Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36392e302f32342d3234203d3e20323733393432.roa
File:                     3230302e3130372e36392e302f32342d3234203d3e20323733393432.roa (raw, json)
Hash identifier:          Qqa1vLk3/50l+it3R+DabA0a8K0u2MYUWi/0NLaSbP0=
Subject key identifier:   25:7E:2E:C8:C0:FE:6E:5B:66:E2:7E:21:65:BB:48:47:B5:68:65:32
Certificate issuer:       /CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
Certificate serial:       7E490FAD39D34001D009EDD28F67706E0F343DC9
Authority key identifier: 93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36392e302f32342d3234203d3e20323733393432.roa
Signing time:             Fri 24 Apr 2026 03:39:52 +0000
ROA not before:           Fri 24 Apr 2026 03:34:52 +0000
ROA not after:            Fri 23 Apr 2027 03:39:52 +0000
asID:                     273942
IP address blocks:        200.107.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 11:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:49:0f:ad:39:d3:40:01:d0:09:ed:d2:8f:67:70:6e:0f:34:3d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
        Validity
            Not Before: Apr 24 03:34:52 2026 GMT
            Not After : Apr 23 03:39:52 2027 GMT
        Subject: CN=257E2EC8C0FE6E5B66E27E2165BB4847B5686532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:d0:65:3b:56:6d:1a:6b:e1:3c:1d:51:73:
                    b7:32:0f:d5:9f:c8:28:c1:22:4e:16:10:f6:71:3d:
                    47:3c:4f:5e:44:4e:03:e6:27:7a:97:1d:25:1b:e5:
                    5f:4d:5e:1a:2f:0f:ee:18:7e:98:ba:1d:ce:21:e3:
                    7c:5e:a5:92:3c:48:f6:fc:8e:3b:bd:84:17:db:4c:
                    4d:8a:9b:85:5b:4c:a2:3d:cd:17:2b:9b:76:02:b5:
                    d4:50:60:0f:b7:bd:e2:a8:1d:90:51:17:d6:cb:71:
                    36:0b:55:f4:ca:f5:f2:f5:ac:a9:24:73:9d:31:ba:
                    49:cd:b9:b7:33:a7:6b:ea:c4:08:13:54:06:77:e5:
                    7e:71:19:92:0b:34:c2:3b:e3:8d:6e:c4:57:94:10:
                    81:c6:a9:cc:fc:23:f6:e8:1a:04:e6:4c:4f:60:db:
                    a8:d8:7c:cd:59:13:15:56:0d:3c:c7:35:47:f4:0c:
                    22:f1:4a:65:79:2d:55:cd:a1:98:49:48:e4:92:4d:
                    ea:4e:ee:65:3d:9f:be:d5:ee:3e:4d:ad:83:07:1d:
                    23:f0:2e:d6:2a:79:03:7f:9b:23:70:63:25:77:71:
                    27:9d:39:a0:0d:b1:2b:74:4e:78:9b:3a:a3:c7:a6:
                    00:60:48:db:74:ee:97:e9:41:52:10:21:a9:2d:17:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7E:2E:C8:C0:FE:6E:5B:66:E2:7E:21:65:BB:48:47:B5:68:65:32
            X509v3 Authority Key Identifier:
                keyid:93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36392e302f32342d3234203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:6f:be:a8:5d:14:74:df:f2:ef:b0:19:7c:44:27:49:20:
         77:07:97:69:d5:e2:ba:58:45:17:86:b0:d3:17:cf:ea:a8:65:
         51:bb:19:e5:9c:97:25:a6:3c:1f:26:d1:e0:4c:ca:f1:75:93:
         ac:21:47:da:86:ae:d3:15:b2:ba:1e:ab:35:97:90:39:e2:40:
         e5:df:be:81:ba:c4:19:88:94:c1:f3:7a:06:23:00:88:c2:d0:
         2f:2d:c0:3b:1a:5f:79:c8:df:b2:03:02:95:ba:a3:ea:f6:40:
         6f:74:b0:2e:5e:16:e6:a5:10:21:6f:8e:86:b2:b6:97:22:e2:
         a4:1e:23:24:b4:fa:07:65:cd:f2:d1:09:15:30:59:6b:e8:96:
         ff:7e:6b:63:fd:1d:3c:16:ec:73:35:8e:0d:92:76:c8:66:72:
         e7:1f:39:b7:06:29:13:2c:e3:67:ce:38:af:84:b8:50:bb:45:
         71:c1:fc:ca:9d:28:9e:69:65:33:c1:70:84:9c:ed:3f:42:34:
         4e:3d:a0:80:34:5e:3d:7b:3b:d7:d9:5c:dd:47:05:f6:50:94:
         22:eb:26:ec:fa:7f:45:51:74:8a:7e:1e:f7:7a:41:0b:15:6c:
         b0:75:54:30:5c:fc:4c:7b:b2:ed:d4:af:6c:85:a9:f1:93:cb:
         83:17:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:43:51 2026 by rpki-client