Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38322e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          N+OXQ1ZD7p8gl3e2kR1CyXVluAL14iWZ9tQnvHSw2tI=
Subject key identifier:   52:34:0C:9D:CA:32:4B:16:76:6F:4A:D8:19:E9:79:16:13:5C:82:26
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       3C007AA303310F82A4C2680978A0459C0CB02FF7
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 21 Jul 2026 01:15:06 +0000
ROA not before:           Tue 21 Jul 2026 01:10:06 +0000
ROA not after:            Tue 20 Jul 2027 01:15:06 +0000
asID:                     28065
IP address blocks:        200.114.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:00:7a:a3:03:31:0f:82:a4:c2:68:09:78:a0:45:9c:0c:b0:2f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Jul 21 01:10:06 2026 GMT
            Not After : Jul 20 01:15:06 2027 GMT
        Subject: CN=52340C9DCA324B16766F4AD819E97916135C8226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:54:1b:43:dd:a7:64:05:06:5e:86:8d:74:
                    38:4a:b4:1d:59:dd:f5:27:91:1d:2c:c1:b7:26:9f:
                    37:d9:dc:86:05:a3:56:9d:c7:9e:60:c5:cb:23:b4:
                    fe:d9:28:03:26:8f:40:63:da:37:78:a4:88:7c:ab:
                    cc:d4:25:c9:39:40:8a:8e:96:49:2f:94:ac:1c:3f:
                    e1:5a:92:bc:e7:30:69:5b:e0:f0:d2:26:4b:8d:ad:
                    91:65:57:7c:c0:80:f6:9e:ed:94:a2:da:f2:ed:d4:
                    2d:14:75:12:35:a7:27:5f:0e:a3:d1:8a:d1:31:8d:
                    ac:51:93:16:07:dc:ad:fe:1f:19:2b:26:ac:3b:5e:
                    45:b4:c5:03:94:70:3c:1e:74:12:10:15:79:d0:1e:
                    8d:9e:7c:88:34:da:75:b4:fb:fb:17:e5:75:3d:dd:
                    56:3c:1b:76:84:7f:2d:31:bc:ce:66:df:c6:8f:cb:
                    97:6a:0c:bc:f6:82:b6:94:62:a6:9a:8a:19:ee:c3:
                    2e:87:c9:aa:e2:bd:53:bd:32:fe:87:86:75:99:43:
                    39:38:35:71:d8:3b:0a:2a:dd:84:f2:ed:c6:fa:12:
                    8e:a7:ce:b4:6c:a3:41:0e:5f:38:b2:9b:be:df:27:
                    fd:8f:29:e8:9a:87:ad:b6:23:52:84:54:f4:1a:5c:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:34:0C:9D:CA:32:4B:16:76:6F:4A:D8:19:E9:79:16:13:5C:82:26
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:25:c7:45:e6:0c:73:e8:8a:d1:85:80:60:73:52:70:0e:b2:
         cc:3d:d3:52:9c:7e:de:a6:b5:d2:87:47:52:05:e6:9a:68:99:
         1f:4e:c3:b6:da:d1:1f:59:9a:a5:81:ac:6c:bf:36:e1:ea:30:
         ba:35:f5:e2:6e:b4:bd:c0:35:b4:af:55:0e:c7:a1:7b:a6:fc:
         15:76:e4:82:3d:11:e9:ac:78:2d:6a:e5:5f:8c:54:84:29:bd:
         fa:1e:2f:b6:ee:a5:41:71:1b:1f:75:be:d8:bb:c6:bb:b7:9c:
         25:f1:31:e3:bd:80:27:02:1d:60:0c:de:20:0a:21:9d:10:62:
         81:75:95:2a:d4:6e:7e:ce:9c:b3:5d:84:5c:ae:4d:99:88:6c:
         f9:8a:95:c7:89:a5:d4:24:8c:07:4c:6e:e4:e5:a5:38:77:48:
         39:4a:53:c1:31:bd:23:95:f8:7f:96:6c:32:75:7d:ab:4b:22:
         f5:4a:96:c7:41:3f:95:e9:a8:4e:c9:6c:54:ae:b4:f2:11:62:
         18:92:bf:f8:1b:a7:d2:be:73:d7:52:57:e7:e4:36:06:7f:ef:
         f8:9d:89:d5:ea:45:4e:cf:cc:87:99:9c:02:8c:04:69:51:11:
         22:a6:dd:01:71:b5:e1:13:66:14:e1:fe:58:d0:a3:da:33:aa:
         94:4e:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:03:47 2026 by rpki-client