Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e36332e302f32342d3234203d3e20323733313730.roa
File:                     3230302e35392e36332e302f32342d3234203d3e20323733313730.roa (raw, json)
Hash identifier:          3EikvRo7YL0pz24lSbvak64lsTqIKAkv1+QHCX0Ht0g=
Subject key identifier:   E6:E1:8C:2E:FF:98:47:0E:88:89:3E:00:07:58:94:00:0D:FD:48:EC
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       686C4C857A400E8253EF9E18C0EF53881E18D752
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e36332e302f32342d3234203d3e20323733313730.roa
Signing time:             Mon 11 May 2026 18:20:00 +0000
ROA not before:           Mon 11 May 2026 18:15:00 +0000
ROA not after:            Mon 10 May 2027 18:20:00 +0000
asID:                     273170
IP address blocks:        200.59.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 11:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6c:4c:85:7a:40:0e:82:53:ef:9e:18:c0:ef:53:88:1e:18:d7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: May 11 18:15:00 2026 GMT
            Not After : May 10 18:20:00 2027 GMT
        Subject: CN=E6E18C2EFF98470E88893E00075894000DFD48EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:b6:50:de:31:cc:65:dc:c9:03:44:70:fd:
                    ab:b6:4f:c1:a2:90:7c:51:80:ed:da:22:a5:32:53:
                    d2:88:cd:74:c1:f5:64:3e:1b:cd:ed:31:0d:2d:36:
                    dd:ee:a9:b8:0b:18:8c:04:69:60:20:bb:8b:d7:71:
                    a9:ea:ba:eb:6e:86:4e:a7:26:d6:d9:b5:95:44:48:
                    bd:bc:11:79:0e:82:e4:92:2b:bc:bb:f4:56:22:14:
                    9e:dc:29:02:a0:ca:b8:9a:f0:0c:de:f3:30:9b:c8:
                    91:4d:ca:81:06:63:bf:8b:b5:5b:e0:7e:56:87:57:
                    2f:ba:4e:46:af:50:55:a1:92:7f:d1:07:a8:ea:60:
                    26:63:63:1c:01:f7:98:b1:fb:82:72:d0:e6:20:fc:
                    9d:f9:68:84:d3:87:8f:fe:42:46:bf:6b:64:2d:a8:
                    f5:7c:4a:62:9e:f8:c6:7d:24:7c:fb:9e:a2:cc:c0:
                    da:39:e6:94:e7:12:45:e2:6f:d6:61:d5:60:75:a3:
                    40:43:36:a4:44:0f:65:93:07:92:50:ff:18:39:b1:
                    68:68:5f:cf:94:cf:98:52:0d:65:fe:56:cb:b2:5c:
                    ca:82:90:15:48:71:6d:82:62:78:3c:12:06:05:54:
                    62:85:e5:54:35:e4:7b:04:05:29:13:40:e9:d2:01:
                    0b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E1:8C:2E:FF:98:47:0E:88:89:3E:00:07:58:94:00:0D:FD:48:EC
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e36332e302f32342d3234203d3e20323733313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:37:94:f6:45:a7:75:69:77:9a:09:3d:89:7f:9a:8b:96:76:
         50:21:56:03:a4:cb:e5:7d:f4:4b:bc:d6:a6:16:f4:e6:1a:4e:
         c9:c2:98:dc:a7:c5:c1:3d:60:44:49:f9:75:16:41:5c:43:4d:
         c2:b5:84:1a:4d:d9:38:33:ef:80:bd:96:18:13:90:97:60:f9:
         02:b2:07:20:5c:91:67:c3:55:ed:c5:52:e7:96:a3:3b:2a:a5:
         9a:b5:05:95:4c:3c:8b:1e:b0:49:33:77:d1:bf:81:b3:a1:11:
         72:99:5c:f0:ef:88:a7:ef:bf:a3:d0:7a:07:42:91:77:7b:8b:
         79:7b:68:78:0b:9c:9a:4b:ea:01:f4:df:73:0d:44:14:af:29:
         9b:97:a6:86:e2:2c:e2:25:47:0c:90:8a:96:d5:38:70:ae:e5:
         e8:36:56:78:3b:56:f2:85:d2:69:bd:01:02:24:ee:bb:57:d4:
         b2:d4:70:bc:37:5c:2d:cb:a9:ac:5e:00:38:20:57:a6:5b:19:
         65:fd:ff:da:60:a3:14:44:2c:c2:35:68:d6:f8:db:50:e4:2d:
         63:7d:12:2c:47:f3:87:fe:04:6e:56:cf:da:02:18:30:8e:d0:
         a1:ab:ae:a7:da:84:58:f1:19:e6:53:03:7c:d3:dd:5d:78:4c:
         47:b4:fa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:40:38 2026 by rpki-client