Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38302e302f32332d3234203d3e20323733303838.roa
File:                     3230302e3131342e38302e302f32332d3234203d3e20323733303838.roa (raw, json)
Hash identifier:          vZBLxAzuGktn7ppt/p4PgTxD9+syg9NAkjj1ZOY/FBA=
Subject key identifier:   95:EB:53:C7:41:45:F1:AB:45:4C:B0:57:62:9F:24:87:5D:AF:30:B8
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       6EB5B65523C6DFBFB44BD34D505F7445B8A5039F
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38302e302f32332d3234203d3e20323733303838.roa
Signing time:             Tue 21 Jul 2026 02:15:07 +0000
ROA not before:           Tue 21 Jul 2026 02:10:07 +0000
ROA not after:            Tue 20 Jul 2027 02:15:07 +0000
asID:                     273088
IP address blocks:        200.114.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b5:b6:55:23:c6:df:bf:b4:4b:d3:4d:50:5f:74:45:b8:a5:03:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Jul 21 02:10:07 2026 GMT
            Not After : Jul 20 02:15:07 2027 GMT
        Subject: CN=95EB53C74145F1AB454CB057629F24875DAF30B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:36:9e:83:32:d1:0c:fc:aa:4b:7d:36:86:
                    e5:cf:65:54:44:99:69:70:0c:99:98:71:2b:79:2a:
                    f6:cf:eb:b9:43:ac:1c:1a:11:e6:fb:63:3f:e0:46:
                    ca:d7:99:f5:5b:d2:2f:82:aa:c8:5e:3c:16:6a:b2:
                    b8:a1:11:49:4c:74:af:ca:d8:33:62:85:ab:ae:ea:
                    c1:25:c6:e0:ae:60:69:48:f6:f6:c6:96:4e:5a:4f:
                    03:04:73:93:f3:33:72:c4:0a:7a:1e:dd:f0:20:aa:
                    72:c1:ce:78:7f:0a:b5:84:6e:1f:9d:c6:d4:ec:d0:
                    55:e7:fd:39:5a:67:07:e1:37:81:61:33:72:b9:13:
                    fd:41:5c:47:62:ee:04:2c:d2:ec:9a:37:75:ea:70:
                    a6:85:ba:5a:23:1a:97:2e:93:98:66:33:99:fd:15:
                    51:bf:65:ce:82:ef:43:cf:44:5e:c4:ab:d9:68:31:
                    52:e1:21:7c:0c:cf:81:52:80:c7:d9:31:c2:9e:7a:
                    36:cf:5e:b3:3f:ef:f4:b0:be:02:44:89:6c:79:d3:
                    29:84:31:cf:49:49:1e:65:b0:35:7e:31:76:e9:2d:
                    a2:d2:14:1d:b8:3a:0a:15:c5:1e:3c:b8:af:4b:f0:
                    fc:bd:4a:82:89:07:b5:e9:a1:5b:67:89:e8:ea:16:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EB:53:C7:41:45:F1:AB:45:4C:B0:57:62:9F:24:87:5D:AF:30:B8
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38302e302f32332d3234203d3e20323733303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:bb:67:4e:f8:a4:46:15:f6:92:0a:68:6e:c2:ac:74:4f:b4:
         51:70:f7:7d:fd:ca:73:47:65:f0:34:f3:a0:10:8e:12:c4:47:
         f1:2d:fe:57:00:df:0b:f0:b7:97:4a:d8:44:9d:13:ad:2b:c5:
