Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39302e302f32332d3234203d3e203238333934.roa
File:                     3230302e302e39302e302f32332d3234203d3e203238333934.roa (raw, json)
Hash identifier:          gGcKd72NzTLd81UJyiAKoXiBf3bzacRe2+pC7Z6so5s=
Subject key identifier:   32:EA:49:AB:29:B5:0B:88:CB:C2:9D:D1:CF:DB:52:A9:27:19:D6:3F
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       5DC2DB2CFD7BB7C3DEC43B7CA4B16D48B3A48075
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39302e302f32332d3234203d3e203238333934.roa
Signing time:             Mon 22 Jun 2026 19:48:48 +0000
ROA not before:           Mon 22 Jun 2026 19:43:48 +0000
ROA not after:            Mon 21 Jun 2027 19:48:48 +0000
asID:                     28394
IP address blocks:        200.0.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c2:db:2c:fd:7b:b7:c3:de:c4:3b:7c:a4:b1:6d:48:b3:a4:80:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Jun 22 19:43:48 2026 GMT
            Not After : Jun 21 19:48:48 2027 GMT
        Subject: CN=32EA49AB29B50B88CBC29DD1CFDB52A92719D63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9c:10:f6:59:3e:39:e8:24:36:8e:4a:a9:a5:
                    5f:01:ae:c7:0d:38:7a:66:f1:a1:9b:89:78:c3:20:
                    c9:6f:65:8c:16:02:dc:36:08:82:7f:37:f5:ae:d1:
                    f7:3f:b8:83:c0:3d:69:06:97:72:14:0f:7a:df:f3:
                    af:d9:61:3f:0d:0d:16:ba:40:c5:49:3e:a8:af:aa:
                    a4:fd:ef:04:61:aa:58:50:25:24:cc:03:16:5f:3c:
                    56:76:30:29:f6:f1:b1:29:87:84:6c:72:d2:83:c6:
                    53:fb:69:70:e5:ea:ac:72:49:b2:74:ed:5e:ae:83:
                    66:4e:1e:c9:7b:b5:f8:68:b6:0c:41:d2:68:d8:f0:
                    9d:5d:75:c8:d1:fd:b4:77:7a:d3:55:76:73:30:1a:
                    b7:c4:56:10:2c:05:2f:6d:d1:1e:88:06:dd:84:e2:
                    52:a4:14:90:dc:11:ef:cd:72:17:97:a1:4c:aa:5a:
                    d6:8e:b7:fe:e8:4e:1d:21:d0:7d:d9:15:69:68:b2:
                    f0:a1:bb:7b:76:2c:d5:ca:d8:3c:01:f6:d1:3c:69:
                    f6:fc:d1:79:63:54:8f:6c:a4:24:7f:9e:91:15:9c:
                    c9:f6:d7:5e:48:e1:f9:52:0b:f0:4a:b5:3e:69:da:
                    de:41:e3:b9:6c:a6:0a:98:52:18:a6:6e:5f:cc:c0:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EA:49:AB:29:B5:0B:88:CB:C2:9D:D1:CF:DB:52:A9:27:19:D6:3F
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3230302e302e39302e302f32332d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:c7:0b:5f:53:ca:3a:6e:26:81:db:27:72:b1:10:01:af:
         71:3f:ef:14:fe:16:ea:aa:67:7e:10:a6:85:9f:78:f7:78:2a:
         bf:2f:2e:27:1c:89:05:39:f5:ac:a6:b1:a3:18:0c:32:88:f3:
