Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235322e302f32342d3234203d3e20323730303439.roa
File:                     3230302e35352e3235322e302f32342d3234203d3e20323730303439.roa (raw, json)
Hash identifier:          a2jwdZyVib3TWWi6X4Uo2SC0cqKKRwUjj4gWZBBS+sw=
Subject key identifier:   24:7F:A8:BB:77:5B:52:2A:9E:8A:64:A7:9C:71:33:39:BE:17:33:60
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       09B44DA234CA9AD0DDE862358E9A0C56384C6D6A
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235322e302f32342d3234203d3e20323730303439.roa
Signing time:             Wed 25 Mar 2026 23:35:57 +0000
ROA not before:           Wed 25 Mar 2026 23:30:57 +0000
ROA not after:            Wed 24 Mar 2027 23:35:57 +0000
asID:                     270049
IP address blocks:        200.55.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 09:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b4:4d:a2:34:ca:9a:d0:dd:e8:62:35:8e:9a:0c:56:38:4c:6d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: Mar 25 23:30:57 2026 GMT
            Not After : Mar 24 23:35:57 2027 GMT
        Subject: CN=247FA8BB775B522A9E8A64A79C713339BE173360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:5a:74:70:9e:8c:ee:9a:93:a0:71:1b:a3:
                    8e:fc:10:7e:1a:22:83:cc:4c:56:e0:b8:4e:32:f2:
                    10:f8:24:33:36:1d:04:9b:31:5a:99:34:cc:ce:c7:
                    c2:55:2b:cd:91:17:4e:a7:4c:e3:4e:69:92:3b:1a:
                    a1:9b:30:b7:9e:97:9e:16:c2:01:2d:5b:ac:15:67:
                    1d:f5:d2:a2:5a:44:d1:b0:0e:34:7e:47:10:0f:e5:
                    21:6f:e5:56:f6:fa:bc:e8:18:66:23:d6:18:0e:0f:
                    48:52:56:ce:82:73:6e:72:a6:29:bc:49:eb:93:66:
                    02:da:6a:e4:47:68:d4:43:a1:0d:82:02:80:d8:f7:
                    20:82:ab:f8:ad:88:b4:a9:6d:80:0f:57:a5:52:8b:
                    19:9e:6b:74:36:e1:02:4f:10:22:15:50:b4:be:35:
                    26:f5:d7:34:32:ad:5f:e9:29:98:12:a0:8a:b2:62:
                    6e:d5:9c:d8:ab:33:6a:94:71:6d:ea:5a:0a:16:1d:
                    17:41:cb:ac:fb:4d:e2:15:50:17:5d:bb:80:a8:02:
                    8a:25:e6:07:77:d5:bf:42:f8:76:d2:a8:80:37:44:
                    74:93:b8:40:be:e2:23:00:87:8c:62:e5:3d:48:8c:
                    2b:51:44:47:67:4a:e1:50:54:62:80:a1:74:63:83:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7F:A8:BB:77:5B:52:2A:9E:8A:64:A7:9C:71:33:39:BE:17:33:60
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235322e302f32342d3234203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d7:e2:bc:1c:b4:c4:55:ee:6a:34:63:2f:02:6d:0c:4a:ce:
         33:d5:b6:45:6b:00:75:b6:4f:29:55:15:f6:4b:55:a4:cd:c3:
