Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa
File:                     3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa (raw, json)
Hash identifier:          5CNvSbLWgeX3tS6EMy2dGjAbTZ2x6lNNEEldJIFp320=
Subject key identifier:   9D:AB:78:90:19:0A:68:67:C7:CC:91:0F:D6:1B:FC:D4:19:9C:65:68
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       711C1F3E819801BD5C12164DF14109D5618165AB
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa
Signing time:             Wed 15 Jul 2026 14:55:03 +0000
ROA not before:           Wed 15 Jul 2026 14:50:03 +0000
ROA not after:            Wed 14 Jul 2027 14:55:03 +0000
asID:                     26426
IP address blocks:        200.115.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1c:1f:3e:81:98:01:bd:5c:12:16:4d:f1:41:09:d5:61:81:65:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Jul 15 14:50:03 2026 GMT
            Not After : Jul 14 14:55:03 2027 GMT
        Subject: CN=9DAB7890190A6867C7CC910FD61BFCD4199C6568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:be:51:ae:28:ca:d6:4c:56:e5:a8:c8:b8:
                    f1:9c:85:af:fd:a9:51:02:09:d2:88:32:f5:72:6f:
                    d8:0a:9e:df:6e:da:70:39:f8:a5:04:d6:ec:69:b9:
                    05:6c:83:2b:d5:87:75:09:8a:aa:39:94:a9:e9:52:
                    11:06:54:8a:15:f6:a1:6e:63:e0:a1:72:bd:6c:8c:
                    2f:b7:f0:b8:ea:13:5c:54:9a:71:19:01:a0:73:bd:
                    8a:3f:18:9c:5e:3f:cf:51:5a:c0:1c:9d:20:72:76:
                    49:f8:e0:6f:22:5e:ad:13:c4:28:ff:d7:e0:ba:7e:
                    4e:1b:8a:b2:cc:5f:7f:0e:9b:08:2a:d1:77:cf:33:
                    38:cc:29:7d:2c:92:19:f1:bb:c7:fe:ac:b2:ac:c8:
                    51:e6:0d:54:62:2e:69:21:4f:d4:f1:01:92:d3:7c:
                    29:4a:c6:c3:ba:c2:a2:be:13:a9:68:91:01:5d:06:
                    d5:b1:c4:ac:9c:c8:77:42:7f:44:50:ce:a8:8c:a9:
                    e7:60:60:d9:52:88:ff:30:d7:b4:b3:6f:c7:5d:84:
                    0f:49:ac:0d:b0:15:10:6a:36:d1:66:bd:88:77:f9:
                    74:08:8a:9a:72:0f:93:03:9d:62:3d:12:d3:d3:a6:
                    12:e1:5c:cf:8e:89:a6:ac:9d:5f:f1:d5:cb:26:d3:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AB:78:90:19:0A:68:67:C7:CC:91:0F:D6:1B:FC:D4:19:9C:65:68
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136322e302f32332d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:26:63:1b:99:80:ff:b3:63:ab:d8:1c:d2:1e:3b:fe:92:42:
         13:64:db:63:df:c0:26:de:55:2b:b6:5a:dc:88:2c:e3:8c:65:
         19:9f:da:e3:ce:c5:80:97:9b:70:23:51:56:43:63:4d:44:d1:
