Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3234382e302f32312d3234203d3e20323632313534.roa
File:                     3230302e35352e3234382e302f32312d3234203d3e20323632313534.roa (raw, json)
Hash identifier:          52Oi5504sp1nphBqL/FaUK0MkPnUo338KpgX2y0td7k=
Subject key identifier:   D0:62:16:63:3B:49:7F:85:70:12:7F:28:E7:3F:E5:15:1B:A9:E6:6E
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       0A1052DCBA8058C49BF909DE669C74C80C151707
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3234382e302f32312d3234203d3e20323632313534.roa
Signing time:             Mon 16 Mar 2026 18:34:07 +0000
ROA not before:           Mon 16 Mar 2026 18:29:07 +0000
ROA not after:            Mon 15 Mar 2027 18:34:07 +0000
asID:                     262154
IP address blocks:        200.55.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 09:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:10:52:dc:ba:80:58:c4:9b:f9:09:de:66:9c:74:c8:0c:15:17:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: Mar 16 18:29:07 2026 GMT
            Not After : Mar 15 18:34:07 2027 GMT
        Subject: CN=D06216633B497F8570127F28E73FE5151BA9E66E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:8f:63:30:e7:5b:96:29:7c:56:23:b5:ec:
                    29:7e:a1:ce:7c:4a:b4:84:71:2b:8e:a4:d5:b6:95:
                    e8:90:9b:56:e0:0f:18:1e:f8:9c:0c:da:ab:48:0c:
                    c2:23:be:8e:b6:09:02:7f:92:77:01:23:4d:1f:d4:
                    ed:b5:76:4a:0e:f5:06:0e:c3:40:30:d2:1e:b0:67:
                    03:71:06:22:2e:df:5a:f3:f4:47:d1:23:e3:c6:d4:
                    a5:8d:ea:2e:b7:57:48:24:e5:33:1c:20:3a:9c:eb:
                    9a:58:44:dc:1c:c2:2e:25:7a:df:ce:c2:08:85:cb:
                    97:81:1e:07:7d:e6:e5:ef:a7:9f:ca:60:89:dc:02:
                    73:10:7c:47:82:e3:c8:e9:8b:ed:12:d6:c8:ef:a9:
                    80:15:21:54:e6:68:5f:cf:d0:f9:eb:86:11:76:32:
                    5c:fb:f6:12:98:57:f2:cc:85:73:ae:53:19:4f:d1:
                    33:21:cb:f1:10:5e:23:3d:fb:97:d2:cc:5e:f1:fd:
                    00:7e:56:26:8e:50:c7:92:75:e3:51:96:17:34:17:
                    f1:4e:f0:df:a9:bc:55:1c:6e:98:42:8a:b5:60:4d:
                    51:b6:60:19:b7:ac:4a:23:61:a0:f8:18:27:8a:d5:
                    bf:9b:9e:9e:9d:50:75:1e:6a:99:0a:bf:7b:a1:21:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:62:16:63:3B:49:7F:85:70:12:7F:28:E7:3F:E5:15:1B:A9:E6:6E
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3234382e302f32312d3234203d3e20323632313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c0:60:10:ba:bd:a6:ec:17:66:a9:4b:2d:55:d5:b7:31:9a:ed:
         59:f7:94:81:f7:35:a3:c1:ee:11:c3:07:9c:f6:2a:17:bd:58:
         90:94:b3:df:31:bb:b1:11:3c:f9:cb:34:f5:96:06:53:a4:29:
         8e:94:3b:46:b2:30:83:e5:d8:d4:ad:6d:e9:9c:28:40:6b:a6:
         87:4b:07:e3:25:13:17:21:5d:8f:01:96:f8:18:c6:28:54:d0:
         30:da:21:bb:ac:cc:cc:7a:f8:3a:4a:7e:4a:66:63:4c:c4:6f:
         58:cd:84:fd:cf:5f:5e:50:3d:1b:e6:8e:df:5d:10:75:08:bf:
         6f:23:9b:74:1d:d1:24:8b:8a:52:11:0e:5f:b2:9b:fa:44:19:
         0c:34:46:ce:b0:b7:7f:10:38:c2:5f:4b:37:fc:af:73:12:80:
         03:0e:d0:54:e9:2b:e3:a3:9b:43:92:fb:6a:34:40:18:e2:82:
         91:85:e0:06:02:66:7a:e4:aa:92:20:4d:70:7b:df:fc:f4:5b:
         19:90:4b:96:5c:c8:0e:76:2d:b0:91:99:2a:78:c1:62:0f:3a:
         e6:1f:5c:2b:bc:44:63:64:28:4f:5e:3c:ea:f7:ed:26:71:31:
         be:3a:20:09:bb:98:2f:8a:0e:78:94:ac:e4:ee:c7:36:00:8c:
         09:03:bb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:35:41 2026 by rpki-client