Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32342d3234203d3e20323733393531.roa
File:                     3230302e3131322e3232322e302f32342d3234203d3e20323733393531.roa (raw, json)
Hash identifier:          Z3oaVUcuz1wloEvcXbKTS1MryCOVJqM91/MIhTGq7K4=
Subject key identifier:   41:DA:F2:88:F0:C2:73:6E:68:A1:0F:D7:00:2C:46:FE:E5:A4:90:40
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       789B26ACEC6597ED33677796E120031D0BEDC255
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32342d3234203d3e20323733393531.roa
Signing time:             Thu 15 Oct 2026 15:40:38 +0000
ROA not before:           Thu 15 Oct 2026 15:35:38 +0000
ROA not after:            Thu 14 Oct 2027 15:40:38 +0000
asID:                     273951
IP address blocks:        200.112.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9b:26:ac:ec:65:97:ed:33:67:77:96:e1:20:03:1d:0b:ed:c2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Oct 15 15:35:38 2026 GMT
            Not After : Oct 14 15:40:38 2027 GMT
        Subject: CN=41DAF288F0C2736E68A10FD7002C46FEE5A49040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:5b:cb:ea:b4:71:5e:a7:c8:71:72:7f:04:
                    a4:0a:07:8b:0d:bd:05:34:b3:e4:6f:5f:b6:00:92:
                    b8:5e:c9:8f:6b:22:3a:75:22:aa:f3:7e:24:67:b7:
                    c3:35:98:57:82:92:ee:85:9e:8d:17:2a:72:1b:09:
                    70:fc:0f:d5:c2:d1:a0:9e:a3:39:26:72:42:be:f7:
                    98:14:a6:1f:a5:47:c1:10:53:49:88:f0:15:d0:9a:
                    d0:4c:0f:31:85:2d:fb:d2:ed:23:c4:ce:a8:8b:ba:
                    91:78:83:54:6d:53:88:fa:41:72:64:90:72:56:e0:
                    6f:e8:43:09:02:8f:c4:39:16:3d:81:26:d6:d0:7e:
                    d7:ba:33:bb:f6:41:24:65:a2:f3:0f:27:27:de:26:
                    70:e8:c9:ce:db:c5:ad:95:a3:d2:e6:4a:06:be:6f:
                    94:f4:13:8b:d5:ea:87:ed:0c:81:34:cf:31:43:74:
                    21:9c:a9:c6:07:b6:0b:0d:ae:84:36:92:40:9f:8b:
                    78:af:d8:b2:08:12:05:b7:b8:13:71:3c:28:10:33:
                    fb:93:b1:20:fb:9c:a5:ec:62:cd:ce:b0:0a:dd:d3:
                    45:20:f6:f9:2f:29:73:be:f3:22:a3:be:91:3e:31:
                    b4:c5:ff:1a:25:36:85:e5:21:22:da:91:99:d2:7c:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DA:F2:88:F0:C2:73:6E:68:A1:0F:D7:00:2C:46:FE:E5:A4:90:40
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32342d3234203d3e20323733393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:42:ed:ec:be:0c:8b:0f:d5:15:01:ce:f6:52:34:16:b2:
         cd:05:98:0e:79:92:18:e5:0e:ae:ee:d2:29:42:b4:d7:91:ac:
         6e:74:96:d1:35:d2:5c:b3:32:e5:6a:ba:72:e2:aa:ed:dd:f7:
         8b:24:bb:2a:6b:4e:12:e6:4d:34:0b:f7:47:af:0a:06:e7:f1:
         d5:ef:4b:4e:cc:3f:43:00:08:36:6b:b3:c1:85:79:e0:3c:73:
         e5:f9:f8:9f:79:d2:df:27:e2:df:22:84:b6:f3:f5:b0:06:01:
         c7:07:cd:f3:d5:f6:88:28:6c:2c:79:d4:74:46:f3:75:8f:ee:
         8e:c9:a5:39:10:ea:95:72:92:6c:e4:21:6e:2a:f2:dc:81:d0:
         17:48:ce:ab:5a:f3:53:74:4c:fb:32:b8:9c:12:a4:63:ff:a9:
         37:e8:ea:69:90:a4:56:72:c4:19:dd:13:73:6b:52:d0:8a:e6:
         36:7e:74:4a:ad:9d:6a:0b:13:b4:2b:f2:13:f1:e4:7d:47:66:
         d3:f7:5e:f2:d6:58:34:c5:e6:3b:42:2c:bf:29:d7:f2:66:ee:
         2a:e9:d5:b6:f0:49:01:1d:5d:52:d5:57:ef:53:22:dc:32:b1:
         96:86:be:7a:3a:4f:f8:59:8a:88:7f:6e:af:84:ca:3b:13:8d:
         02:ec:96:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:51:58 2026 by rpki-client