Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/3230302e392e3232362e302f32342d3234203d3e203532343130.roa
File:                     3230302e392e3232362e302f32342d3234203d3e203532343130.roa (raw, json)
Hash identifier:          IpMOdnPDYLbQnUP50cFLzyJoX7B5nHXPE1GIz8ZQ0v0=
Subject key identifier:   EF:89:2C:E2:80:70:90:F1:1C:D3:4E:CA:44:F9:C2:C1:15:2C:DF:0C
Certificate issuer:       /CN=B9A021876E416A2682854C32FF258B9643EE2BDB
Certificate serial:       41412020B7C447F5218B8019416B2C7C568E02
Authority key identifier: B9:A0:21:87:6E:41:6A:26:82:85:4C:32:FF:25:8B:96:43:EE:2B:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/3230302e392e3232362e302f32342d3234203d3e203532343130.roa
Signing time:             Thu 02 Jul 2026 15:50:36 +0000
ROA not before:           Thu 02 Jul 2026 15:45:36 +0000
ROA not after:            Thu 01 Jul 2027 15:50:36 +0000
asID:                     52410
IP address blocks:        200.9.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:41:20:20:b7:c4:47:f5:21:8b:80:19:41:6b:2c:7c:56:8e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9A021876E416A2682854C32FF258B9643EE2BDB
        Validity
            Not Before: Jul  2 15:45:36 2026 GMT
            Not After : Jul  1 15:50:36 2027 GMT
        Subject: CN=EF892CE2807090F11CD34ECA44F9C2C1152CDF0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:f0:01:0b:3c:32:91:07:dc:7d:8d:5f:4f:
                    f1:b1:9d:e4:6c:79:b9:f1:46:94:39:5d:5a:37:64:
                    df:17:08:6f:4f:63:a0:86:b5:6c:b3:f3:5a:3b:10:
                    77:7a:81:5a:9e:19:1a:e6:0c:19:60:2d:15:30:ba:
                    41:b6:da:1c:27:aa:fa:ae:27:52:76:42:1b:e3:d6:
                    95:d7:5f:a4:89:19:0e:04:8f:3f:db:f4:12:72:a8:
                    53:b9:fe:21:f0:ab:d5:05:09:66:c1:23:83:fb:72:
                    f3:03:c6:d0:8d:6a:2f:d4:ae:13:c8:ca:cb:e5:c6:
                    c7:f5:81:84:e7:70:12:ca:b7:31:e9:a3:9c:59:cb:
                    af:84:d2:71:6f:71:98:ab:55:ec:fc:8f:36:6c:40:
                    10:a1:e5:62:ea:7b:70:f4:b0:67:5b:62:3c:f3:98:
                    c9:fb:15:b7:f4:f9:f5:f0:61:cf:d0:81:46:d0:e9:
                    19:8b:42:67:cd:29:01:9b:7e:5f:b2:9c:d2:6d:f8:
                    36:34:92:41:7e:f6:b4:1c:09:4a:74:cc:06:85:3b:
                    9f:51:0c:f7:e1:9c:fb:00:a8:0c:85:56:d4:4e:05:
                    f7:1c:a4:e5:4c:0f:e9:e8:a7:aa:67:fa:b2:30:91:
                    d3:ba:f9:1b:cd:17:01:44:94:e3:d5:d1:e8:9d:db:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:89:2C:E2:80:70:90:F1:1C:D3:4E:CA:44:F9:C2:C1:15:2C:DF:0C
            X509v3 Authority Key Identifier:
                keyid:B9:A0:21:87:6E:41:6A:26:82:85:4C:32:FF:25:8B:96:43:EE:2B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/B9A021876E416A2682854C32FF258B9643EE2BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9A021876E416A2682854C32FF258B9643EE2BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/337FD8F331F9B22120697A976238FE5A21086AA7D51D517428ACE07BE20C3A8B/0/3230302e392e3232362e302f32342d3234203d3e203532343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:39:0e:2c:13:8c:87:bb:7d:d8:da:4c:e2:0e:01:00:19:22:
