Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e372e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e372e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          IVu1bAgLAUrciRJQD68PUeSEvz4ZTKWR1EdFxhryS6Y=
Subject key identifier:   C1:C9:D8:E0:01:50:5D:28:63:87:EA:CB:2F:F5:07:BD:6E:2C:8E:61
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       549C4310C4259664D8BDA2060E73CB0ED6A119A3
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e372e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 17 Mar 2026 14:34:16 +0000
ROA not before:           Tue 17 Mar 2026 14:29:16 +0000
ROA not after:            Tue 16 Mar 2027 14:34:16 +0000
asID:                     27756
IP address blocks:        200.115.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 17:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9c:43:10:c4:25:96:64:d8:bd:a2:06:0e:73:cb:0e:d6:a1:19:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Mar 17 14:29:16 2026 GMT
            Not After : Mar 16 14:34:16 2027 GMT
        Subject: CN=C1C9D8E001505D286387EACB2FF507BD6E2C8E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:76:0b:80:29:ea:f3:ad:20:16:92:e9:02:
                    1f:e1:eb:04:10:b2:00:a1:92:d0:cd:4c:60:c3:f1:
                    c7:80:f0:9a:c9:2b:3e:7c:7e:30:f2:54:a2:f4:dd:
                    fd:6e:2d:56:3b:86:a8:be:fc:e7:b2:57:63:f1:a0:
                    96:59:80:bc:b3:7a:dd:8a:cf:5e:22:4d:08:9d:7d:
                    8e:78:60:f3:dd:46:75:fd:26:cf:be:fe:73:fc:15:
                    6e:ca:29:44:c3:cd:54:6c:95:e0:c9:97:77:40:f8:
                    c8:8f:92:22:fa:6b:81:a8:2a:a8:04:db:9e:5f:32:
                    39:7b:82:b1:d7:26:e5:44:68:62:f4:f1:c8:53:8c:
                    3e:7e:ac:77:54:a5:ec:63:e8:79:c7:d3:82:28:61:
                    80:d6:92:89:d2:6a:6a:ef:96:6d:79:d7:ae:d0:62:
                    24:8e:4c:e3:f2:bb:e9:3e:ab:6e:68:76:7c:cf:28:
                    51:e1:33:50:4b:90:8a:28:ba:cd:73:97:d6:c5:56:
                    57:c8:96:02:f9:db:18:fc:63:e7:b3:eb:da:e4:bf:
                    93:f4:c8:75:78:56:9f:78:ba:83:ae:d2:6b:08:fe:
                    74:42:53:81:f8:33:d4:ca:56:71:f9:5f:c3:7e:53:
                    b6:1f:10:b7:b1:c6:8e:b7:73:d0:fe:f8:7a:fc:de:
                    ce:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C9:D8:E0:01:50:5D:28:63:87:EA:CB:2F:F5:07:BD:6E:2C:8E:61
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e372e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:be:bc:67:34:0b:61:95:c7:b3:77:66:a5:2c:cc:1f:e7:9f:
         f1:12:31:a2:05:d8:a7:05:9e:87:ce:20:1a:c8:7e:0b:3d:a3:
