Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e37352e302f32342d3234203d3e20323639393637.roa
File:                     3230302e362e37352e302f32342d3234203d3e20323639393637.roa (raw, json)
Hash identifier:          KbJ8FtGGU1X/wVORcgTriMQ974T00ZNCuvj3XKhccPQ=
Subject key identifier:   52:FC:8F:1B:08:2D:4D:D1:94:0A:52:5A:38:03:FE:E1:DC:72:C5:30
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       5D27010F20F1C2055F8B1BD1B6268988A29CB6F6
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e37352e302f32342d3234203d3e20323639393637.roa
Signing time:             Mon 06 Jul 2026 22:15:00 +0000
ROA not before:           Mon 06 Jul 2026 22:10:00 +0000
ROA not after:            Mon 05 Jul 2027 22:15:00 +0000
asID:                     269967
IP address blocks:        200.6.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 17:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:27:01:0f:20:f1:c2:05:5f:8b:1b:d1:b6:26:89:88:a2:9c:b6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  6 22:10:00 2026 GMT
            Not After : Jul  5 22:15:00 2027 GMT
        Subject: CN=52FC8F1B082D4DD1940A525A3803FEE1DC72C530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:ba:b8:98:3a:24:28:71:80:91:ee:70:65:
                    7c:f5:d9:81:9e:4b:2a:b9:03:81:06:fc:1e:e9:9d:
                    61:66:b8:6b:92:63:c1:b7:6b:04:5f:89:fa:18:8d:
                    e4:4d:fc:74:a2:7a:6e:74:5e:37:5e:c9:31:f6:ea:
                    43:ff:84:79:4c:52:36:aa:e5:9d:13:67:ba:43:79:
                    51:f2:20:f5:a1:87:ce:bb:dc:94:15:51:ee:95:3c:
                    ad:f3:9f:9d:2a:a9:d5:86:b0:7d:4d:15:31:53:1f:
                    75:a0:97:01:4a:06:c2:32:41:bb:4b:95:e0:04:f9:
                    f5:43:0e:7c:ed:ce:b9:e1:89:d5:00:17:f6:27:cd:
                    0f:d6:ec:ce:06:b1:15:02:da:58:cf:22:0b:3c:47:
                    33:10:2a:97:28:49:65:5f:38:7c:43:5c:44:7c:aa:
                    c8:bc:5f:3d:dd:f9:9e:08:bb:73:07:f7:f0:58:e4:
                    f2:a7:cb:66:25:91:ea:f7:c2:2c:7e:1f:13:78:76:
                    a2:dd:64:5a:b6:e1:71:ac:66:04:a0:21:52:1e:ad:
                    5b:9c:b4:a3:70:18:d6:7a:bc:92:65:b5:d5:78:82:
                    08:23:d3:ed:7c:5a:97:c1:90:0e:cc:e7:e5:28:f9:
                    10:ec:9a:59:e0:7e:83:ef:5d:b4:6b:c8:ee:ed:4e:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FC:8F:1B:08:2D:4D:D1:94:0A:52:5A:38:03:FE:E1:DC:72:C5:30
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e37352e302f32342d3234203d3e20323639393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:64:78:85:f2:da:29:cd:aa:58:c7:de:26:34:0d:c8:71:
         c7:f4:b9:85:b4:d1:43:d3:85:9c:a9:2b:cf:13:65:ee:7d:45:
