Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa
File:                     3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa (raw, json)
Hash identifier:          3QhjBqdTIZobI9mIuNsSOwqRRtSwFy8T2LRMj2WzgFE=
Subject key identifier:   DE:87:97:E3:34:35:83:B7:19:7A:06:20:7B:CF:2F:F1:23:54:C6:E0
Certificate issuer:       /CN=F120FD76709C67C88845B1BB9132720E6262A870
Certificate serial:       593547972EB3CB2B7250C5851FCFAAEE18FAA79B
Authority key identifier: F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa
Signing time:             Mon 09 Mar 2026 15:33:19 +0000
ROA not before:           Mon 09 Mar 2026 15:28:19 +0000
ROA not after:            Mon 08 Mar 2027 15:33:19 +0000
asID:                     28387
IP address blocks:        201.131.200.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:35:47:97:2e:b3:cb:2b:72:50:c5:85:1f:cf:aa:ee:18:fa:a7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F120FD76709C67C88845B1BB9132720E6262A870
        Validity
            Not Before: Mar  9 15:28:19 2026 GMT
            Not After : Mar  8 15:33:19 2027 GMT
        Subject: CN=DE8797E3343583B7197A06207BCF2FF12354C6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:d1:ef:57:99:b6:5f:66:a2:06:31:4e:14:
                    3b:6f:9d:77:1f:a3:aa:4d:47:05:e8:9a:96:e2:63:
                    4e:5e:e2:30:37:f2:95:a2:eb:55:72:89:6b:e5:a2:
                    d9:76:6b:cd:c3:aa:61:f9:a3:09:08:e4:70:76:75:
                    b8:74:11:c3:18:10:83:60:d5:8d:db:ae:46:40:81:
                    6a:43:35:5c:fb:85:9d:1c:47:19:ae:fb:a8:88:91:
                    28:58:b0:db:b6:51:01:67:22:b3:83:6b:ec:d0:17:
                    53:cb:13:4d:bf:2f:37:67:74:5a:95:4e:e7:4c:e8:
                    67:a6:15:f6:13:7e:04:84:72:0f:ca:82:1b:27:2d:
                    8d:1c:de:5b:0a:50:2d:8c:6a:d3:70:b3:2e:07:f3:
                    53:c9:e0:66:d5:66:70:be:9f:1e:cc:3d:ba:4f:12:
                    02:71:6a:f3:a5:84:3c:4a:98:fe:50:ce:a4:26:58:
                    63:29:f6:4a:18:d2:49:67:de:9a:0d:6f:3c:dc:2d:
                    7e:1b:64:7a:19:93:c5:e7:6a:c2:fa:1b:63:a8:e7:
                    9e:20:17:07:f6:06:15:8b:58:2f:15:91:80:58:90:
                    2c:46:56:21:e1:78:2c:34:d3:18:98:0f:1d:04:0f:
                    ca:bd:34:a4:bf:72:06:23:6b:62:0b:6b:35:62:1a:
                    72:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:87:97:E3:34:35:83:B7:19:7A:06:20:7B:CF:2F:F1:23:54:C6:E0
            X509v3 Authority Key Identifier:
                keyid:F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:b9:35:ed:a4:2c:2d:fb:4d:23:95:9e:b7:fa:62:9d:9d:74:
         b9:24:1b:cc:b1:45:b1:8e:e6:63:f3:8c:3b:45:6b:24:b1:6d:
         24:d5:c9:1e:4c:58:e2:90:33:bd:a4:9c:f8:9b:f0:98:54:1e:
         28:3e:81:e5:af:0e:37:cc:c1:ca:ee:09:2c:12:da:49:e3:1f:
         c4:5d:bc:51:0d:57:51:25:f1:24:cd:0c:f1:75:d0:7c:37:e8:
         cb:19:e9:bf:d7:e1:ad:61:de:fb:f6:5e:64:8f:66:a1:19:3c:
         e1:26:f5:66:d1:5b:e1:3e:c7:69:b5:b8:c0:36:e4:16:73:da:
         6f:64:a0:f3:48:e2:10:97:22:35:6f:69:42:ae:aa:94:b4:62:
         3c:a9:7e:cc:8d:42:30:79:86:ed:f3:94:18:f0:ca:88:7e:1b:
         c2:32:33:11:69:55:b6:05:1c:e0:d0:85:6e:b7:af:7c:5b:ba:
         c3:31:d6:a5:fb:cd:48:ec:92:1b:9b:84:9f:22:f1:d3:c7:09:
         20:8c:a3:02:ee:4d:2f:d3:74:dd:98:f8:48:2a:b9:a3:bc:ef:
         ef:0e:c1:d2:a8:5f:75:0c:f8:ca:7f:e3:d9:80:26:02:22:19:
         ed:ea:77:7d:68:aa:7a:84:2a:0b:9b:7e:fb:85:96:60:5b:b3:
         d2:71:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:42:12 2026 by rpki-client