         b8:45:39:be:3b:95:f7:27:2a:ba:23:18:37:8f:c2:b6:c4:b0:
         41:47:73:88:b9:69:70:39:8e:d9:fe:10:3b:6a:47:a9:2f:3d:
         4a:b4:1b:14:44:0b:d9:84:d8:cb:39:61:23:16:42:6e:93:14:
         f3:66:ed:47:bb:f1:19:85:23:e5:90:cb:71:d1:07:87:f8:24:
         be:e3:13:9e:2c:23:d5:9e:d4:76:5c:d9:73:fc:93:d3:0a:1d:
         fc:7b:1c:ea:6d:92:73:f7:0c:14:4a:aa:5c:f2:72:90:f7:c5:
         b9:67:9d:b6:9f:fa:97:98:14:90:22:35:08:84:0d:05:94:17:
         8b:8c:e2:1c:67:95:80:d5:ac:dd:d4:4f:b2:63:b9:a9:08:04:
         40:9e:6f:31:04:28:46:70:48:a0:16:6a:18:6c:a5:bc:b7:d3:
         10:d3:74:62:fd:6b:3b:1d:12:4d:66:2c:90:85:c5:2a:a5:8e:
         dc:be:b1:9e:13:2d:93:67:60:ff:87:5f:d1:8c:2f:aa:73:80:
         98:4f:97:14:ae:e3:55:6a:cd:44:cc:5e:58:53:5d:a4:21:20:
         37:65:94:eb:f1:06:40:eb:48:1c:0b:ff:b8:2c:45:05:f5:65:
         a4:d3:dc:3a
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgITQUEgILfER/Uhi4AZQWssfFaOAjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCOUEwMjE4NzZFNDE2QTI2ODI4NTRDMzJGRjI1OEI5NjQz
RUUyQkRCMB4XDTI2MDcwMjE1NDUzNloXDTI3MDcwMTE1NTAzNlowMzExMC8GA1UE
AxMoRUY4OTJDRTI4MDcwOTBGMTFDRDM0RUNBNDRGOUMyQzExNTJDREYwQzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpP8AELPDKRB9x9jV9P8bGd5Gx5
ufFGlDldWjdk3xcIb09joIa1bLPzWjsQd3qBWp4ZGuYMGWAtFTC6QbbaHCeq+q4n
UnZCG+PWlddfpIkZDgSPP9v0EnKoU7n+IfCr1QUJZsEjg/ty8wPG0I1qL9SuE8jK
y+XGx/WBhOdwEsq3MemjnFnLr4TScW9xmKtV7PyPNmxAEKHlYup7cPSwZ1tiPPOY
yfsVt/T59fBhz9CBRtDpGYtCZ80pAZt+X7Kc0m34NjSSQX72tBwJSnTMBoU7n1EM
9+Gc+wCoDIVW1E4F9xyk5UwP6einqmf6sjCR07r5G80XAUSU49XR6J3b5OcCAwEA
AaOCAsYwggLCMB0GA1UdDgQWBBTviSzigHCQ8RzTTspE+cLBFSzfDDAfBgNVHSME
GDAWgBS5oCGHbkFqJoKFTDL/JYuWQ+4r2zAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljLzMzN0ZEOEYzMzFGOUIyMjEyMDY5N0E5NzYyMzhGRTVBMjEw
ODZBQTdENTFENTE3NDI4QUNFMDdCRTIwQzNBOEIvMC9COUEwMjE4NzZFNDE2QTI2
ODI4NTRDMzJGRjI1OEI5NjQzRUUyQkRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wL0I5QTAyMTg3NkU0MTZBMjY4Mjg1
NEMzMkZGMjU4Qjk2NDNFRTJCREIuY2VyMIHFBggrBgEFBQcBCwSBuDCBtTCBsgYI
KwYBBQUHMAuGgaVyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8zMzdGRDhGMzMxRjlCMjIxMjA2OTdBOTc2MjM4RkU1QTIxMDg2QUE3RDUx
RDUxNzQyOEFDRTA3QkUyMEMzQThCLzAvMzIzMDMwMmUzOTJlMzIzMjM2MmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgJ4jANBgkq
hkiG9w0BAQsFAAOCAQEAlzkOLBOMh7t92NpM4g4BABkiuEU5vjuV9ycquiMYN4/C
tsSwQUdziLlpcDmO2f4QO2pHqS89SrQbFEQL2YTYyzlhIxZCbpMU82btR7vxGYUj
5ZDLcdEHh/gkvuMTniwj1Z7UdlzZc/yT0wod/Hsc6m2Sc/cMFEqqXPJykPfFuWed
tp/6l5gUkCI1CIQNBZQXi4ziHGeVgNWs3dRPsmO5qQgEQJ5vMQQoRnBIoBZqGGyl
vLfTENN0Yv1rOx0STWYskIXFKqWO3L6xnhMtk2dg/4df0YwvqnOAmE+XFK7jVWrN
RMxeWFNdpCEgN2WU6/EGQOtIHAv/uCxFBfVlpNPcOg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:41:15 2026 by rpki-client