         91:ba:b6:16:ed:82:d6:95:e6:ee:67:c8:fb:5b:35:c7:87:c2:
         43:0b:97:bc:2a:95:f3:45:83:f2:9c:58:d3:3b:86:5b:8a:e4:
         86:7f:c9:fe:66:14:ae:51:ec:c5:f1:89:23:d6:c7:43:dd:64:
         90:d5:be:ff:c3:3e:89:98:27:61:53:90:23:cb:bc:6e:22:c6:
         21:57:e0:e8:84:27:b8:89:49:11:db:0f:95:11:fe:39:61:1d:
         10:12:78:d9:ce:95:52:5e:52:0e:c2:cc:1b:a8:c5:5e:cc:3f:
         06:75:fb:a7:14:bf:27:6c:e9:60:95:f2:0b:25:38:0f:f9:31:
         07:b1:c9:5b:78:15:a0:47:26:e0:55:e5:ac:50:4a:7b:9c:57:
         55:82:36:7f:7a:b2:c0:be:14:f3:a9:14:60:52:71:e3:1d:54:
         1a:6a:8c:de:b4:4c:b2:66:22:ea:f5:03:76:4f:be:07:63:e5:
         59:34:1f:f6:9e:f1:96:a1:2c:6c:3e:29:b8:09:a5:3e:02:e6:
         1d:06:9e:3f:ef:a7:ee:2e:8b:af:d0:09:5c:5d:c1:59:e6:0d:
         ce:24:ba:e9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCbRNojTKmtDd6GI1jpoMVjhMbWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM1MEIxOTM1Q0REOTUxRThGQjU3MkE1QUYzQzQxOUFD
NEQ0ODdFNDAeFw0yNjAzMjUyMzMwNTdaFw0yNzAzMjQyMzM1NTdaMDMxMTAvBgNV
BAMTKDI0N0ZBOEJCNzc1QjUyMkE5RThBNjRBNzlDNzEzMzM5QkUxNzMzNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Rlp0cJ6M7pqToHEbo478EH4a
IoPMTFbguE4y8hD4JDM2HQSbMVqZNMzOx8JVK82RF06nTONOaZI7GqGbMLeel54W
wgEtW6wVZx310qJaRNGwDjR+RxAP5SFv5Vb2+rzoGGYj1hgOD0hSVs6Cc25ypim8
SeuTZgLaauRHaNRDoQ2CAoDY9yCCq/itiLSpbYAPV6VSixmea3Q24QJPECIVULS+
NSb11zQyrV/pKZgSoIqyYm7VnNirM2qUcW3qWgoWHRdBy6z7TeIVUBddu4CoAool
5gd31b9C+HbSqIA3RHSTuEC+4iMAh4xi5T1IjCtRREdnSuFQVGKAoXRjg8ifAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJH+ou3dbUiqeimSnnHEzOb4XM2AwHwYDVR0j
BBgwFoAUXFCxk1zdlR6PtXKlrzxBmsTUh+QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODlEOTI3RUI5MDkxOTE3RjgxRDY3OEE0MUVBNDc2OTM1
ODg0MUQ5Nzc4REYyREExMDlDMzEzQjNFNzhBNkU4LzAvNUM1MEIxOTM1Q0REOTUx
RThGQjU3MkE1QUYzQzQxOUFDNEQ0ODdFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzUwQjE5MzVDREQ5NTFFOEZC
NTcyQTVBRjNDNDE5QUM0RDQ4N0U0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg5RDkyN0VCOTA5MTkxN0Y4MUQ2NzhBNDFFQTQ3NjkzNTg4NDFEOTc3
OERGMkRBMTA5QzMxM0IzRTc4QTZFOC8wLzMyMzAzMDJlMzUzNTJlMzIzNTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyDf8
MA0GCSqGSIb3DQEBCwUAA4IBAQB81+K8HLTEVe5qNGMvAm0MSs4z1bZFawB1tk8p
VRX2S1WkzcORurYW7YLWlebuZ8j7WzXHh8JDC5e8KpXzRYPynFjTO4ZbiuSGf8n+
ZhSuUezF8Ykj1sdD3WSQ1b7/wz6JmCdhU5Ajy7xuIsYhV+DohCe4iUkR2w+VEf45
YR0QEnjZzpVSXlIOwswbqMVezD8GdfunFL8nbOlglfILJTgP+TEHsclbeBWgRybg
VeWsUEp7nFdVgjZ/erLAvhTzqRRgUnHjHVQaaozetEyyZiLq9QN2T74HY+VZNB/2
nvGWoSxsPim4CaU+AuYdBp4/76fuLouv0AlcXcFZ5g3OJLrp
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:35 2026 by rpki-client