Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e37302e302f32342d3234203d3e20323733393432.roa
File:                     3230302e3130372e37302e302f32342d3234203d3e20323733393432.roa (raw, json)
Hash identifier:          SHROBVVESC1pYlUreNL7vDsf7NzrdpqIl1JHcrybu4g=
Subject key identifier:   60:AB:A9:A3:AA:DF:01:16:E5:8F:63:42:05:75:B6:18:DB:94:0A:3F
Certificate issuer:       /CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
Certificate serial:       7EE5D0D083C5DDECDFD5B3D3914B3D8603F82BC1
Authority key identifier: 93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e37302e302f32342d3234203d3e20323733393432.roa
Signing time:             Fri 24 Apr 2026 03:39:53 +0000
ROA not before:           Fri 24 Apr 2026 03:34:53 +0000
ROA not after:            Fri 23 Apr 2027 03:39:53 +0000
asID:                     273942
IP address blocks:        200.107.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 11:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e5:d0:d0:83:c5:dd:ec:df:d5:b3:d3:91:4b:3d:86:03:f8:2b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
        Validity
            Not Before: Apr 24 03:34:53 2026 GMT
            Not After : Apr 23 03:39:53 2027 GMT
        Subject: CN=60ABA9A3AADF0116E58F63420575B618DB940A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:54:ee:19:3a:67:cd:73:1e:92:e4:e7:0c:c0:
                    f9:22:da:f5:5d:23:19:04:1d:1a:68:da:15:c6:b2:
                    9b:b0:cb:2c:61:40:45:4c:da:93:d2:48:5b:90:42:
                    dc:5b:f7:71:b9:e0:2f:5a:4c:0e:a7:95:4c:01:a9:
                    9f:42:43:82:84:31:94:64:05:91:97:77:4d:c4:8f:
                    6d:45:7a:1a:79:fb:31:55:d0:e9:9c:8d:41:e6:0a:
                    f4:24:f3:c6:62:7c:6d:89:1d:7c:76:a2:c3:7e:7a:
                    fc:62:4e:28:05:42:2c:4e:a3:50:ce:aa:d0:98:5c:
                    74:8b:96:da:19:3d:4c:14:e7:cb:d5:77:a3:a1:b9:
                    ce:49:23:b9:73:0a:8c:b9:4a:0d:80:35:11:57:8b:
                    b4:a0:a7:a9:5d:c4:fa:82:5b:95:13:02:a7:b2:db:
                    5e:12:64:f8:8c:0d:35:d8:d1:7d:da:5d:67:47:46:
                    9f:d8:c5:71:6f:fc:69:17:7c:9d:a0:88:e7:80:d6:
                    aa:1f:80:1f:e9:fb:64:51:cb:69:79:0f:c2:f0:94:
                    0d:24:54:03:9c:63:59:53:65:69:be:a3:4a:b7:fb:
                    9d:21:ca:25:c0:69:d0:9e:34:29:93:59:4e:8a:df:
                    37:53:c3:a1:c9:6a:a0:f3:f6:22:bc:fb:72:66:8e:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AB:A9:A3:AA:DF:01:16:E5:8F:63:42:05:75:B6:18:DB:94:0A:3F
            X509v3 Authority Key Identifier:
                keyid:93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e37302e302f32342d3234203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:61:75:ac:4b:67:f6:82:42:68:16:30:e4:43:7c:33:68:fc:
         e5:ac:99:85:de:79:70:0f:63:09:75:17:90:62:b3:96:02:b8:
         2f:54:e3:f2:03:8e:11:03:a2:78:58:e7:2f:4f:8a:3f:63:57:
         65:72:44:3c:5a:8f:eb:1b:07:33:9e:79:07:e5:9a:7c:c6:30:
         8f:8f:8f:66:ac:6b:55:f2:39:29:b6:90:4c:1a:85:e7:f9:9c:
         18:6e:89:66:af:ea:a4:35:f6:6f:7f:09:4f:e1:99:45:3d:ac:
         d8:60:f6:6b:02:d1:56:f5:1e:ea:e8:b7:46:71:d4:40:4e:de:
         28:58:ff:24:a3:49:7b:0f:43:89:bb:99:48:3e:74:f3:ff:07:
         f0:dd:0e:0c:fa:49:e1:d2:7b:67:49:de:ab:eb:81:79:55:75:
         7e:0a:1d:cf:97:5d:ca:77:b3:df:8f:ee:ac:db:63:61:a5:5b:
         74:f3:6c:76:80:93:81:5b:e4:07:53:c7:92:83:3f:c1:37:e5:
         d0:5c:f6:a6:5c:85:0d:46:d2:dc:eb:ff:23:5b:ca:fc:ba:76:
         20:d2:ed:c6:bb:bf:26:a9:e7:87:9b:60:02:69:d2:66:9e:0d:
         de:d3:3a:80:2b:4f:0b:2c:91:3a:bd:58:2a:93:0a:9e:58:73:
         30:89:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:21:27 2026 by rpki-client