Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e332e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e332e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          +2/dh+LnvEC4pjHS8Mwwl8hYskOINIx1uRSNLi3/I1g=
Subject key identifier:   41:D5:16:C3:25:D3:12:CD:DB:B5:25:3C:39:4B:8E:57:85:53:C4:A7
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       5BE96B9699968586A6228C78FF7E117FE107AA96
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e332e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 17 Mar 2026 14:34:19 +0000
ROA not before:           Tue 17 Mar 2026 14:29:19 +0000
ROA not after:            Tue 16 Mar 2027 14:34:19 +0000
asID:                     27756
IP address blocks:        200.115.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e9:6b:96:99:96:85:86:a6:22:8c:78:ff:7e:11:7f:e1:07:aa:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Mar 17 14:29:19 2026 GMT
            Not After : Mar 16 14:34:19 2027 GMT
        Subject: CN=41D516C325D312CDDBB5253C394B8E578553C4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:ed:be:21:4b:3a:41:e0:48:ad:a6:4a:c8:
                    df:23:85:bc:0d:69:9a:22:d8:a2:7e:53:c0:d8:9a:
                    cd:08:12:72:70:8d:de:aa:2a:04:a8:26:4b:74:aa:
                    b4:50:a2:8c:1f:f5:3e:1e:7b:99:69:8e:c1:6f:a6:
                    58:67:0d:6e:7c:83:0b:a6:78:72:ff:97:b1:ee:f3:
                    18:d6:b8:d8:d4:5c:39:3e:ac:06:7e:fe:57:ea:4e:
                    a3:fa:5a:8e:8b:f0:7a:f7:a3:8f:11:8e:83:3f:da:
                    28:8e:f9:df:26:a7:08:fd:84:04:a0:df:9b:82:87:
                    4a:86:78:d4:74:81:44:65:e0:39:c8:ce:c4:d8:14:
                    9e:2c:f6:b3:76:21:8c:92:d1:b4:eb:5d:12:f5:8d:
                    3e:af:84:bb:71:bf:f2:fe:21:0e:48:39:b2:36:c0:
                    70:04:a0:30:50:30:88:95:04:24:39:89:90:42:25:
                    e0:f1:b6:ca:a3:d0:10:01:02:fb:3e:7f:78:a3:9d:
                    47:ed:47:3a:8e:b9:16:17:38:bd:97:b1:30:5c:60:
                    da:76:e5:58:ac:a8:e2:df:60:99:48:ff:c2:b1:93:
                    fc:df:40:f8:59:d1:08:ef:8d:bf:91:4d:64:c8:25:
                    a0:8f:19:a8:0c:e2:96:b3:31:d0:34:81:77:82:86:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D5:16:C3:25:D3:12:CD:DB:B5:25:3C:39:4B:8E:57:85:53:C4:A7
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e332e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:f4:96:e3:8d:1b:44:09:47:2f:f7:fb:f2:01:3e:37:4a:e2:
         1e:1b:c1:6d:ea:db:fd:99:07:51:3d:2f:c6:d5:30:9d:01:44:
         9f:e1:ed:af:09:b6:c0:f2:c5:b4:cc:46:f9:10:fa:21:a7:be:
         55:33:89:23:de:2d:f2:5e:01:cd:a8:cb:34:c3:7c:34:d6:25:
         e8:a3:f0:3a:ac:6f:1d:fd:21:3f:c4:c0:c4:c3:e4:9a:b1:61:
         26:f8:9b:27:ab:c6:27:21:78:0d:66:5b:7b:cc:87:12:47:05:
         02:3f:f8:07:b1:34:3a:06:94:a1:e9:03:3c:e8:f5:cf:c6:43:
         2a:26:bc:fc:03:c6:8c:f0:fa:ba:18:37:39:b3:a8:48:b4:a7:
         9b:96:25:b3:e6:15:19:f0:25:07:52:bc:73:93:64:0b:cf:52:
         97:dc:b0:16:99:4c:f2:b5:2f:41:be:cd:7d:7a:8d:e9:10:3e:
         ec:ee:74:5b:ec:81:0d:be:a3:74:8b:b8:14:8e:70:c0:d0:a5:
         2b:58:18:83:cd:02:1e:e0:3f:6a:7e:99:25:93:8c:9f:05:50:
         f0:b5:88:32:67:0e:38:9a:fd:cd:f0:95:20:e1:36:2d:49:0f:
         0b:05:ff:e1:ca:91:1b:98:33:3a:96:d9:73:2f:64:56:18:6b:
         ed:24:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:46:16 2026 by rpki-client