Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/3230302e33342e33302e302f32332d3233203d3e2033323537.roa
File:                     3230302e33342e33302e302f32332d3233203d3e2033323537.roa (raw, json)
Hash identifier:          LJqrOgwWytsyOEq3qVvYa8ry8kHft5KBMzI6ZGhm6nI=
Subject key identifier:   55:CF:EC:37:5C:B6:30:72:EE:BD:27:7A:34:F7:62:A4:FE:3C:85:73
Certificate issuer:       /CN=DB17AC52119D8F4E529903F396DBDF334E28EAB9
Certificate serial:       27602116DF28A3F31A4B54E23410ADA9E8B59616
Authority key identifier: DB:17:AC:52:11:9D:8F:4E:52:99:03:F3:96:DB:DF:33:4E:28:EA:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/3230302e33342e33302e302f32332d3233203d3e2033323537.roa
Signing time:             Fri 01 May 2026 21:10:00 +0000
ROA not before:           Fri 01 May 2026 21:05:00 +0000
ROA not after:            Fri 30 Apr 2027 21:10:00 +0000
asID:                     3257
IP address blocks:        200.34.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 10:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:60:21:16:df:28:a3:f3:1a:4b:54:e2:34:10:ad:a9:e8:b5:96:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB17AC52119D8F4E529903F396DBDF334E28EAB9
        Validity
            Not Before: May  1 21:05:00 2026 GMT
            Not After : Apr 30 21:10:00 2027 GMT
        Subject: CN=55CFEC375CB63072EEBD277A34F762A4FE3C8573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:9b:16:d1:2d:65:ce:05:29:8e:ee:b6:82:
                    63:2f:4a:bc:96:d7:03:9b:c2:d2:0f:49:13:69:5f:
                    4a:34:43:1f:7c:c6:7e:83:7e:a2:99:19:9f:80:56:
                    c6:69:a9:fd:9a:0e:57:80:94:ca:18:37:40:73:b4:
                    06:ca:90:d6:78:a2:65:79:63:64:db:ed:08:69:82:
                    f2:71:4b:84:ae:07:7a:06:4e:ac:ec:7f:5a:bd:38:
                    1a:8e:7a:05:43:0e:c1:88:6e:fc:22:48:01:c7:fa:
                    d6:b6:da:b7:b3:48:84:f0:4e:e3:65:56:e7:db:f7:
                    a3:6d:67:ec:e2:4d:ee:92:85:7f:09:37:93:27:12:
                    30:ae:f8:0b:8f:8f:2a:5b:33:86:19:5a:b3:33:9b:
                    cc:7a:b6:ef:42:7d:ec:3c:51:00:74:7f:ae:59:8c:
                    bb:06:08:18:a9:b8:ba:64:fa:f7:10:ba:89:25:ea:
                    bc:27:1d:51:f8:84:86:d8:26:a6:6c:b0:89:6e:0c:
                    c4:42:78:da:ac:2d:5d:41:51:ba:3f:92:55:04:f1:
                    83:0d:02:d6:c7:e8:39:d9:98:57:ec:da:79:56:87:
                    b4:5d:71:dd:a1:87:12:30:41:e7:45:53:db:04:42:
                    b6:84:b2:b8:60:6e:c9:80:07:95:5e:72:8f:e0:00:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CF:EC:37:5C:B6:30:72:EE:BD:27:7A:34:F7:62:A4:FE:3C:85:73
            X509v3 Authority Key Identifier:
                keyid:DB:17:AC:52:11:9D:8F:4E:52:99:03:F3:96:DB:DF:33:4E:28:EA:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/3230302e33342e33302e302f32332d3233203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:07:f4:3f:b3:1e:0e:ca:11:7a:32:ab:e3:bb:77:80:d1:4b:
