Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136382e302f32332d3234203d3e203131353536.roa
File:                     3230302e3131352e3136382e302f32332d3234203d3e203131353536.roa (raw, json)
Hash identifier:          luGBE4AeU/wcJ88xwQ9WSdMvxDBRiVshipmVloMzdEA=
Subject key identifier:   06:3F:79:9E:28:C3:3E:78:E8:EA:77:CF:FF:AB:12:FA:BE:B6:9A:A1
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       0DAD02B58C1FE218FFF869B64B7541DE817D8FDD
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136382e302f32332d3234203d3e203131353536.roa
Signing time:             Wed 15 Jul 2026 14:55:01 +0000
ROA not before:           Wed 15 Jul 2026 14:50:01 +0000
ROA not after:            Wed 14 Jul 2027 14:55:01 +0000
asID:                     11556
IP address blocks:        200.115.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ad:02:b5:8c:1f:e2:18:ff:f8:69:b6:4b:75:41:de:81:7d:8f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Jul 15 14:50:01 2026 GMT
            Not After : Jul 14 14:55:01 2027 GMT
        Subject: CN=063F799E28C33E78E8EA77CFFFAB12FABEB69AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:00:bd:64:a5:a5:a5:27:43:4d:2e:c3:fc:3b:
                    53:b2:cc:d8:00:58:3d:c5:99:e7:26:fc:a0:db:8d:
                    1f:ec:54:58:51:de:c0:7e:80:ad:e2:9a:60:68:fd:
                    0c:0d:00:01:db:6d:54:05:1e:5b:ff:37:ee:31:96:
                    50:a2:d1:fb:41:fe:06:be:ba:ca:52:e3:af:e4:55:
                    a2:04:cb:93:be:f3:a6:bb:7a:46:6c:41:43:65:5b:
                    eb:2b:18:96:8c:cc:94:30:94:b7:4d:47:2e:3f:6f:
                    00:f4:b6:d3:c0:5b:3c:e7:29:47:6a:ce:31:f6:03:
                    44:89:09:a4:ff:21:2c:46:71:32:2b:c0:c0:a2:a7:
                    1d:d6:43:1a:e1:dd:28:5d:55:6d:8c:49:af:89:81:
                    cf:45:e0:a7:94:ee:22:57:52:a9:28:8b:23:fa:7a:
                    c6:e8:1b:69:ee:2f:74:18:5d:78:0a:32:54:03:f9:
                    71:f2:90:a1:f6:db:42:70:d2:88:83:b1:5d:d7:ed:
                    86:d3:f7:fa:b0:e1:69:05:93:17:27:a5:74:63:75:
                    2b:ce:b3:2e:c3:a1:e8:2c:ab:d4:68:57:43:1f:75:
                    ab:81:01:b8:1a:b1:1a:7b:2a:13:73:d6:94:07:d5:
                    3b:49:17:dc:af:59:02:2c:39:e3:4c:37:09:da:86:
                    d2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3F:79:9E:28:C3:3E:78:E8:EA:77:CF:FF:AB:12:FA:BE:B6:9A:A1
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136382e302f32332d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:d3:fa:af:a4:40:e6:d1:c5:98:ac:04:1b:b2:93:a6:35:71:
         e6:f6:f4:3f:76:e2:56:5d:fd:88:42:6b:6a:03:30:45:a0:d5:
         bc:0b:3a:c1:49:2e:f5:fb:e1:88:58:92:28:03:29:d6:a6:a6:
         42:8c:c7:f4:82:01:b3:12:91:f2:5b:61:d0:f5:4b:67:62:4a:
         01:0d:f4:bf:b6:54:1f:2a:f0:b0:f2:86:3d:44:cd:e9:e5:c4:
         67:6c:78:ce:8e:c3:96:fd:6e:78:a1:a8:d3:fc:59:70:6b:aa:
         53:50:b0:63:55:b8:de:17:38:df:62:c9:ae:7a:62:9b:82:11:
         82:61:d6:93:86:e3:04:b8:03:38:a6:10:32:9e:6f:18:82:d3:
         8a:85:59:f5:f0:a3:1f:32:b9:1d:74:a8:7e:34:4e:53:8f:50:
         4f:0d:e4:d0:eb:45:66:d9:ae:2c:64:da:92:52:31:8b:c3:58:
         71:81:95:dd:c8:bb:63:7a:5a:3d:a6:31:30:d3:e8:f6:b6:5a:
         16:cc:e0:17:7b:a1:e1:17:5c:5d:df:94:41:f0:10:16:64:2a:
         38:0b:f5:ce:06:b8:ea:27:f8:36:75:a6:f2:41:58:0c:c2:01:
         64:bc:85:c0:eb:5f:74:6f:8e:c1:c3:30:82:09:da:15:7b:a1:
         81:03:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:33:15 2026 by rpki-client