Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e322e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e322e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          oQQQIpa1qchwIdbnQmcvuk2USsgVntcCxnmMZFT2BVk=
Subject key identifier:   C9:45:62:3B:C7:7E:DC:2D:25:E3:5E:58:E0:2C:76:3B:E7:05:11:15
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       4014E55A37ED1D967B3B77F2DD6F6F84B3AD0546
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e322e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 17 Mar 2026 14:34:19 +0000
ROA not before:           Tue 17 Mar 2026 14:29:19 +0000
ROA not after:            Tue 16 Mar 2027 14:34:19 +0000
asID:                     27756
IP address blocks:        200.115.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:14:e5:5a:37:ed:1d:96:7b:3b:77:f2:dd:6f:6f:84:b3:ad:05:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Mar 17 14:29:19 2026 GMT
            Not After : Mar 16 14:34:19 2027 GMT
        Subject: CN=C945623BC77EDC2D25E35E58E02C763BE7051115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:c4:2b:35:2a:66:4a:41:a7:3a:89:e5:38:
                    c5:9f:e5:9f:8b:ae:94:b4:d1:f2:00:45:a1:7a:0f:
                    b1:df:86:e4:07:6b:41:4e:ab:ae:ae:93:a5:22:42:
                    96:83:e5:95:d5:4c:c6:01:5a:bf:81:d1:f1:80:06:
                    21:84:58:2a:e9:45:36:f6:41:d3:81:17:a4:e3:33:
                    4b:10:f0:26:e3:a8:47:1a:75:75:39:d1:35:26:01:
                    65:23:1e:77:5c:13:11:e9:ab:39:2f:d0:0c:aa:9e:
                    27:2b:dc:03:73:76:0e:10:da:83:7b:f2:58:d4:5b:
                    e1:e3:ee:b3:c3:41:2b:77:90:26:50:50:c9:48:28:
                    e5:39:2b:7b:71:b6:9d:be:9c:c3:ed:32:c5:e7:60:
                    c3:d8:ce:35:d1:65:b9:7e:ce:c3:8c:b7:69:fa:c6:
                    4e:8b:4c:6f:53:cc:dd:7c:d3:be:1d:e0:27:a2:81:
                    b7:ad:e4:6e:05:1b:e5:75:90:2d:7e:ca:02:6d:75:
                    37:5a:1c:b1:2d:36:c9:d8:9d:b9:ae:da:2f:f0:88:
                    87:88:16:af:ed:ad:15:db:84:af:43:3a:79:e5:0f:
                    77:81:2b:aa:21:f1:61:32:62:11:ba:b5:83:06:74:
                    4b:9b:f5:ef:1a:d5:2a:5f:20:42:ff:93:3c:32:d6:
                    e4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:45:62:3B:C7:7E:DC:2D:25:E3:5E:58:E0:2C:76:3B:E7:05:11:15
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e322e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:26:db:d5:cc:66:54:d7:c5:03:de:8f:cf:61:ca:b1:f1:f3:
         8b:8c:dc:1d:20:ff:9d:d1:32:c1:bd:93:ad:51:ed:85:e9:b1:
         a7:1a:d3:58:69:83:7b:7d:37:53:f5:2b:aa:be:d1:58:9a:32:
         c6:3c:6d:5a:41:78:04:0d:ea:e5:6a:f3:fd:ef:e1:2f:80:61:
         5e:80:eb:86:ca:78:18:9e:3c:d7:19:21:fc:64:a3:df:a4:60:
         cf:eb:cf:26:df:c6:68:e0:17:24:43:b5:c5:69:40:55:30:03:
         8d:db:45:b0:2f:e7:2d:61:84:b7:13:c1:b9:81:1f:ad:a6:fa:
         e9:2f:b4:a3:73:cc:ef:14:97:62:de:dd:95:56:b1:24:97:6f:
         3a:9d:27:69:d8:3f:c3:70:6c:63:a7:fb:67:18:08:e0:44:fe:
         bb:9f:20:8c:65:ef:95:5e:96:1f:fd:c7:7a:4b:a6:74:2b:a6:
         cc:3b:b4:30:37:41:66:a6:03:26:ce:24:15:ec:2d:a5:35:eb:
         d6:41:d1:bb:cc:1a:bc:a9:1b:3f:40:89:2f:c4:39:6e:46:97:
         d9:ac:d5:42:7f:fb:90:a2:05:5d:ce:e4:4c:89:38:16:8b:86:
         de:4c:58:4f:87:94:49:a9:1a:81:f4:5d:49:a9:ba:ba:06:50:
         1a:55:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:49 2026 by rpki-client