         62:c9:73:9e:30:30:36:5e:ff:aa:4d:d9:ab:49:68:07:22:a3:
         e0:61:aa:27:46:ed:6b:8f:88:39:f6:c0:45:dc:d3:af:f0:b1:
         39:3a:91:2a:51:cc:40:4f:03:bd:86:fc:85:e4:f5:9d:99:08:
         12:8f:5d:a0:80:66:e0:79:b7:37:00:9a:0f:bf:a3:95:be:08:
         2e:15:81:99:bf:af:5f:7a:4f:02:6a:68:8f:2c:3c:f3:dd:63:
         ca:89:83:10:a4:5a:e9:78:75:b1:db:43:88:9b:c1:fa:b9:95:
         6f:13:06:86:f5:8b:4d:a7:79:d1:89:2f:cb:e9:76:ef:c2:f6:
         71:18:44:19:67:42:d0:65:cc:a5:c8:73:ef:33:fe:18:3c:11:
         1b:ce:44:8f:f7:a3:f9:be:46:a9:7c:ad:eb:91:7e:14:dc:83:
         04:dd:0d:e5:ab:61:30:74:82:b4:c5:cf:0f:4b:14:6a:dd:87:
         cb:46:f6:20:a0:ba:ff:e0:53:76:66:12:c5:a2:d3:25:a2:dd:
         d0:9f:b7:96:c7:c7:b2:a5:bf:4f:b9:46:54:12:20:a3:79:69:
         4f:05:cc:ce
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUXScBDyDxwgVfixvRtiaJiKKctvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzkwMTIwMzg0MzA5Q0M2RjlGQUMxRjA0MEVCRkJCN0ND
Njk2NjNCMTAeFw0yNjA3MDYyMjEwMDBaFw0yNzA3MDUyMjE1MDBaMDMxMTAvBgNV
BAMTKDUyRkM4RjFCMDgyRDRERDE5NDBBNTI1QTM4MDNGRUUxREM3MkM1MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19Lq4mDokKHGAke5wZXz12YGe
Syq5A4EG/B7pnWFmuGuSY8G3awRfifoYjeRN/HSiem50XjdeyTH26kP/hHlMUjaq
5Z0TZ7pDeVHyIPWhh8673JQVUe6VPK3zn50qqdWGsH1NFTFTH3WglwFKBsIyQbtL
leAE+fVDDnztzrnhidUAF/YnzQ/W7M4GsRUC2ljPIgs8RzMQKpcoSWVfOHxDXER8
qsi8Xz3d+Z4Iu3MH9/BY5PKny2Ylker3wix+HxN4dqLdZFq24XGsZgSgIVIerVuc
tKNwGNZ6vJJltdV4gggj0+18WpfBkA7M5+Uo+RDsmlngfoPvXbRryO7tTnAPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUUvyPGwgtTdGUClJaOAP+4dxyxTAwHwYDVR0j
BBgwFoAUyQEgOEMJzG+frB8EDr+7fMaWY7EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NEQxQzg4Q0RGQUY0MjAzM0MwNTMyODg2NUYzMkM1N0E3
NDA1NEU4RjYzOTg0MjM3NjBBNTVGNTExRDg2RjNGLzAvQzkwMTIwMzg0MzA5Q0M2
RjlGQUMxRjA0MEVCRkJCN0NDNjk2NjNCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DOTAxMjAzODQzMDlDQzZGOUZB
QzFGMDQwRUJGQkI3Q0M2OTY2M0IxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTREMUM4OENERkFGNDIwMzNDMDUzMjg4NjVGMzJDNTdBNzQwNTRFOEY2
Mzk4NDIzNzYwQTU1RjUxMUQ4NkYzRi8wLzMyMzAzMDJlMzYyZTM3MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzOTM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIBkswDQYJ
KoZIhvcNAQELBQADggEBAA9+ZHiF8topzapYx94mNA3Iccf0uYW00UPThZypK88T
Ze59RWLJc54wMDZe/6pN2atJaAcio+BhqidG7WuPiDn2wEXc06/wsTk6kSpRzEBP
A72G/IXk9Z2ZCBKPXaCAZuB5tzcAmg+/o5W+CC4VgZm/r196TwJqaI8sPPPdY8qJ
gxCkWul4dbHbQ4ibwfq5lW8TBob1i02nedGJL8vpdu/C9nEYRBlnQtBlzKXIc+8z
/hg8ERvORI/3o/m+Rql8reuRfhTcgwTdDeWrYTB0grTFzw9LFGrdh8tG9iCguv/g
U3ZmEsWi0yWi3dCft5bHx7Klv0+5RlQSIKN5aU8FzM4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:42 2026 by rpki-client