Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e32342e33322e302f31392d3234203d3e203133343839.roa
File:                     3230302e32342e33322e302f31392d3234203d3e203133343839.roa (raw, json)
Hash identifier:          vvmtiaLndqo5DUbLDka3W4x/MFsHyCBZirfSn0z4BT4=
Subject key identifier:   78:09:05:EF:13:66:E8:BD:C7:63:C6:A4:C5:4E:BC:22:B3:65:E1:32
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       1955D20E90A5F5D6CC1861D3D3BFE6D26C31030F
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e32342e33322e302f31392d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 20:35:00 +0000
ROA not before:           Thu 19 Mar 2026 20:30:00 +0000
ROA not after:            Thu 18 Mar 2027 20:35:00 +0000
asID:                     13489
IP address blocks:        200.24.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:55:d2:0e:90:a5:f5:d6:cc:18:61:d3:d3:bf:e6:d2:6c:31:03:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 20:30:00 2026 GMT
            Not After : Mar 18 20:35:00 2027 GMT
        Subject: CN=780905EF1366E8BDC763C6A4C54EBC22B365E132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:8b:b9:da:2e:56:bc:01:f2:67:5a:1e:c1:
                    59:02:7d:ee:39:76:6c:7a:b3:2b:d9:a3:e4:c0:f4:
                    0f:6a:41:8f:8a:f5:b4:20:be:9d:e9:d5:f8:93:df:
                    78:8d:38:42:64:e2:0d:99:45:81:1e:ec:3b:51:8b:
                    f2:0d:e0:9f:89:e4:65:5e:be:45:f1:2b:e5:0b:5f:
                    e0:db:44:1a:e6:fe:c7:7d:05:98:81:ba:3f:44:02:
                    40:29:ef:79:33:43:b3:c9:df:ae:c5:3c:ca:38:ca:
                    d5:5d:8a:c7:6d:dd:cc:cb:42:b5:ec:50:4b:c5:ae:
                    36:5e:5d:39:6b:d7:30:c7:78:0c:71:a5:5e:10:f1:
                    bf:44:56:9f:ef:12:4e:a4:45:a3:0d:ee:79:bc:d5:
                    14:94:88:2a:82:4b:3f:b4:f0:83:86:17:62:72:6a:
                    ad:fc:99:d5:de:b1:9b:e1:98:4e:c3:2f:3b:63:68:
                    f3:f3:a4:92:d1:c0:6c:e7:e9:8b:e6:3e:f7:f2:1d:
                    f4:08:06:27:ac:77:22:72:f3:01:fb:b8:48:cf:11:
                    88:47:e5:06:9f:2b:a6:8a:db:a4:1a:c5:f9:1b:e4:
                    af:96:f3:9c:64:94:8f:47:1c:1c:f4:31:bd:fb:03:
                    df:26:fa:dd:ae:fd:1c:e2:74:17:85:73:26:16:4d:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:09:05:EF:13:66:E8:BD:C7:63:C6:A4:C5:4E:BC:22:B3:65:E1:32
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e32342e33322e302f31392d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:b4:c0:54:be:fe:f6:e1:52:2a:8d:54:a2:b6:4a:d2:a1:1d:
         57:e1:6f:a5:01:dc:a1:84:f9:58:8c:87:bd:66:c4:7d:13:be:
         44:c3:22:c7:76:a5:5f:f9:c2:64:4d:eb:b7:06:79:c0:5b:d9:
         f9:e1:36:1e:e4:50:4b:b4:c7:bb:29:f3:1c:78:5f:df:7d:18:
         07:3a:06:1e:c1:ef:bc:08:14:91:35:b6:66:9d:4c:e6:a9:3e:
         2d:56:8d:e3:89:cd:e9:3a:30:9e:29:5b:7c:60:ae:b8:3a:71:
         09:61:85:fb:93:b9:49:c0:67:79:2a:dd:9c:fd:42:11:d2:11:
         c3:af:ef:d1:a4:ab:0d:55:14:c9:b6:65:88:66:63:51:cf:f3:
         01:5f:7a:d9:e9:c3:8e:1c:76:64:d2:38:d2:3f:52:93:ba:8b:
         53:7b:a0:54:96:52:e6:eb:0b:46:cd:b4:c8:a3:ff:7a:9c:9c:
         7f:76:a8:6d:b5:f3:6c:18:3b:e9:e0:e7:d0:85:7a:d6:cb:56:
         04:56:fd:9f:4d:cd:65:ae:4d:5f:fb:62:0a:a7:f3:46:60:a1:
         ae:9d:f9:25:2c:5d:26:f3:cc:8a:95:eb:a1:e0:e0:4a:76:21:
         62:4f:1c:10:b7:8e:16:d5:f1:1c:4e:ca:ef:16:f8:3d:8d:8c:
         5f:d7:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:29:18 2026 by rpki-client