Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e203233303331.roa
File:                     3230302e3131322e3232322e302f32332d3234203d3e203233303331.roa (raw, json)
Hash identifier:          0jP94ecKdAK3d1T/Iud42lPpcX6LW9gdK1rx9o0o0dY=
Subject key identifier:   4B:1B:38:A9:63:0C:33:76:88:2D:3D:EC:FC:D9:18:D5:30:2F:BE:BF
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       104A6207A08E99189073CB608574960AE6157942
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e203233303331.roa
Signing time:             Wed 25 Mar 2026 22:35:56 +0000
ROA not before:           Wed 25 Mar 2026 22:30:56 +0000
ROA not after:            Wed 24 Mar 2027 22:35:56 +0000
asID:                     23031
IP address blocks:        200.112.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 11:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4a:62:07:a0:8e:99:18:90:73:cb:60:85:74:96:0a:e6:15:79:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Mar 25 22:30:56 2026 GMT
            Not After : Mar 24 22:35:56 2027 GMT
        Subject: CN=4B1B38A9630C3376882D3DECFCD918D5302FBEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:95:dd:4d:b7:35:d9:9e:16:93:92:e0:a3:
                    86:77:41:ac:8a:73:ed:41:af:6a:8f:05:81:ee:ae:
                    0d:f8:6e:f3:20:89:c8:12:4f:42:38:0b:12:91:51:
                    f0:5a:29:2c:2c:0f:54:0a:51:c9:f3:99:b1:80:be:
                    7b:9c:de:95:55:f0:69:f7:31:b0:d8:c2:9d:56:f6:
                    73:73:74:07:f0:3c:85:af:06:64:ca:70:ab:66:9b:
                    d1:92:25:6e:79:13:5c:0a:47:6a:c9:3a:4d:e0:a5:
                    b0:6a:6b:db:54:e4:5b:bc:3a:53:e3:74:bc:bc:02:
                    ed:1b:ed:ad:92:9a:11:7b:0b:ef:4c:51:14:24:33:
                    81:0a:7f:2d:54:d6:94:78:51:36:d8:b9:b2:1f:61:
                    85:52:97:5a:e3:2b:a2:6f:5d:9e:c8:47:83:08:a4:
                    6b:63:de:ce:f6:ff:3d:0d:52:f2:95:28:68:4b:f4:
                    b5:dc:60:d7:2a:15:31:65:5b:c9:36:e9:99:08:1f:
                    1c:c6:c0:f3:42:78:35:8c:aa:74:25:68:e0:ff:24:
                    07:65:64:c5:03:70:5b:89:b8:44:36:57:f5:9e:6a:
                    23:bf:e7:dd:8e:95:60:d3:c4:5c:c4:0b:76:12:69:
                    58:04:7b:83:fe:9a:75:41:bb:69:4f:3e:a3:9e:d5:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1B:38:A9:63:0C:33:76:88:2D:3D:EC:FC:D9:18:D5:30:2F:BE:BF
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:28:e2:40:26:2d:29:70:22:ef:db:22:c3:9b:0e:b8:d2:
         b9:e0:e4:03:9a:c4:2b:1a:ce:79:f2:73:5c:ff:02:50:fe:a4:
         6d:b7:f6:87:7e:32:80:bf:12:ba:63:1d:3e:72:aa:91:96:53:
         00:c7:06:7a:ab:74:00:75:18:d6:93:49:53:19:e1:83:8e:35:
         a4:b3:65:30:bf:18:72:ce:9f:3b:8b:f5:b8:8c:2c:c4:78:d3:
         f0:2f:82:34:51:f9:32:38:54:0e:dd:4c:54:32:42:3e:18:1f:
         34:16:5b:c9:d1:04:0e:d1:71:c9:e3:a8:7d:8d:87:b5:56:20:
         e1:10:0c:5a:d3:0b:c3:9c:cc:03:67:dc:98:8d:1f:b9:0c:b6:
         80:f3:b4:44:20:66:b9:84:a1:04:ee:f9:1b:c0:41:49:28:92:
         fd:3b:23:16:97:ba:d7:93:dc:89:a0:7f:ab:d2:9a:8c:f1:4b:
         f9:50:8b:b2:76:ee:79:90:95:95:c2:de:46:a0:49:8a:9d:ef:
         54:e4:9b:f9:29:a8:3e:56:c4:0e:0d:e4:9b:a0:99:b4:9d:3b:
         7d:11:a1:a0:1d:10:d4:3e:e8:df:1b:e0:1b:54:c6:5d:ec:da:
         bf:cd:81:76:3d:eb:51:0f:ed:6f:f2:2d:79:fc:2a:74:da:19:
         98:46:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:58 2026 by rpki-client