Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e2033333536.roa
File:                     3230392e34352e32302e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          qpMBUsGGDKfmBpJ9iP6uB2h0/Cg5OT83PAJ67laLpDo=
Subject key identifier:   2D:71:9F:9C:5C:C8:7C:16:AE:35:90:BA:C1:17:C1:CF:24:2A:20:42
Certificate issuer:       /CN=863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20
Certificate serial:       41188DF13344A8A804ECF375879C1A3AA6B5B305
Authority key identifier: 86:3D:5F:7E:B9:BB:2A:53:09:A1:F8:CB:1C:82:09:D9:FB:C5:5D:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e2033333536.roa
Signing time:             Thu 23 Jul 2026 16:30:00 +0000
ROA not before:           Thu 23 Jul 2026 16:25:00 +0000
ROA not after:            Thu 22 Jul 2027 16:30:00 +0000
asID:                     3356
IP address blocks:        209.45.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:18:8d:f1:33:44:a8:a8:04:ec:f3:75:87:9c:1a:3a:a6:b5:b3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20
        Validity
            Not Before: Jul 23 16:25:00 2026 GMT
            Not After : Jul 22 16:30:00 2027 GMT
        Subject: CN=2D719F9C5CC87C16AE3590BAC117C1CF242A2042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6b:ba:9e:b0:0f:dd:c9:62:91:9f:19:23:fa:
                    c6:97:81:6a:50:f0:aa:4a:65:8f:bd:78:88:0b:ef:
                    ed:5d:35:28:0e:08:6b:47:a0:b6:17:10:38:8b:ed:
                    ab:14:2a:65:5d:24:88:bd:08:b9:c2:81:72:ac:df:
                    31:d7:ba:32:c3:3e:a9:db:b2:3e:77:a7:09:a8:76:
                    19:b9:ed:a9:f5:27:db:9f:47:d8:62:86:15:33:de:
                    d6:55:b9:57:b1:6f:bb:7d:23:bd:01:87:66:d8:49:
                    14:2a:80:10:eb:05:cf:75:4d:88:d9:f6:95:2b:ba:
                    9d:f1:dd:70:e6:2e:1f:07:a6:98:14:b8:fb:e9:52:
                    bb:03:4c:09:a5:33:0e:ca:6b:2f:67:c2:8b:d4:ec:
                    71:2f:d1:0a:2d:f2:41:c7:0d:ab:ea:dc:a7:82:71:
                    87:b0:cc:7d:ed:d8:41:cf:6a:47:87:75:af:90:5e:
                    eb:51:17:81:ff:17:2a:99:d1:e8:c0:58:d5:ce:01:
                    8e:7c:86:09:31:86:d0:f6:71:c2:4f:4b:64:9f:47:
                    c8:76:ad:fe:7d:0c:26:02:02:a2:53:b0:36:15:37:
                    72:21:f0:8f:a4:2a:d3:7a:3a:43:98:05:f7:d0:68:
                    3e:05:7d:09:eb:b4:f6:c1:99:7d:c5:8f:2c:44:26:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:71:9F:9C:5C:C8:7C:16:AE:35:90:BA:C1:17:C1:CF:24:2A:20:42
            X509v3 Authority Key Identifier:
                keyid:86:3D:5F:7E:B9:BB:2A:53:09:A1:F8:CB:1C:82:09:D9:FB:C5:5D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.45.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ea:0f:b1:54:bf:fc:2f:cc:e1:e0:da:15:b6:13:01:45:86:
         bc:41:59:30:99:bc:48:6d:03:8a:28:0e:ea:df:62:16:95:cf:
         8a:5e:88:0d:93:16:25:f5:d0:a2:7d:29:72:c3:b6:66:07:1b:
         5f:46:62:c6:df:2d:a7:9c:a7:11:52:92:3b:42:85:6a:1c:17:
         98:a3:b1:63:bb:18:53:24:4d:5f:f3:ab:8c:5b:00:ce:09:48:
         92:bf:fa:d2:0a:cc:f6:97:4e:ca:5f:2a:8e:ed:ce:3b:18:af:
         b3:18:6a:18:a8:f0:42:ec:0e:3f:ec:a9:47:c5:b2:8c:f0:7d:
         4a:ab:da:fd:d3:0d:a8:6e:e5:fb:59:88:27:c8:46:92:7f:a9:
         96:59:4e:61:fa:d2:17:1f:f4:8d:1a:2a:92:47:9e:c9:94:9a:
         4b:90:51:51:6b:cc:81:56:f6:bb:89:47:2c:6a:7d:3d:4e:dc:
         9c:b5:ef:92:87:11:5e:55:3a:fa:c6:9f:2e:40:ae:b2:ca:98:
         ed:cd:92:c6:34:8b:82:78:ec:4a:b0:d7:b1:6e:04:d8:d2:82:
         e5:08:8f:3e:38:f9:d7:a8:cb:a5:98:7f:98:35:e9:86:46:95:
         3a:be:5b:90:94:d0:05:be:64:1d:5b:21:3b:7b:78:c1:7c:8d:
         fd:e7:a4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:35 2026 by rpki-client