Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e352e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e352e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          si5qa+tCPuVvnXELUbNembf0Eti4uw3aLx3SFd3wfE8=
Subject key identifier:   CA:36:E0:CE:88:5A:07:B9:7B:D4:55:89:77:26:52:CA:D8:D6:37:E0
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       4A028566D350C44182595E8DB3743DB85FFCD78B
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e352e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 17 Mar 2026 14:34:18 +0000
ROA not before:           Tue 17 Mar 2026 14:29:18 +0000
ROA not after:            Tue 16 Mar 2027 14:34:18 +0000
asID:                     27756
IP address blocks:        200.115.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:02:85:66:d3:50:c4:41:82:59:5e:8d:b3:74:3d:b8:5f:fc:d7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Mar 17 14:29:18 2026 GMT
            Not After : Mar 16 14:34:18 2027 GMT
        Subject: CN=CA36E0CE885A07B97BD45589772652CAD8D637E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9c:d7:31:de:01:4a:28:30:00:31:23:13:cf:
                    98:7d:76:62:6d:aa:59:53:cd:70:46:7e:9d:59:22:
                    6d:cb:06:01:23:cf:dd:c0:34:43:23:15:37:69:9d:
                    03:c3:8f:67:90:ca:20:b0:08:7b:44:71:f5:af:e7:
                    d4:f7:62:19:82:56:5f:d9:db:fd:ff:d8:f8:11:52:
                    06:9c:bd:69:1c:ce:0e:fe:4f:67:2f:4b:a2:35:af:
                    da:4b:d6:cf:be:62:64:0d:9a:e3:c8:a1:8b:63:e3:
                    c2:d2:6c:dc:54:26:2f:5c:a9:c6:35:be:d3:2f:7c:
                    7c:e4:7f:ae:a4:d2:81:b6:0b:60:bc:12:ea:b4:06:
                    ea:03:23:06:bf:62:63:4a:07:88:ec:7c:fc:e2:6d:
                    2e:ed:2d:a4:8e:03:cb:f7:83:56:ad:6c:61:f9:9c:
                    09:4b:00:f4:b6:31:be:4b:b0:aa:f1:87:76:7a:7d:
                    8b:ef:eb:11:bd:83:f5:36:aa:29:8a:d9:10:a5:25:
                    73:f6:c2:a3:20:33:df:d1:36:86:1a:c0:a8:51:c4:
                    5b:44:45:d1:be:7e:ac:49:ed:3c:06:14:d7:86:a5:
                    52:ee:93:ce:ee:b7:32:29:74:a1:74:de:dd:6d:a6:
                    03:0d:84:95:98:b9:1d:d2:3c:dc:96:e8:5b:ff:d5:
                    d6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:36:E0:CE:88:5A:07:B9:7B:D4:55:89:77:26:52:CA:D8:D6:37:E0
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e352e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:9c:e4:a4:03:f6:19:fb:8c:c2:ec:9b:d0:02:4e:11:74:31:
         cb:fd:4f:6b:9d:01:90:14:d0:fb:58:1b:2b:60:b3:3d:06:d2:
         9e:70:74:02:53:50:25:6c:f8:4d:c0:f3:a5:60:35:0b:75:61:
         19:15:55:a5:d8:15:3d:3f:06:b4:c3:4c:f5:01:34:4c:1c:23:
         67:03:11:31:51:18:2d:89:ba:a4:ea:bf:f8:87:dd:00:86:31:
         80:99:dd:b9:3b:89:cf:77:31:27:83:8c:fe:32:58:dc:ad:93:
         fc:80:f3:8d:1b:af:37:7e:26:cf:72:d7:82:b6:67:90:a8:ee:
         2e:30:3c:59:dd:8c:8f:e5:d9:70:80:95:4a:c9:9e:1b:a5:a2:
         d8:28:58:df:88:b1:9f:c2:92:ee:a3:51:c2:8e:06:6c:26:8b:
         b1:d3:16:da:c4:a7:3d:b4:80:69:5e:1f:e8:ba:5a:bf:8a:4b:
         a6:31:86:d4:44:39:02:35:05:0b:b4:90:d4:05:0c:53:92:42:
         be:ca:fe:bf:8b:f1:fa:44:ad:03:a4:00:5e:63:b8:26:f0:4a:
         19:18:0b:60:a0:4e:3f:33:c0:86:57:8d:c1:e0:7e:34:ae:a4:
         ef:21:f5:c3:18:92:0b:23:cd:cb:7b:e2:82:ba:33:17:75:0b:
         fa:70:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:03 2026 by rpki-client