:20:
                    f5:cc:77:b1:0b:1b:c9:84:68:29:d5:7a:9a:79:7e:
                    c6:d8:d4:10:65:ff:6c:59:49:ab:80:6e:cc:e2:42:
                    cb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:30:A0:14:BF:8F:19:AF:59:EC:84:80:83:0F:F8:9C:9F:58:7B:A6
            X509v3 Authority Key Identifier:
                keyid:9B:54:0D:CC:1F:18:51:D9:B1:2A:33:3F:1A:D0:63:C3:FB:B3:37:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B540DCC1F1851D9B12A333F1AD063C3FBB33737.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B3A23939BC0FF412F800542314572F3A397D4B29D723480E70030D3037A998/0/3230302e3134322e3233372e302f32342d3234203d3e20323730303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:7c:d1:a4:cb:bd:ae:4d:03:77:a3:a8:81:7b:0d:cf:f2:39:
         bb:35:0f:2c:a3:9c:62:e3:02:0e:38:aa:44:f9:99:bd:18:d6:
         74:e7:5c:c0:ae:82:da:09:82:7e:51:cd:17:d5:ca:c6:8e:13:
         bb:27:fe:17:7a:8d:ed:d7:e4:a4:c8:49:e3:7e:3f:12:e7:d1:
         2c:ff:bc:80:b7:c3:85:18:ea:dd:e9:e4:a2:de:63:60:ae:b1:
         ea:d1:9e:6b:f4:fc:fc:ef:a5:c0:18:3a:9b:17:6f:49:6e:8e:
         3b:37:45:76:f2:3d:fb:2c:93:5d:b5:61:01:bf:3e:7e:54:9d:
         08:ac:c2:dd:39:65:06:d2:cf:46:6d:3b:cf:dc:48:43:09:6d:
         9a:83:5c:95:99:13:b6:1f:d8:f4:c9:6a:e6:a1:99:5b:2c:d5:
         d0:18:6b:8c:06:85:dd:02:7f:6f:b8:f5:81:5e:cd:cf:4a:0a:
         a8:9b:6a:c8:cf:d9:44:93:37:2d:05:a7:98:83:9e:5e:8f:66:
         ee:81:fc:ff:79:95:04:3f:ae:69:61:8d:13:cc:e0:60:a9:75:
         d7:1e:b1:75:ee:ca:68:07:11:06:c3:93:b6:b3:91:56:b1:4c:
         63:c7:7e:ca:64:3f:78:95:07:41:34:3b:70:3b:da:12:23:91:
         5d:bd:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:16:35 2026 by rpki-client