Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e35382e3232342e302f32302d3234203d3e203133343839.roa
File:                     3230302e35382e3232342e302f32302d3234203d3e203133343839.roa (raw, json)
Hash identifier:          5lGEIwls5RouTDWPdDi76hN0J9+k2CMbKlRRLcnHWW8=
Subject key identifier:   91:F9:59:9A:21:AC:75:3F:90:0B:A9:03:D5:B9:8B:41:C5:F7:56:C6
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       7FF7E926E0E97F2DD4FDD1B9FFF432C0E0D2B745
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e35382e3232342e302f32302d3234203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 20:35:08 +0000
ROA not before:           Thu 19 Mar 2026 20:30:08 +0000
ROA not after:            Thu 18 Mar 2027 20:35:08 +0000
asID:                     13489
IP address blocks:        200.58.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f7:e9:26:e0:e9:7f:2d:d4:fd:d1:b9:ff:f4:32:c0:e0:d2:b7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 20:30:08 2026 GMT
            Not After : Mar 18 20:35:08 2027 GMT
        Subject: CN=91F9599A21AC753F900BA903D5B98B41C5F756C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:ec:7c:fc:3d:f5:ff:81:d6:c3:cf:3a:e9:
                    2c:fc:24:99:ba:de:99:1f:06:c5:ce:3c:37:06:77:
                    0c:07:85:9b:33:90:cb:95:de:15:3b:2d:56:8c:3f:
                    62:a4:f7:1a:9b:2d:07:d9:89:39:58:14:ec:f2:a5:
                    f9:aa:72:f5:b9:d6:78:7d:37:65:cd:36:0b:47:ce:
                    11:a0:74:87:22:dc:8b:3e:28:8f:92:8c:e8:7d:ed:
                    72:10:c4:a8:9b:32:10:d9:8a:0b:c9:83:d3:bc:4c:
                    94:b0:b0:3a:34:c7:fd:14:44:8e:e4:49:7e:df:1f:
                    05:d7:01:0b:89:c3:bb:34:f5:b3:0a:ee:de:54:4d:
                    ce:4f:7c:6f:37:0e:2a:8f:89:b6:09:74:e2:0a:a7:
                    55:d7:8a:1c:ad:1f:e8:30:15:11:10:f8:7d:da:43:
                    8e:6b:3d:eb:2a:b0:ac:47:16:c0:9f:44:88:7e:0e:
                    ce:0e:98:9b:63:2f:af:7f:07:95:1e:9e:44:88:1c:
                    1f:e5:e8:da:b1:d1:79:70:ca:10:09:b8:8b:a7:8d:
                    47:a7:9b:a0:b6:cb:c3:e9:bb:e7:84:ab:02:8f:bd:
                    04:1e:44:db:56:23:96:0b:ee:1a:77:5a:fd:20:53:
                    b4:b1:b1:89:f7:02:6b:3e:63:bd:c3:63:65:e4:85:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F9:59:9A:21:AC:75:3F:90:0B:A9:03:D5:B9:8B:41:C5:F7:56:C6
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e35382e3232342e302f32302d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:f8:6e:5e:55:61:1a:eb:cf:33:f1:ae:e6:b8:7c:da:34:3e:
         18:b5:36:70:e3:34:2c:e9:79:1e:c5:9e:0c:26:61:12:e1:58:
         62:95:41:54:08:19:2d:ca:33:88:35:0e:4b:8b:7a:f0:44:ca:
         37:eb:00:d0:59:2d:56:90:6e:6e:45:fa:6b:36:44:1d:ba:19:
         4e:c7:7a:66:39:be:46:d4:c4:0b:97:a3:64:11:58:f4:77:5c:
         32:30:5e:b6:bd:fd:0d:35:62:16:4b:79:25:10:d3:aa:e5:51:
         d9:d8:7d:53:a6:4d:28:d9:09:88:41:00:23:9e:95:6e:f7:f1:
         9c:74:76:0c:51:af:f7:91:bf:31:45:d4:58:04:55:c9:ec:5e:
         36:70:a7:35:7d:6f:ac:4b:12:7f:b9:7b:e1:ef:37:30:0f:77:
         e9:d2:04:56:ec:6f:0d:d8:0a:1a:75:59:60:4c:d5:ee:86:49:
         df:5e:ea:be:a5:8d:a8:ba:f3:3c:ea:09:23:3a:d1:67:d4:91:
         4f:8b:e9:3e:68:62:25:78:ed:4d:cc:d8:16:15:b3:3b:26:f4:
         54:5f:f3:39:4d:ab:6d:20:65:32:d5:c3:16:33:c2:12:f8:0d:
         80:d9:7d:e8:e8:be:cb:4e:85:b0:a3:1e:da:75:c2:70:60:d9:
         b0:30:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:29:18 2026 by rpki-client