         ff:b7:7a:22:07:03:ff:35:e2:0d:33:a6:25:0b:47:21:e1:a7:
         ce:a4:65:df:2b:10:bc:ce:44:5b:ed:24:5e:3d:a7:e6:af:6a:
         95:bc:7f:6e:8e:77:c1:35:99:bf:b7:d0:11:e6:ce:24:d6:c7:
         c8:ec:4c:d1:10:5e:53:d0:f3:9c:de:3a:30:91:8f:b5:34:03:
         92:42:11:ae:f9:37:a0:53:24:1b:39:1a:46:bf:9d:c1:82:38:
         54:aa:c7:76:76:c8:00:96:a3:33:60:30:3b:7e:8f:b3:c2:38:
         2e:fb:a4:1d:c7:9d:60:5e:4e:03:bb:1b:39:fb:f9:90:47:bc:
         87:92:55:2f:12:0a:f4:fb:7b:8e:2e:8f:d0:f2:d1:f1:21:0c:
         f7:aa:52:33:fb:c9:aa:d7:66:52:31:18:1b:36:1a:9f:76:bc:
         5b:52:07:7b:90:7b:35:9a:ff:75:91:89:33:d2:2c:7d:a0:ec:
         08:48:e1:c2:3a:eb:42:93:4f:20:b9:af:ba:64:a1:96:b2:ab:
         34:88:29:bd
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbrW2VSPG37+0S9NNUF90RbilA58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyNDNDNzNBMThBRUQ2MzREN0VFQjhEMzRFNDQwOERG
RUI1MzE3MDAeFw0yNjA3MjEwMjEwMDdaFw0yNzA3MjAwMjE1MDdaMDMxMTAvBgNV
BAMTKDk1RUI1M0M3NDE0NUYxQUI0NTRDQjA1NzYyOUYyNDg3NURBRjMwQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTEzaegzLRDPyqS302huXPZVRE
mWlwDJmYcSt5KvbP67lDrBwaEeb7Yz/gRsrXmfVb0i+CqshePBZqsrihEUlMdK/K
2DNihauu6sElxuCuYGlI9vbGlk5aTwMEc5PzM3LECnoe3fAgqnLBznh/CrWEbh+d
xtTs0FXn/TlaZwfhN4FhM3K5E/1BXEdi7gQs0uyaN3XqcKaFulojGpcuk5hmM5n9
FVG/Zc6C70PPRF7Eq9loMVLhIXwMz4FSgMfZMcKeejbPXrM/7/SwvgJEiWx50ymE
Mc9JSR5lsDV+MXbpLaLSFB24OgoVxR48uK9L8Py9SoKJB7XpoVtniejqFn15AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUletTx0FF8atFTLBXYp8kh12vMLgwHwYDVR0j
BBgwFoAUkCQ8c6GK7WNNfuuNNORAjf61MXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEMwMzM0NUQzODRDRDM4OTBGMjY2NzE0NDg1NEFGNkJG
QzY4NjAyMEExNkRGNkMxMzQ1NDUxNUM3ODA3NzFELzAvOTAyNDNDNzNBMThBRUQ2
MzREN0VFQjhEMzRFNDQwOERGRUI1MzE3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDI0M0M3M0ExOEFFRDYzNEQ3
RUVCOEQzNEU0NDA4REZFQjUzMTcwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRDMDMzNDVEMzg0Q0QzODkwRjI2NjcxNDQ4NTRBRjZCRkM2ODYwMjBB
MTZERjZDMTM0NTQ1MTVDNzgwNzcxRC8wLzMyMzAzMDJlMzEzMTM0MmUzODMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzODM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByHJQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCNu2dO+KRGFfaSCmhuwqx0T7RRcPd9/cpzR2Xw
NPOgEI4SxEfxLf5XAN8L8LeXSthEnROtK8X/t3oiBwP/NeINM6YlC0ch4afOpGXf
KxC8zkRb7SRePafmr2qVvH9ujnfBNZm/t9AR5s4k1sfI7EzREF5T0POc3jowkY+1
NAOSQhGu+TegUyQbORpGv53BgjhUqsd2dsgAlqMzYDA7fo+zwjgu+6Qdx51gXk4D
uxs5+/mQR7yHklUvEgr0+3uOLo/Q8tHxIQz3qlIz+8mq12ZSMRgbNhqfdrxbUgd7
kHs1mv91kYkz0ix9oOwISOHCOutCk08gua+6ZKGWsqs0iCm9
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:57 2026 by rpki-client