         c1:48:2f:75:5f:e8:08:dd:d4:0a:8a:39:a5:0a:5d:b8:fe:f7:
         f7:6b:6e:76:66:e2:f4:fa:8c:bc:ae:08:69:2b:c0:52:95:dd:
         76:01:d3:e6:b8:d5:10:39:2f:76:6e:8c:98:e9:fd:af:66:32:
         3d:25:bf:5a:c8:a9:4f:03:0b:21:76:b6:48:26:63:f4:43:fe:
         ba:00:63:ef:7a:60:53:f7:38:49:31:ff:41:70:f7:db:09:f5:
         d0:f5:8c:4f:02:8f:9d:c6:41:84:96:83:5e:33:9b:02:61:11:
         4e:6a:6b:b9:5b:de:6a:8d:2c:83:ea:74:64:70:3b:ce:7f:e2:
         16:8f:37:15:68:69:74:19:8c:be:1c:35:64:08:2a:0d:b8:0b:
         68:cf:bc:8f:95:17:99:b7:d2:6f:eb:da:3f:3f:85:47:ad:8e:
         44:a1:25:54:a6:57:4c:99:ad:f8:1d:ff:1e:9a:c3:ca:0d:98:
         75:5a:c4:2e:d0:7e:29:f1:15:f1:73:76:7c:44:aa:bb:12:87:
         3b:eb:9b:60:7c:1b:77:8b:13:ca:85:38:ce:79:59:70:97:4f:
         e2:d8:71:11
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUVJxDEMQllmTYvaIGDnPLDtahGaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4QTlEQTczMTIwNkM3MzkwQzhBNkVCMTZBQ0VFMjg1
REFEQ0UwMzAeFw0yNjAzMTcxNDI5MTZaFw0yNzAzMTYxNDM0MTZaMDMxMTAvBgNV
BAMTKEMxQzlEOEUwMDE1MDVEMjg2Mzg3RUFDQjJGRjUwN0JENkUyQzhFNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZnYLgCnq860gFpLpAh/h6wQQ
sgChktDNTGDD8ceA8JrJKz58fjDyVKL03f1uLVY7hqi+/OeyV2PxoJZZgLyzet2K
z14iTQidfY54YPPdRnX9Js++/nP8FW7KKUTDzVRsleDJl3dA+MiPkiL6a4GoKqgE
255fMjl7grHXJuVEaGL08chTjD5+rHdUpexj6HnH04IoYYDWkonSamrvlm15167Q
YiSOTOPyu+k+q25odnzPKFHhM1BLkIoous1zl9bFVlfIlgL52xj8Y+ez69rkv5P0
yHV4Vp94uoOu0msI/nRCU4H4M9TKVnH5X8N+U7YfELexxo63c9D++Hr83s4hAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUwcnY4AFQXShjh+rLL/UHvW4sjmEwHwYDVR0j
BBgwFoAUpIqdpzEgbHOQyKbrFqzuKF2tzgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82N0NFNTg1NTQzN0E1RThGQTA5QUFFQzdEMkQ3MzI5MEMw
NjdDQzhFQjIwRTA0RUMwOTJDRDM3NDFEOUE2RDgyLzAvQTQ4QTlEQTczMTIwNkM3
MzkwQzhBNkVCMTZBQ0VFMjg1REFEQ0UwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDhBOURBNzMxMjA2QzczOTBD
OEE2RUIxNkFDRUUyODVEQURDRTAzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjdDRTU4NTU0MzdBNUU4RkEwOUFBRUM3RDJENzMyOTBDMDY3Q0M4RUIy
MEUwNEVDMDkyQ0QzNzQxRDlBNkQ4Mi8wLzMyMzAzMDJlMzEzMTM1MmUzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNzM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIcwcwDQYJ
KoZIhvcNAQELBQADggEBANC+vGc0C2GVx7N3ZqUszB/nn/ESMaIF2KcFnofOIBrI
fgs9o8FIL3Vf6Ajd1AqKOaUKXbj+9/drbnZm4vT6jLyuCGkrwFKV3XYB0+a41RA5
L3ZujJjp/a9mMj0lv1rIqU8DCyF2tkgmY/RD/roAY+96YFP3OEkx/0Fw99sJ9dD1
jE8Cj53GQYSWg14zmwJhEU5qa7lb3mqNLIPqdGRwO85/4haPNxVoaXQZjL4cNWQI
Kg24C2jPvI+VF5m30m/r2j8/hUetjkShJVSmV0yZrfgd/x6aw8oNmHVaxC7Qfinx
FfFzdnxEqrsShzvrm2B8G3eLE8qFOM55WXCXT+LYcRE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:09:23 2026 by rpki-client