         aa:9d:bc:af:f8:e0:4c:34:00:b3:70:10:3e:a9:6c:cc:e7:9e:
         0e:fb:75:3f:3a:38:11:82:4a:62:f1:c8:9d:be:f6:3f:97:00:
         b6:1d:5e:19:75:4f:46:0d:26:69:f7:57:8b:d3:9d:02:6f:a8:
         2b:9c:d7:b9:1f:8d:60:b6:05:cd:2a:3f:ad:e6:48:19:7b:dc:
         e7:b2:93:fc:62:2b:a2:36:dd:49:b6:6c:fd:b0:ac:df:28:f3:
         85:64:30:ac:f2:26:01:c9:31:d7:22:6a:5a:b2:19:bd:c5:d8:
         6a:34:82:1d:a5:b5:7f:d8:b3:22:a8:4b:38:4e:7c:4e:9e:f5:
         f5:6d:d2:08:3e:dd:f0:32:35:ab:62:75:4e:d8:cb:ab:d0:90:
         3d:ea:65:c0:84:bd:e4:bb:1a:7d:c2:07:2b:45:1e:91:58:07:
         b2:61:62:62:20:7c:8b:96:c3:42:f1:f0:ee:78:cf:65:0e:17:
         8f:77:b7:03:90:d5:a9:b5:10:e8:20:57:45:28:d9:f0:df:42:
         80:de:3e:b3
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUXcLbLP17t8PexDt8pLFtSLOkgHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1OTFBMTMzMTYzNDZBMkJDRUYwN0Y2REY4RDQ0REQw
MjUwRjg0MTAeFw0yNjA2MjIxOTQzNDhaFw0yNzA2MjExOTQ4NDhaMDMxMTAvBgNV
BAMTKDMyRUE0OUFCMjlCNTBCODhDQkMyOUREMUNGREI1MkE5MjcxOUQ2M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlnBD2WT456CQ2jkqppV8BrscN
OHpm8aGbiXjDIMlvZYwWAtw2CIJ/N/Wu0fc/uIPAPWkGl3IUD3rf86/ZYT8NDRa6
QMVJPqivqqT97wRhqlhQJSTMAxZfPFZ2MCn28bEph4RsctKDxlP7aXDl6qxySbJ0
7V6ug2ZOHsl7tfhotgxB0mjY8J1ddcjR/bR3etNVdnMwGrfEVhAsBS9t0R6IBt2E
4lKkFJDcEe/NcheXoUyqWtaOt/7oTh0h0H3ZFWlosvChu3t2LNXK2DwB9tE8afb8
0XljVI9spCR/npEVnMn2115I4flSC/BKtT5p2t5B47lspgqYUhimbl/MwHdPAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUMupJqym1C4jLwp3Rz9tSqScZ1j8wHwYDVR0j
BBgwFoAU/1kaEzFjRqK87wf2341E3QJQ+EEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Qzk1MkRDMEFDRkZGOTA4QzZGQTE0QzhBN0FBRThCNjMz
MUIzMERBRTA0MTBGMTQ4RTk0Q0YxQjQ3QTgzMkQ5LzAvRkY1OTFBMTMzMTYzNDZB
MkJDRUYwN0Y2REY4RDQ0REQwMjUwRjg0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjU5MUExMzMxNjM0NkEyQkNF
RjA3RjZERjhENDRERDAyNTBGODQxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEM5NTJEQzBBQ0ZGRjkwOEM2RkExNEM4QTdBQUU4QjYzMzFCMzBEQUUw
NDEwRjE0OEU5NENGMUI0N0E4MzJEOS8wLzMyMzAzMDJlMzAyZTM5MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjM4MzMzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByABaMA0GCSqG
SIb3DQEBCwUAA4IBAQAs78cLX1PKOm4mgdsncrEQAa9xP+8U/hbqqmd+EKaFn3j3
eCq/Ly4nHIkFOfWsprGjGAwyiPOqnbyv+OBMNACzcBA+qWzM554O+3U/OjgRgkpi
8cidvvY/lwC2HV4ZdU9GDSZp91eL050Cb6grnNe5H41gtgXNKj+t5kgZe9znspP8
YiuiNt1Jtmz9sKzfKPOFZDCs8iYByTHXImpashm9xdhqNIIdpbV/2LMiqEs4TnxO
nvX1bdIIPt3wMjWrYnVO2Mur0JA96mXAhL3kuxp9wgcrRR6RWAeyYWJiIHyLlsNC
8fDueM9lDhePd7cDkNWptRDoIFdFKNnw30KA3j6z
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:44 2026 by rpki-client