         5d:53:80:cf:ef:ad:56:f3:04:e4:38:cd:2b:55:79:a4:d0:d2:
         89:a7:2d:a6:32:8d:98:08:2f:90:07:09:7f:47:6a:18:1c:94:
         5e:1b:c7:f6:ab:e0:00:e8:8b:20:15:22:93:00:3b:aa:37:90:
         82:cc:95:24:0b:05:80:57:72:e3:64:57:80:6d:f2:9c:d0:cf:
         bb:cc:ab:22:91:f9:1e:f0:ea:19:81:4e:5e:eb:4a:83:6c:fc:
         f8:d9:5f:5a:80:61:3f:2a:a4:35:8e:41:0c:57:cb:55:a0:2e:
         83:d9:df:37:96:46:22:c3:f8:b7:2f:b2:26:37:e7:3c:5b:9b:
         01:e8:7c:1c:b1:21:16:d7:7f:77:e1:fe:42:31:32:a4:3b:2f:
         3e:19:70:2e:3e:04:ff:eb:cc:65:85:8c:ff:c2:ab:ee:1f:15:
         5c:97:63:b6:9f:5a:d5:9c:ea:31:7f:b6:b8:73:96:b0:cf:41:
         e6:3d:cc:89:d8:b2:39:36:3a:cf:1d:6e:2b:43:39:1b:d1:77:
         f2:72:ec:80
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcRwfPoGYAb1cEhZN8UEJ1WGBZaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIwRkU4QTZFMzUyQzlDOUVDOUI0QzdDRkZGRjc3QjMy
MzkzNkMxNDAeFw0yNjA3MTUxNDUwMDNaFw0yNzA3MTQxNDU1MDNaMDMxMTAvBgNV
BAMTKDlEQUI3ODkwMTkwQTY4NjdDN0NDOTEwRkQ2MUJGQ0Q0MTk5QzY1NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuL5RrijK1kxW5ajIuPGcha/9
qVECCdKIMvVyb9gKnt9u2nA5+KUE1uxpuQVsgyvVh3UJiqo5lKnpUhEGVIoV9qFu
Y+Chcr1sjC+38LjqE1xUmnEZAaBzvYo/GJxeP89RWsAcnSBydkn44G8iXq0TxCj/
1+C6fk4birLMX38Omwgq0XfPMzjMKX0skhnxu8f+rLKsyFHmDVRiLmkhT9TxAZLT
fClKxsO6wqK+E6lokQFdBtWxxKycyHdCf0RQzqiMqedgYNlSiP8w17Szb8ddhA9J
rA2wFRBqNtFmvYh3+XQIippyD5MDnWI9EtPTphLhXM+OiaasnV/x1csm014fAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnat4kBkKaGfHzJEP1hv81BmcZWgwHwYDVR0j
BBgwFoAUog/opuNSycnsm0x8//93syOTbBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QjMzOTE2NUZDMjkyQUM5RDEzMjZEQ0E3OUIwNUYxN0Qz
OUY4Nzg1MDVDRjMxNkJCNzA2NTA2RjBBQUJERkY1LzAvQTIwRkU4QTZFMzUyQzlD
OUVDOUI0QzdDRkZGRjc3QjMyMzkzNkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMjBGRThBNkUzNTJDOUM5RUM5
QjRDN0NGRkZGNzdCMzIzOTM2QzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUIzMzkxNjVGQzI5MkFDOUQxMzI2RENBNzlCMDVGMTdEMzlGODc4NTA1
Q0YzMTZCQjcwNjUwNkYwQUFCREZGNS8wLzMyMzAzMDJlMzEzMTM1MmUzMTM2MzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzQzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByHOi
MA0GCSqGSIb3DQEBCwUAA4IBAQA1JmMbmYD/s2Or2BzSHjv+kkITZNtj38Am3lUr
tlrciCzjjGUZn9rjzsWAl5twI1FWQ2NNRNFdU4DP761W8wTkOM0rVXmk0NKJpy2m
Mo2YCC+QBwl/R2oYHJReG8f2q+AA6IsgFSKTADuqN5CCzJUkCwWAV3LjZFeAbfKc
0M+7zKsikfke8OoZgU5e60qDbPz42V9agGE/KqQ1jkEMV8tVoC6D2d83lkYiw/i3
L7ImN+c8W5sB6HwcsSEW13934f5CMTKkOy8+GXAuPgT/68xlhYz/wqvuHxVcl2O2
n1rVnOoxf7a4c5awz0HmPcyJ2LI5NjrPHW4rQzkb0XfycuyA
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:52:33 2026 by rpki-client