Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53DB9D6B752D6A5DD95AD2062233B48C15A2E2710C790AE5018607A9B34C4D4E/0/3230302e362e35332e302f32342d3234203d3e203237383939.roa
File:                     3230302e362e35332e302f32342d3234203d3e203237383939.roa (raw, json)
Hash identifier:          84/JHcBP7Pm/aSXt1FiTuz11zpf4tz5Zzu+om1kJUxU=
Subject key identifier:   E0:60:1F:13:13:7F:A4:BD:37:41:73:78:41:A6:0B:F9:B0:07:D7:0A
Certificate issuer:       /CN=69946F1DAE1FFF30D0BDC689850DD7DC696B416F
Certificate serial:       2480150FC4B62FF073A270795AFCFC8BB7D6861D
Authority key identifier: 69:94:6F:1D:AE:1F:FF:30:D0:BD:C6:89:85:0D:D7:DC:69:6B:41:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69946F1DAE1FFF30D0BDC689850DD7DC696B416F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53DB9D6B752D6A5DD95AD2062233B48C15A2E2710C790AE5018607A9B34C4D4E/0/3230302e362e35332e302f32342d3234203d3e203237383939.roa
Signing time:             Thu 02 Jul 2026 19:15:00 +0000
ROA not before:           Thu 02 Jul 2026 19:10:00 +0000
ROA not after:            Thu 01 Jul 2027 19:15:00 +0000
asID:                     27899
IP address blocks:        200.6.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53DB9D6B752D6A5DD95AD2062233B48C15A2E2710C790AE5018607A9B34C4D4E/0/69946F1DAE1FFF30D0BDC689850DD7DC696B416F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53DB9D6B752D6A5DD95AD2062233B48C15A2E2710C790AE5018607A9B34C4D4E/0/69946F1DAE1FFF30D0BDC689850DD7DC696B416F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69946F1DAE1FFF30D0BDC689850DD7DC696B416F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:80:15:0f:c4:b6:2f:f0:73:a2:70:79:5a:fc:fc:8b:b7:d6:86:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69946F1DAE1FFF30D0BDC689850DD7DC696B416F
        Validity
            Not Before: Jul  2 19:10:00 2026 GMT
            Not After : Jul  1 19:15:00 2027 GMT
        Subject: CN=E0601F13137FA4BD3741737841A60BF9B007D70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:a8:7d:16:c3:4c:14:50:93:6f:60:b4:d6:
                    7f:0d:02:f8:84:75:11:ed:8b:b3:29:20:7c:3b:8d:
                    a9:f0:dc:ff:25:98:ac:fe:a9:a6:b6:99:ab:19:14:
                    d1:fb:2d:1b:74:b6:95:71:f0:e5:24:ad:7d:6b:4b:
                    e8:95:ac:79:5e:82:5e:4c:25:b2:ee:25:7a:e5:f4:
                    f1:c0:10:2c:6d:e6:10:e8:40:2b:f9:22:f4:86:2f:
                    67:98:14:4b:85:81:63:27:df:46:48:d0:f6:f6:56:
                    a6:8f:31:6c:74:bc:5f:b0:1f:2a:01:82:bc:e4:42:
                    21:c8:f1:1e:04:4d:b7:d2:52:90:03:f2:be:69:30:
                    0c:0d:a4:12:f7:d9:e5:3d:44:33:74:67:75:f2:b6:
                    6d:e6:6f:ea:e7:a2:d0:8b:f2:3e:08:d5:a7:57:e9:
                    37:5c:d0:29:3a:66:5e:13:91:9f:45:19:ab:cb:5c:
                    89:56:a5:86:64:8c:60:5a:c5:24:7b:71:a2:88:25:
                    bf:ed:e2:3b:c8:d9:f8:7e:d0:4d:6d:63:47:01:fe:
                    71:77:79:0e:d6:66:c2:da:5e:30:4e:82:57:85:b0:
                    f0:06:cb:3e:94:51:2e:97:ee:2f:54:96:69:ac:04:
                    25:d9:f8:77:e8:9b:b2:b4:12:83:c6:a8:92:ae:f3:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:60:1F:13:13:7F:A4:BD:37:41:73:78:41:A6:0B:F9:B0:07:D7:0A
            X509v3 Authority Key Identifier:
                keyid:69:94:6F:1D:AE:1F:FF:30:D0:BD:C6:89:85:0D:D7:DC:69:6B:41:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53DB9D6B752D6A5DD95AD2062233B48C15A2E2710C790AE5018607A9B34C4D4E/0/69946F1DAE1FFF30D0BDC689850DD7DC696B416F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69946F1DAE1FFF30D0BDC689850DD7DC696B416F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53DB9D6B752D6A5DD95AD2062233B48C15A2E2710C790AE5018607A9B34C4D4E/0/3230302e362e35332e302f32342d3234203d3e203237383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b4:ff:9c:ee:66:ec:b3:af:28:6e:52:14:6d:93:6d:4e:9c:
         b3:e0:ed:e9:bf:49:77:f1:04:26:12:09:8f:83:fa:10:91:df:
         3e:f9:7a:e5:7f:28:ef:79:b9:a0:ac:0b:b3:c0:e0:55:51:24:
         44:d2:e0:3f:41:be:8b:e6:bf:5e:91:35:1d:f3:48:91:66:49:
         11:00:0b:9f:55:9c:ad:c1:7e:43:d8:94:9b:de:64:06:0b:b2:
         a4:a8:79:85:8c:1f:a8:af:65:55:a2:c2:42:22:ca:59:35:0b:
         c5:e8:2d:51:82:82:12:77:c9:95:6a:71:4c:92:d5:38:a0:a2:
         e9:bb:8f:68:04:8f:a3:88:89:6c:d7:18:a7:ee:93:9a:ea:6e:
         11:fe:0e:25:1b:28:8c:44:af:72:cb:d3:12:e9:4c:e0:00:6b:
         5f:7a:2f:41:bf:3d:9a:8d:b6:1c:50:90:15:ae:1b:1a:56:94:
         7b:62:f8:65:f5:24:69:74:41:da:a5:f3:ab:3b:c5:70:c3:0c:
         68:08:ae:54:aa:93:30:22:79:10:b2:7c:8c:1c:f9:5d:ca:3d:
         27:b3:86:89:b5:f9:a8:16:02:30:11:82:7e:bf:1a:1d:83:4d:
         3c:48:01:63:61:ab:10:89:70:dc:a5:4d:44:06:60:7c:6e:70:
         10:99:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:50:11 2026 by rpki-client