Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/3230302e3132332e33382e302f32342d3234203d3e20323734303234.roa
File:                     3230302e3132332e33382e302f32342d3234203d3e20323734303234.roa (raw, json)
Hash identifier:          8P1j4akj8aumHFIi65JbgrnRjdNI0VvflDmZa71Nc7U=
Subject key identifier:   57:70:3C:B4:4F:53:3E:30:F1:D9:7E:83:ED:50:0F:7E:ED:A2:3B:55
Certificate issuer:       /CN=EF40DB638B2BD71A39880C226C06C598B5D9BCB5
Certificate serial:       1A3EEFF89F4BBC1E0CCA9CE252D8421865ABE81B
Authority key identifier: EF:40:DB:63:8B:2B:D7:1A:39:88:0C:22:6C:06:C5:98:B5:D9:BC:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/3230302e3132332e33382e302f32342d3234203d3e20323734303234.roa
Signing time:             Thu 02 Jul 2026 17:25:00 +0000
ROA not before:           Thu 02 Jul 2026 17:20:00 +0000
ROA not after:            Thu 01 Jul 2027 17:25:00 +0000
asID:                     274024
IP address blocks:        200.123.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3e:ef:f8:9f:4b:bc:1e:0c:ca:9c:e2:52:d8:42:18:65:ab:e8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF40DB638B2BD71A39880C226C06C598B5D9BCB5
        Validity
            Not Before: Jul  2 17:20:00 2026 GMT
            Not After : Jul  1 17:25:00 2027 GMT
        Subject: CN=57703CB44F533E30F1D97E83ED500F7EEDA23B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:22:64:c6:5e:8e:f1:a1:14:ab:a0:ee:ff:
                    ed:36:7c:97:be:2a:ea:bc:17:f5:48:26:df:85:9b:
                    5f:c2:9f:b1:82:7f:e1:9f:df:31:e9:aa:cd:f7:1d:
                    ad:99:24:9a:26:68:21:a0:93:53:0a:42:46:5d:f0:
                    f0:63:79:1e:80:4a:c8:48:16:aa:19:86:aa:6a:00:
                    18:2e:3c:53:d4:b4:a2:1b:b5:3d:59:65:4e:39:50:
                    29:d5:ac:c9:18:1e:0d:48:c8:18:44:4b:e9:d9:4c:
                    2b:02:14:2b:e4:cd:b3:31:75:ed:ce:37:97:9e:60:
                    e4:dc:e8:74:a3:1a:fd:5f:30:d3:b7:1e:80:e7:43:
                    dc:22:25:65:ce:e8:ff:25:86:b8:8b:7b:df:8e:86:
                    8e:96:75:4d:24:24:32:23:71:db:8a:1d:8a:be:74:
                    78:8c:93:7b:4a:04:13:65:ed:a0:fb:15:b0:85:16:
                    42:93:c6:ad:a3:db:07:50:2d:4f:6c:02:c7:6a:07:
                    ab:f6:fa:48:2e:7e:8c:a3:36:7a:34:f2:59:a3:9e:
                    25:b0:8f:9d:17:bd:f5:b4:26:c9:3b:80:b5:88:68:
                    2e:b1:f9:b7:56:38:63:60:f0:2c:88:5e:d4:00:d3:
                    a6:c8:ff:3a:22:b8:9e:46:22:b9:f3:87:4f:12:b7:
                    13:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:70:3C:B4:4F:53:3E:30:F1:D9:7E:83:ED:50:0F:7E:ED:A2:3B:55
            X509v3 Authority Key Identifier:
                keyid:EF:40:DB:63:8B:2B:D7:1A:39:88:0C:22:6C:06:C5:98:B5:D9:BC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/3230302e3132332e33382e302f32342d3234203d3e20323734303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:a5:24:be:d6:48:55:8b:cb:c9:e4:48:f2:51:8e:fa:41:
