Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e37312e3234382e302f32312d3232203d3e203237363934.roa
File:                     3230302e37312e3234382e302f32312d3232203d3e203237363934.roa (raw, json)
Hash identifier:          r9doAnyJCpPTQAHTYGK/wKyV8FImTuXGLKanI5trjm4=
Subject key identifier:   6D:D7:95:77:68:E0:22:FC:96:B1:B8:4E:30:A0:2B:7B:14:C9:B5:05
Certificate issuer:       /CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Certificate serial:       28086E83BEB57F9050D02024E29385BE2DDE7B44
Authority key identifier: 24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e37312e3234382e302f32312d3232203d3e203237363934.roa
Signing time:             Tue 29 Sep 2026 21:30:00 +0000
ROA not before:           Tue 29 Sep 2026 21:25:00 +0000
ROA not after:            Tue 28 Sep 2027 21:30:00 +0000
asID:                     27694
IP address blocks:        200.71.248.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 05:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:08:6e:83:be:b5:7f:90:50:d0:20:24:e2:93:85:be:2d:de:7b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
        Validity
            Not Before: Sep 29 21:25:00 2026 GMT
            Not After : Sep 28 21:30:00 2027 GMT
        Subject: CN=6DD7957768E022FC96B1B84E30A02B7B14C9B505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:5f:66:15:7c:3d:e6:17:2f:ea:e0:ea:ea:
                    d7:02:f0:c8:ef:b4:87:a4:c0:24:81:05:8c:df:02:
                    0e:36:2d:22:d1:35:fe:86:d3:d2:f8:7d:d2:3a:5c:
                    f0:2e:26:cc:ed:2d:e3:96:81:b5:42:46:f9:bc:ce:
                    2d:5e:55:8b:5f:51:c9:7c:85:68:21:f5:59:31:31:
                    0e:54:53:83:41:db:db:f2:98:4e:58:11:ff:9c:9e:
                    e1:c2:2c:70:fd:d5:0d:41:98:02:e9:46:c2:1c:92:
                    cf:cf:7c:29:e0:37:a8:e2:8b:a7:ce:2e:2d:42:ac:
                    2c:18:f0:02:16:2e:db:bd:d4:b5:09:56:fc:fd:65:
                    2d:31:f1:9b:f3:1a:57:6a:db:4b:4d:45:aa:d7:33:
                    96:c3:98:6e:a3:53:34:2c:5b:e4:1b:42:8c:ec:eb:
                    29:01:98:92:65:83:12:ea:48:ee:70:32:44:b7:f9:
                    02:30:c5:d4:c9:60:a3:04:a1:98:6e:f5:cd:a8:61:
                    65:c6:e3:38:59:26:28:00:f9:96:d4:ed:5a:79:ed:
                    1e:27:02:db:7a:e5:97:76:88:35:fb:2b:92:32:da:
                    c1:b0:ed:63:94:bc:a2:48:37:05:bb:35:fc:32:d4:
                    4b:d0:4d:a9:d7:ab:0f:24:83:62:8f:1f:45:cf:b7:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:95:77:68:E0:22:FC:96:B1:B8:4E:30:A0:2B:7B:14:C9:B5:05
            X509v3 Authority Key Identifier:
                keyid:24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3230302e37312e3234382e302f32312d3232203d3e203237363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:ab:16:e5:96:04:23:55:79:64:56:74:e2:8d:66:d0:15:
         aa:75:c6:d3:61:e1:bf:09:eb:d3:c5:03:04:3e:e3:0e:4d:17:
         9c:19:3b:b4:0e:be:39:2e:50:7f:09:6d:34:85:44:2b:a4:9b:
         fb:c2:fd:da:a5:08:ef:72:00:95:72:1e:94:64:99:9f:33:3a:
         eb:d5:ab:33:87:95:e0:f7:6e:ed:e3:6d:88:0f:d0:ab:fb:16:
         0c:c6:05:ac:80:e4:29:f0:33:d3:a4:e3:16:db:ad:b7:5c:74:
         1c:3f:9d:ca:d6:c5:50:70:ff:4c:38:67:c2:94:bf:47:ae:f3:
         1d:f8:17:60:0a:84:47:84:f0:bb:aa:0f:cb:e5:fb:7c:bf:60:
         3d:64:68:77:70:8e:94:50:32:cb:a2:98:76:aa:0c:91:05:b4:
         df:e4:71:f5:af:f8:3b:39:5e:b5:f7:74:98:7e:c6:44:eb:1b:
         9a:bd:ae:37:59:b9:22:c0:af:0d:a5:ef:84:b4:6d:d9:9d:83:
         a6:9b:f7:84:d6:f2:cc:8c:54:f4:93:6b:6d:f0:03:27:80:b4:
         be:d7:df:7a:f5:fd:9f:45:ee:4e:26:3a:60:45:ed:8c:78:79:
         06:77:32:44:0b:67:ad:e4:9d:42:3b:93:a6:91:97:7c:56:a5:
         44:c1:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:37:32 2026 by rpki-client