Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230302e3132332e36312e302f32342d3234203d3e203238313033.roa
File:                     3230302e3132332e36312e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          6wKMR0Q6GsHmXLHwoS+53ppDTRdwEafLyfLIJCkAqF4=
Subject key identifier:   8B:7F:5F:20:07:54:6C:0C:E4:6E:BF:E6:EE:9B:AA:4F:62:54:37:8F
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       47B5DF7A84614148C2CF4CE9F82AB4DC6ECA2B91
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230302e3132332e36312e302f32342d3234203d3e203238313033.roa
Signing time:             Wed 06 May 2026 20:20:00 +0000
ROA not before:           Wed 06 May 2026 20:15:00 +0000
ROA not after:            Wed 05 May 2027 20:20:00 +0000
asID:                     28103
IP address blocks:        200.123.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b5:df:7a:84:61:41:48:c2:cf:4c:e9:f8:2a:b4:dc:6e:ca:2b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: May  6 20:15:00 2026 GMT
            Not After : May  5 20:20:00 2027 GMT
        Subject: CN=8B7F5F2007546C0CE46EBFE6EE9BAA4F6254378F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:e4:43:3e:1f:9d:26:06:ba:ab:b2:e7:91:
                    96:e8:af:bc:d1:86:99:79:56:5a:28:3c:21:c5:20:
                    0a:c3:8f:b3:5d:f8:cf:48:91:d5:d5:7d:2d:3f:5e:
                    b1:28:6f:67:7e:cc:93:13:e9:44:be:48:9a:09:d8:
                    86:3f:0b:79:11:a3:b5:18:d1:09:8e:f5:f9:ea:88:
                    b7:ad:9f:e1:1a:2a:10:07:f4:5e:4c:a2:72:ad:98:
                    67:2e:c7:6c:14:27:14:8b:ea:42:75:a9:7e:10:aa:
                    33:ac:e8:87:4f:ad:ab:b7:e7:0a:8f:50:26:bd:50:
                    a5:21:d5:5e:2b:49:48:09:8f:21:d1:dd:f9:6b:6d:
                    3c:1f:63:a5:d9:9b:8b:1a:db:0d:cc:c9:ca:13:6f:
                    19:31:c7:d2:f7:77:38:d4:4b:8b:36:56:12:4c:6f:
                    24:83:0f:f7:7f:22:25:10:4b:28:89:37:58:81:6d:
                    a7:84:a5:d8:7c:e1:6b:19:73:25:9f:2d:4b:11:aa:
                    9d:e8:9d:4a:45:1d:3d:03:2c:8e:5b:ff:13:78:4e:
                    91:f5:0e:cd:2a:d3:d7:63:93:f4:49:01:e8:d3:ce:
                    69:e0:07:93:91:74:91:ad:41:3c:0e:ca:86:52:e2:
                    7e:21:c9:d3:9b:42:ac:20:4b:a7:ba:a4:41:27:48:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7F:5F:20:07:54:6C:0C:E4:6E:BF:E6:EE:9B:AA:4F:62:54:37:8F
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230302e3132332e36312e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:54:33:64:bb:8f:7f:58:3a:69:40:4d:df:d9:7d:31:de:45:
         f6:03:33:a0:21:75:dc:a9:9e:de:79:54:5e:b1:a4:6d:14:4e:
         32:da:68:c0:38:1b:a2:ec:54:67:92:6b:cf:cd:df:bd:53:be:
         3d:ad:b7:5b:23:a8:3f:b7:bc:d0:bb:5f:c4:7f:71:08:76:df:
         d1:34:5a:da:be:6d:71:08:39:24:5b:c9:f1:7c:dc:13:fc:94:
         1b:b3:10:e8:15:80:6a:92:f5:64:63:33:ab:1c:58:ff:8c:dd:
         35:ec:c0:50:ff:88:a0:ae:d5:02:e8:98:6a:22:ab:4a:22:0c:
         98:81:8c:09:c9:9d:e6:1e:1d:a2:31:d5:a0:11:18:2c:9e:a6:
         9c:2a:de:e4:f5:8b:4a:00:4c:d3:9c:a4:d8:a5:d6:79:71:a0:
         c7:85:15:4e:2b:da:cb:47:57:36:6a:8b:01:4e:32:c6:e5:76:
         e6:7a:ce:16:d5:f9:bd:75:44:a4:2e:2e:2b:aa:33:46:4e:94:
         e5:41:0c:13:03:02:18:a0:17:bf:9e:4a:13:ef:e2:9c:6b:3f:
         b7:fa:c5:b8:e4:30:19:30:7c:9a:77:87:a0:3b:7b:56:6e:28:
         a7:e2:49:f8:bd:93:dc:c4:8d:f0:d3:4c:6e:31:74:a8:3a:96:
         7a:df:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:39:53 2026 by rpki-client