         32:56:17:4d:22:44:52:dc:2b:cb:4f:e9:93:25:c7:d4:3c:b1:
         da:49:12:1c:de:58:59:44:ca:fb:20:4a:96:c6:9f:a8:5c:b8:
         3f:7d:07:8c:4a:86:a4:63:1b:a0:cb:c0:20:71:c9:c2:e5:a2:
         c8:a4:9d:65:ce:cb:dd:25:8e:1b:14:3b:3f:04:41:dc:99:5a:
         01:eb:29:f8:69:18:c5:35:78:7c:5b:91:15:f4:f9:2f:2d:bf:
         d1:d9:71:03:20:6f:70:8f:eb:39:6a:4b:92:18:12:bb:9b:8a:
         d3:b8:7e:09:0f:8f:1a:f8:89:9d:31:9f:79:70:f6:af:de:8b:
         b9:10:fe:2d:c3:cd:b3:f8:80:f5:95:da:98:a3:29:06:44:36:
         c0:35:82:6b:3f:8e:48:83:57:22:89:b1:29:c5:2f:be:65:f3:
         50:c3:9c:79:d4:b2:cf:4f:60:9d:fd:16:60:4a:5d:89:97:b5:
         ab:04:97:71:d4:55:7e:3c:9a:cf:51:91:6a:72:cf:cb:ad:0a:
         8d:2c:e1:3f:6d:b6:75:00:0b:1d:18:02:a4:b3:cb:fa:9f:c8:
         b4:3d:67:1a:46:f7:f5:a1:d2:12:6d:32:f2:43:66:01:5e:af:
         16:3e:df:81
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGj7v+J9LvB4MypziUthCGGWr6BswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY0MERCNjM4QjJCRDcxQTM5ODgwQzIyNkMwNkM1OThC
NUQ5QkNCNTAeFw0yNjA3MDIxNzIwMDBaFw0yNzA3MDExNzI1MDBaMDMxMTAvBgNV
BAMTKDU3NzAzQ0I0NEY1MzNFMzBGMUQ5N0U4M0VENTAwRjdFRURBMjNCNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCyJkxl6O8aEUq6Du/+02fJe+
Kuq8F/VIJt+Fm1/Cn7GCf+Gf3zHpqs33Ha2ZJJomaCGgk1MKQkZd8PBjeR6ASshI
FqoZhqpqABguPFPUtKIbtT1ZZU45UCnVrMkYHg1IyBhES+nZTCsCFCvkzbMxde3O
N5eeYOTc6HSjGv1fMNO3HoDnQ9wiJWXO6P8lhriLe9+Oho6WdU0kJDIjcduKHYq+
dHiMk3tKBBNl7aD7FbCFFkKTxq2j2wdQLU9sAsdqB6v2+kgufoyjNno08lmjniWw
j50XvfW0Jsk7gLWIaC6x+bdWOGNg8CyIXtQA06bI/zoiuJ5GIrnzh08StxNTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUV3A8tE9TPjDx2X6D7VAPfu2iO1UwHwYDVR0j
BBgwFoAU70DbY4sr1xo5iAwibAbFmLXZvLUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MEQ1NUE0NjYxNTI4RDE5MDY4NUFDREI5OUM0NDkxNkZC
NkQyN0U2MzA2RTFGRjM4MDc2OTE1OUYzRTM1ODNDLzAvRUY0MERCNjM4QjJCRDcx
QTM5ODgwQzIyNkMwNkM1OThCNUQ5QkNCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjQwREI2MzhCMkJENzFBMzk4
ODBDMjI2QzA2QzU5OEI1RDlCQ0I1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzBENTVBNDY2MTUyOEQxOTA2ODVBQ0RCOTlDNDQ5MTZGQjZEMjdFNjMw
NkUxRkYzODA3NjkxNTlGM0UzNTgzQy8wLzMyMzAzMDJlMzEzMjMzMmUzMzM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM0MzAzMjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHsm
MA0GCSqGSIb3DQEBCwUAA4IBAQA+h6UkvtZIVYvLyeRI8lGO+kEyVhdNIkRS3CvL
T+mTJcfUPLHaSRIc3lhZRMr7IEqWxp+oXLg/fQeMSoakYxugy8AgccnC5aLIpJ1l
zsvdJY4bFDs/BEHcmVoB6yn4aRjFNXh8W5EV9PkvLb/R2XEDIG9wj+s5akuSGBK7
m4rTuH4JD48a+ImdMZ95cPav3ou5EP4tw82z+ID1ldqYoykGRDbANYJrP45Ig1ci
ibEpxS++ZfNQw5x51LLPT2Cd/RZgSl2Jl7WrBJdx1FV+PJrPUZFqcs/LrQqNLOE/
bbZ1AAsdGAKks8v6n8i0PWcaRvf1odISbTLyQ2YBXq8WPt+B
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:01 2026 by rpki-client