Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/3230302e332e3139352e302f32342d3234203d3e2033333536.roa
File:                     3230302e332e3139352e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          i836BPuBjtwPyFnY7LPLF817AKJMBN97cXIH2NKBOTw=
Subject key identifier:   F5:1E:AD:69:14:61:AB:7D:76:20:86:F7:B1:79:66:DC:F6:08:48:42
Certificate issuer:       /CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
Certificate serial:       60BB8ABAEAEEF74C7399CA3D0CDF51785A55048B
Authority key identifier: 2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/3230302e332e3139352e302f32342d3234203d3e2033333536.roa
Signing time:             Sat 11 Jul 2026 06:50:00 +0000
ROA not before:           Sat 11 Jul 2026 06:45:00 +0000
ROA not after:            Sat 10 Jul 2027 06:50:00 +0000
asID:                     3356
IP address blocks:        200.3.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bb:8a:ba:ea:ee:f7:4c:73:99:ca:3d:0c:df:51:78:5a:55:04:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
        Validity
            Not Before: Jul 11 06:45:00 2026 GMT
            Not After : Jul 10 06:50:00 2027 GMT
        Subject: CN=F51EAD691461AB7D762086F7B17966DCF6084842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:76:a3:a3:8d:93:d1:11:fa:75:e3:20:29:cd:
                    e9:ea:2f:6b:d9:75:58:70:3b:d2:ed:04:0f:5b:9f:
                    01:8e:3f:bd:4a:37:95:7e:93:99:29:a3:bc:06:71:
                    b6:46:3b:b0:dc:65:d2:7d:e1:0f:3a:94:41:4c:53:
                    e2:df:ef:bb:db:e2:39:10:2c:91:72:35:db:6f:05:
                    6c:ee:2c:5e:47:75:9d:7e:7f:52:6e:85:b4:97:8f:
                    22:35:8a:09:2d:d2:be:d6:b3:3e:14:63:bc:fb:69:
                    c7:e0:59:67:6e:c4:76:d9:83:6e:3c:c6:76:88:b5:
                    09:5d:de:84:7f:b9:56:f3:ca:e0:41:e7:1d:fa:88:
                    ac:c2:04:33:49:03:fc:7e:fc:e4:69:d1:b9:d0:46:
                    af:81:8d:fb:70:9b:f8:0b:29:23:bc:a8:77:a9:7e:
                    21:2e:36:74:40:cd:7a:ee:fd:08:62:4e:94:0b:b2:
                    77:fd:14:70:5f:df:3b:bb:e5:b5:83:43:e2:9c:46:
                    42:41:1c:19:b4:9d:cd:68:73:cd:f1:2a:78:29:e0:
                    6e:fd:ee:9c:1e:e3:35:4f:49:84:f0:bc:ae:8c:79:
                    5d:97:74:fe:6a:2b:0e:08:a1:8c:e2:e5:40:97:0b:
                    e2:97:c2:8e:f9:44:da:2c:b1:d1:40:f5:0e:ff:dd:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1E:AD:69:14:61:AB:7D:76:20:86:F7:B1:79:66:DC:F6:08:48:42
            X509v3 Authority Key Identifier:
                keyid:2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/3230302e332e3139352e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:dd:1e:a5:65:ad:7f:a5:e1:b8:60:9b:20:a1:c6:c3:d3:bf:
         96:49:e4:f6:d4:05:ea:a9:c5:82:1b:02:91:12:bd:88:22:97:
         d2:58:40:15:46:36:3a:d3:f6:a1:f0:f6:f7:f7:bf:6e:9b:10:
         9a:06:a7:1a:a9:29:96:be:6c:7f:12:a9:18:eb:a2:84:d3:5e:
         5c:da:08:af:19:95:8b:82:3b:f4:99:8d:70:cc:3f:5b:2d:fd:
         e8:4d:dc:6a:cd:1e:29:ba:88:7d:e2:d9:27:ad:b0:46:0a:cd:
         44:49:5a:d7:fb:19:e5:86:f4:3f:b8:0f:80:84:5d:91:a9:5a:
         ba:9a:7a:67:d5:9d:36:ff:38:e6:43:15:a2:ce:61:26:1b:17:
         b2:da:a6:0f:de:be:1c:93:a9:ce:0c:4d:e8:9b:f1:5a:01:2d:
         40:33:d7:34:d1:60:64:72:91:fc:d7:06:7f:6f:9d:a9:35:dd:
         09:41:7d:38:96:9b:2f:98:b6:e5:a8:42:93:1c:ea:c4:fa:82:
         b0:b8:9f:cb:4f:d9:39:91:9b:4e:7e:a8:16:08:df:fc:ae:f1:
         a1:42:60:c1:36:f2:75:e3:57:05:2c:6e:80:fa:17:5f:7a:f0:
         24:d5:15:88:fd:91:e0:59:27:56:1b:46:02:16:36:55:39:35:
         3a:34:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:22:43 2026 by rpki-client