Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230302e36362e39362e302f32302d3234203d3e203332303938.roa
File:                     3230302e36362e39362e302f32302d3234203d3e203332303938.roa (raw, json)
Hash identifier:          iTHEICmdr6aI/scZR6csUEZzqo3SpcFE/tZ329RVFYE=
Subject key identifier:   B7:0C:E6:2C:6D:04:F2:43:34:C1:4D:D4:57:15:DB:CA:79:19:B1:E6
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       798B3CB1CB69EC8BD2DCF0FA955688110E7DD92B
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230302e36362e39362e302f32302d3234203d3e203332303938.roa
Signing time:             Thu 24 Sep 2026 05:55:00 +0000
ROA not before:           Thu 24 Sep 2026 05:50:00 +0000
ROA not after:            Thu 23 Sep 2027 05:55:00 +0000
asID:                     32098
IP address blocks:        200.66.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8b:3c:b1:cb:69:ec:8b:d2:dc:f0:fa:95:56:88:11:0e:7d:d9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Sep 24 05:50:00 2026 GMT
            Not After : Sep 23 05:55:00 2027 GMT
        Subject: CN=B70CE62C6D04F24334C14DD45715DBCA7919B1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ef:94:5e:75:4d:a7:bf:34:f7:8d:1b:55:25:
                    a4:2c:39:c9:3d:6a:44:f8:af:17:aa:0b:26:70:24:
                    95:7a:0f:c7:f1:c5:f8:78:50:52:54:fe:28:7b:21:
                    0d:aa:de:94:16:1c:b5:99:16:51:39:4e:58:f6:ce:
                    3e:13:1a:45:b0:11:99:42:27:48:2b:7b:28:1e:e0:
                    79:77:6a:98:1a:ce:d4:ff:4c:5c:3a:0c:de:64:44:
                    c0:70:a9:4f:65:d3:c4:36:91:47:b9:79:48:d4:6a:
                    47:df:87:e5:ba:6b:ad:a9:db:ae:c9:36:34:1b:06:
                    f4:95:18:69:2d:30:2c:6f:7b:b0:8f:fe:b6:74:6a:
                    30:22:53:97:ae:8a:b5:a7:d1:70:62:fa:17:ea:66:
                    6a:88:a3:f0:d4:92:a5:80:19:47:a8:84:aa:2f:d7:
                    72:4d:e0:2e:9f:b6:5e:68:f3:f0:9c:71:6e:1d:f7:
                    44:5e:9c:b3:b7:44:a0:b3:d7:e1:bb:92:03:e2:ec:
                    74:c5:4e:c4:af:d0:88:7f:0d:f3:04:62:15:09:d8:
                    47:ee:f7:38:3a:38:26:8c:f4:be:b6:53:4d:aa:2e:
                    bd:a6:f3:3f:52:23:80:3f:07:4a:5f:bc:b8:55:9b:
                    cb:f5:68:3c:4c:6c:74:af:2e:3b:50:c9:3f:4c:9a:
                    fb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0C:E6:2C:6D:04:F2:43:34:C1:4D:D4:57:15:DB:CA:79:19:B1:E6
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230302e36362e39362e302f32302d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:d1:82:4a:78:44:6d:8f:fe:73:fe:00:79:88:e7:97:7c:
         18:0e:69:9c:50:e2:e0:c1:0b:28:5b:b6:3b:93:0e:f0:c3:bb:
         af:c3:d0:2b:6d:f8:27:f5:97:1d:b9:89:4b:0b:5c:d4:f2:e5:
         44:87:8c:ac:2f:82:1c:4d:56:7f:18:e0:6c:86:87:8e:50:d3:
         6e:7d:1d:6d:a3:3b:c5:8a:6a:12:23:87:4a:6c:bf:a3:c4:a5:
         07:34:79:e0:4d:08:6f:4a:de:c9:7a:5f:91:53:e5:dc:7c:f8:
         95:4c:92:5e:9e:b2:bc:73:e9:9b:f6:8b:ed:65:02:10:1c:11:
         23:e5:2f:5d:7a:bd:fe:7f:d0:49:4a:95:39:1d:c4:b5:dd:63:
         fc:98:72:0e:28:99:ee:01:79:3e:e2:c5:db:e5:35:1e:b7:6b:
         4b:76:02:45:fb:57:1b:3f:c8:8d:99:f2:08:ec:51:80:b2:c3:
         34:7e:dd:26:13:80:d0:4b:2c:4a:6d:ab:6d:da:77:a1:39:34:
         5e:92:27:28:5f:7b:e4:7a:e6:8b:5e:ea:a7:5c:20:22:0a:93:
         d3:12:40:ca:50:30:16:ad:0b:7e:d8:d8:50:bd:e9:da:18:3a:
         f4:76:7f:59:6f:09:f0:a4:c0:2b:21:93:e7:4b:5c:d5:7e:68:
         52:34:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:20:09 2026 by rpki-client