Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa
File:                     3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          8fqA3AwOfjXwwYqjxFX79TPuuuCb2xFY0q/thOkCtVc=
Subject key identifier:   13:70:03:A6:10:EB:47:9F:AF:F3:1D:C1:2C:E3:5A:D8:60:DB:92:AE
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       01BCF43E62C0E05DAAC8B53D48CC4490489B9031
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa
Signing time:             Wed 15 Jul 2026 14:55:02 +0000
ROA not before:           Wed 15 Jul 2026 14:50:02 +0000
ROA not after:            Wed 14 Jul 2027 14:55:02 +0000
asID:                     11556
IP address blocks:        200.115.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bc:f4:3e:62:c0:e0:5d:aa:c8:b5:3d:48:cc:44:90:48:9b:90:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Jul 15 14:50:02 2026 GMT
            Not After : Jul 14 14:55:02 2027 GMT
        Subject: CN=137003A610EB479FAFF31DC12CE35AD860DB92AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a1:e3:e0:76:22:1a:22:3a:ad:60:5b:f6:16:
                    b6:41:69:89:a4:b2:c2:91:6b:9d:58:1b:27:2b:fc:
                    4a:93:35:c1:b9:62:19:f2:59:e7:21:9a:59:65:af:
                    f5:e9:47:f1:44:d5:57:ee:2d:48:17:a9:23:3f:24:
                    42:fc:b1:b4:c0:d0:25:24:2e:91:58:cd:84:61:7d:
                    2a:ee:8a:c2:3e:f5:46:1f:7a:3d:fe:8f:b6:77:97:
                    90:70:dc:09:48:99:0e:a0:8c:98:17:c0:8b:9b:0b:
                    db:a1:9e:1f:80:01:63:dd:8f:9c:19:b5:b5:f4:c2:
                    63:9b:ea:95:28:06:02:9b:a3:ad:e1:db:42:5e:06:
                    73:8e:70:59:43:9d:ae:63:47:00:56:ed:3a:96:2c:
                    64:40:97:f6:56:3e:f1:35:5f:ec:45:86:a6:35:44:
                    86:74:c6:c4:94:c7:4f:79:7d:34:af:44:4d:ea:98:
                    7d:12:25:bc:b7:29:79:93:40:e8:69:b6:46:92:6a:
                    7d:37:ab:f8:d3:15:a2:61:51:7d:c9:ee:6e:a3:92:
                    4c:17:43:b2:cb:bb:54:bd:99:26:f4:7f:9b:4e:5e:
                    3f:b8:d9:70:1c:74:fe:c3:59:c6:26:d0:fb:ac:9b:
                    0b:9c:d0:0c:2a:87:c3:8d:db:6c:5e:54:f5:a6:8a:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:70:03:A6:10:EB:47:9F:AF:F3:1D:C1:2C:E3:5A:D8:60:DB:92:AE
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:85:f0:f3:d9:fa:7a:62:55:37:3f:d8:4c:76:98:2d:31:
         bc:51:ad:da:3f:4b:07:8f:d8:d5:dd:bb:3c:2a:10:97:29:4b:
         21:e0:3f:81:f7:89:f7:f4:16:61:60:90:0e:60:93:8e:7e:c0:
         6b:90:b6:e5:eb:f8:59:63:00:98:8e:ce:de:0d:01:ed:e9:8e:
         2f:ee:db:c6:38:99:b8:83:81:3b:cd:2b:16:a1:d8:73:ed:4a:
         a2:bd:1f:7d:98:bd:30:7e:87:b0:1f:fe:7b:96:5e:c9:1c:4b:
         b7:80:3f:d0:f8:6a:be:cd:6e:c6:f3:4b:ba:80:98:f6:4c:4d:
         11:3f:a1:72:e6:be:b4:45:a8:c1:a7:f9:1c:2a:8c:d7:6f:f0:
         12:88:5a:91:54:ab:79:86:64:17:39:38:bb:4a:67:91:fe:cd:
         6e:ad:cf:4b:61:e9:b0:06:a3:f0:a5:63:b5:b8:b6:f5:cd:20:
         e9:14:10:9e:a0:8d:f4:ff:aa:e2:85:6a:bd:54:f1:a3:a8:de:
         b6:d0:0a:9c:4d:95:39:bb:53:ce:61:05:ef:1b:08:dc:2b:59:
         97:6d:60:6f:23:a4:72:42:5b:7b:77:5f:f1:9c:e7:39:b9:82:
         89:4b:47:89:70:15:17:61:45:d8:cb:29:87:4a:f6:ec:b0:21:
         bd:eb:82:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:33:09 2026 by rpki-client