Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e312e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e312e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          we8+Ys3XKf9cpQN89HzYFKq3r++7/+YHv+sDVo6m2T8=
Subject key identifier:   BB:97:7E:92:AF:ED:EF:D8:86:34:4A:AE:59:08:89:59:5D:81:27:1D
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       54BBE3D3FD40840B6E7ABE82916B9F5D5258FCD1
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e312e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 17 Mar 2026 14:34:19 +0000
ROA not before:           Tue 17 Mar 2026 14:29:19 +0000
ROA not after:            Tue 16 Mar 2027 14:34:19 +0000
asID:                     27756
IP address blocks:        200.115.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bb:e3:d3:fd:40:84:0b:6e:7a:be:82:91:6b:9f:5d:52:58:fc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Mar 17 14:29:19 2026 GMT
            Not After : Mar 16 14:34:19 2027 GMT
        Subject: CN=BB977E92AFEDEFD886344AAE590889595D81271D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:0c:7f:e2:8a:9b:95:bf:52:17:9f:a9:13:
                    f7:50:f3:31:8a:a1:c8:8e:4c:32:f5:c7:fd:0c:bb:
                    f2:f1:df:4d:86:52:e3:9e:bc:79:db:a3:29:1a:65:
                    73:84:5f:e9:69:76:83:37:e5:f9:4f:3c:af:0d:f3:
                    48:5b:2c:cf:5e:0b:b3:55:6c:37:36:74:d6:77:b7:
                    9f:2f:8b:29:5d:87:71:77:78:9e:e3:e1:d6:0b:96:
                    3a:80:90:cf:86:3f:06:05:6e:ff:2e:66:84:87:49:
                    15:ec:cc:9a:9f:d5:c3:3c:6a:c1:9a:e2:a2:05:e4:
                    91:0a:98:68:8c:ae:81:2b:48:1c:43:12:8d:77:86:
                    7d:ec:48:c3:46:84:08:48:61:48:e7:f2:16:a4:1a:
                    9d:c3:cb:3e:f8:d1:b8:e9:a5:af:53:dd:35:d6:85:
                    14:f0:f4:28:63:45:8b:65:96:21:25:1a:d9:dc:f7:
                    4a:98:40:9f:d5:e1:54:2a:93:b6:ad:b8:12:eb:e2:
                    b3:4d:46:24:be:68:b6:44:6d:a8:61:e5:a5:76:1c:
                    1b:6d:5d:54:f0:d3:a7:50:3d:30:96:7e:3e:1b:06:
                    b4:2f:d6:dd:43:90:b6:63:02:34:55:f8:fc:c5:8a:
                    22:27:e0:38:d8:2d:e1:e2:42:8a:a5:07:42:fa:8b:
                    31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:97:7E:92:AF:ED:EF:D8:86:34:4A:AE:59:08:89:59:5D:81:27:1D
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e312e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:32:fc:6e:23:55:8e:a1:30:09:e2:95:b2:1d:6a:af:38:b1:
         60:53:83:a4:a6:5c:bd:bf:38:d8:e2:a8:17:a2:1e:cb:f8:04:
         83:ad:74:aa:a4:18:68:a3:7b:23:ed:48:65:7a:52:12:71:86:
         a7:33:de:a4:0a:68:b3:56:f5:ee:a5:9f:14:0b:11:51:8b:cd:
         31:f7:23:57:c6:c8:6e:09:d5:2e:3f:85:43:3c:3b:93:d6:93:
         67:73:42:6e:54:a4:4b:08:d7:48:9f:b2:55:da:96:90:f9:e7:
         aa:c3:2d:98:20:c9:dc:84:da:e1:e5:39:fd:46:99:83:ae:78:
         36:44:b9:cb:4f:d3:a8:63:de:67:d7:43:31:9f:8a:6a:ee:04:
         7a:ae:be:a1:6b:ba:ea:fe:ed:df:99:63:d1:70:cf:e9:7f:ff:
         82:79:56:3f:09:c9:49:21:1e:85:ba:12:cb:cf:45:a3:cd:a0:
         61:de:b5:de:1b:b4:93:66:32:19:93:75:b8:fc:9e:c0:2b:b4:
         e6:b2:02:72:8d:e2:c5:1b:8b:c8:1a:67:ab:0f:c8:4e:70:dc:
         d2:2d:ef:93:d6:44:cd:cb:a8:ec:0a:e3:08:bc:35:dd:a6:60:
         db:df:81:42:ce:bc:d2:72:eb:bb:c0:56:a5:9e:05:6b:4f:95:
         b1:40:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:46:43 2026 by rpki-client