         72:68:e5:6c:29:6a:c2:6d:bb:6d:99:44:3e:9f:53:49:9e:e5:
         47:43:04:d5:dd:2b:7a:40:76:cb:80:41:a9:34:24:8a:c2:c6:
         95:ab:28:01:20:95:ba:91:04:a0:31:d6:a7:2a:01:67:1b:f7:
         35:f2:4c:af:36:90:fb:09:0e:29:7c:63:58:20:26:4e:b6:24:
         37:33:5c:b5:22:7c:7c:bf:4d:bd:69:26:40:cd:a3:97:aa:6d:
         59:9c:35:e6:68:50:46:69:61:e3:6d:ac:a4:95:c1:77:fd:0a:
         2a:94:ac:41:7b:30:90:26:61:86:22:3a:34:c0:90:67:e1:14:
         d1:36:36:08:10:1d:81:a3:35:e7:b4:c7:b7:a1:8b:d9:3a:8b:
         42:59:18:d8:9c:71:69:56:89:28:87:0f:cf:b1:15:b1:78:dd:
         84:82:00:86:21:d5:6b:f9:b2:05:a5:48:af:12:9e:56:60:57:
         1a:17:80:e6:bd:bc:fd:20:13:b1:43:be:8e:86:bd:02:ca:4c:
         33:c9:7d:73:87:41:bc:5e:8f:17:77:5f:46:f4:6a:a3:9f:11:
         c4:23:af:94:9c:ee:98:cd:e9:6b:11:42:a4:5b:6a:48:8b:fe:
         ae:0f:f7:e2
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUJ2AhFt8oo/MaS1TiNBCtqei1lhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIxN0FDNTIxMTlEOEY0RTUyOTkwM0YzOTZEQkRGMzM0
RTI4RUFCOTAeFw0yNjA1MDEyMTA1MDBaFw0yNzA0MzAyMTEwMDBaMDMxMTAvBgNV
BAMTKDU1Q0ZFQzM3NUNCNjMwNzJFRUJEMjc3QTM0Rjc2MkE0RkUzQzg1NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+5sW0S1lzgUpju62gmMvSryW
1wObwtIPSRNpX0o0Qx98xn6DfqKZGZ+AVsZpqf2aDleAlMoYN0BztAbKkNZ4omV5
Y2Tb7QhpgvJxS4SuB3oGTqzsf1q9OBqOegVDDsGIbvwiSAHH+ta22rezSITwTuNl
Vufb96NtZ+ziTe6ShX8JN5MnEjCu+AuPjypbM4YZWrMzm8x6tu9Cfew8UQB0f65Z
jLsGCBipuLpk+vcQuokl6rwnHVH4hIbYJqZssIluDMRCeNqsLV1BUbo/klUE8YMN
AtbH6DnZmFfs2nlWh7Rdcd2hhxIwQedFU9sEQraEsrhgbsmAB5Veco/gAISJAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUVc/sN1y2MHLuvSd6NPdipP48hXMwHwYDVR0j
BBgwFoAU2xesUhGdj05SmQPzltvfM04o6rkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTVENEU4NUU2MzhFNUUxRTk0RjQ2MUY4N0YyNTE5NDhB
N0E4OURCNERFNjNENTkzNTFENzU5MUUxM0RBNThFLzAvREIxN0FDNTIxMTlEOEY0
RTUyOTkwM0YzOTZEQkRGMzM0RTI4RUFCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjE3QUM1MjExOUQ4RjRFNTI5
OTAzRjM5NkRCREYzMzRFMjhFQUI5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U1RDRFODVFNjM4RTVFMUU5NEY0NjFGODdGMjUxOTQ4QTdBODlEQjRE
RTYzRDU5MzUxRDc1OTFFMTNEQTU4RS8wLzMyMzAzMDJlMzMzNDJlMzMzMDJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMzMzIzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByCIeMA0GCSqG
SIb3DQEBCwUAA4IBAQAAB/Q/sx4OyhF6Mqvju3eA0UtyaOVsKWrCbbttmUQ+n1NJ
nuVHQwTV3St6QHbLgEGpNCSKwsaVqygBIJW6kQSgMdanKgFnG/c18kyvNpD7CQ4p
fGNYICZOtiQ3M1y1Inx8v029aSZAzaOXqm1ZnDXmaFBGaWHjbayklcF3/QoqlKxB
ezCQJmGGIjo0wJBn4RTRNjYIEB2BozXntMe3oYvZOotCWRjYnHFpVokohw/PsRWx
eN2EggCGIdVr+bIFpUivEp5WYFcaF4Dmvbz9IBOxQ76Ohr0CykwzyX1zh0G8Xo8X
d19G9GqjnxHEI6+UnO6YzelrEUKkW2pIi/6uD/fi
-----END CERTIFICATE-----
Generated at Tue May 12 21:31:54 2026 by rpki-client