Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3235322e302f32342d3234203d3e20323636383734.roa
File:                     3230302e32392e3235322e302f32342d3234203d3e20323636383734.roa (raw, json)
Hash identifier:          E5yRPwbnzk6G8M4dzsQ52waqdF0g/DOlmMItWYzr3qA=
Subject key identifier:   87:94:12:22:E1:C6:2B:5C:B9:E6:1C:26:9C:6E:3E:A5:D1:B1:33:8C
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       1FD499BB67DCD41EDB2D4897C198115CD26841E6
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3235322e302f32342d3234203d3e20323636383734.roa
Signing time:             Sat 10 Oct 2026 19:39:49 +0000
ROA not before:           Sat 10 Oct 2026 19:34:49 +0000
ROA not after:            Sat 09 Oct 2027 19:39:49 +0000
asID:                     266874
IP address blocks:        200.29.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 19:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d4:99:bb:67:dc:d4:1e:db:2d:48:97:c1:98:11:5c:d2:68:41:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Oct 10 19:34:49 2026 GMT
            Not After : Oct  9 19:39:49 2027 GMT
        Subject: CN=87941222E1C62B5CB9E61C269C6E3EA5D1B1338C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:09:da:6d:50:15:fb:b2:bc:b2:84:65:67:
                    10:1e:1e:49:ac:e6:8c:cf:c7:2b:6a:32:c0:ec:7a:
                    ec:e2:dd:47:cc:41:67:5c:d5:2c:e5:b8:2e:8a:e1:
                    cf:2d:f3:5d:16:de:6d:f0:b0:ea:c9:0c:4b:db:61:
                    37:61:b2:85:9d:35:1a:7a:c3:6f:77:6c:96:74:74:
                    23:5e:bf:67:25:1f:68:33:bc:0c:47:2f:23:92:a9:
                    29:65:fe:e7:e1:93:4e:31:21:2e:ce:60:d0:fa:63:
                    ce:4a:ad:e6:2d:cd:6b:d0:2c:e2:bd:12:1a:46:5b:
                    21:33:d9:19:f9:25:15:66:bb:3b:41:88:07:a7:ef:
                    a3:69:ff:e2:42:93:b2:c4:77:ee:7e:ea:77:ff:77:
                    37:a2:01:04:b6:4f:68:38:70:02:9b:94:d8:40:d2:
                    40:ea:7a:04:32:28:3f:7d:92:e4:2a:d2:08:66:ea:
                    32:30:25:c3:45:f9:48:9d:e6:d2:0a:e3:db:a2:37:
                    35:c0:3d:ff:66:51:9a:25:a9:ba:8b:d3:66:91:27:
                    af:de:f6:1d:20:b4:2b:d1:ab:38:2d:d5:78:a4:28:
                    98:05:42:d2:56:51:d2:ae:05:ed:35:8c:12:fe:b2:
                    44:d5:22:d7:f3:53:14:91:b2:61:e2:69:c6:e8:bf:
                    0a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:94:12:22:E1:C6:2B:5C:B9:E6:1C:26:9C:6E:3E:A5:D1:B1:33:8C
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3230302e32392e3235322e302f32342d3234203d3e20323636383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:eb:1f:5e:65:2c:cf:bb:ca:09:61:63:df:07:75:0e:26:b1:
         4f:dc:2c:46:73:1f:e6:a0:b8:89:5b:c3:a6:2e:bf:02:b8:b3:
         d5:63:81:74:9f:8c:84:32:0b:ff:72:94:da:73:0b:5f:bd:a7:
         e0:45:fc:ab:66:c6:19:8d:ef:09:84:39:a8:d7:29:72:4d:af:
         ac:90:f7:9a:4f:20:8c:e0:fa:8a:79:58:7a:f4:8b:f0:2d:a3:
         2f:81:15:9f:3e:ba:37:b6:11:fc:8e:3f:58:f4:9a:15:84:71:
         b4:15:f4:61:85:c5:5b:3b:f7:6b:5a:fd:de:d9:56:1a:b5:20:
         4e:35:09:ac:d7:ea:31:40:89:ad:32:f6:da:45:da:58:9e:61:
         99:17:77:b2:c8:e3:07:e3:56:e9:21:3f:7d:ab:51:4d:a7:37:
         79:e5:59:9b:38:24:15:ac:e3:26:d3:29:a5:e4:ec:f4:ac:38:
         fc:ee:b2:71:54:ae:c4:ae:5a:f5:85:5b:c0:04:a1:3d:b0:85:
         50:35:76:91:19:bb:fa:15:74:cf:05:28:f8:36:df:59:ab:37:
         3a:ce:61:9f:15:74:a3:36:38:e4:14:e0:ad:03:f1:13:53:26:
         f4:90:13:dc:c2:69:1e:da:8f:1c:01:e4:58:e2:32:0d:06:b6:
         cb:a6:87:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:47:11 2026 by rpki-client