Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e2037313935.roa
File:                     3230392e34352e32302e302f32342d3234203d3e2037313935.roa (raw, json)
Hash identifier:          8UtLi0YzGpamXEcaGB5InH+ksI8dFwoIXn2OJlO+kSc=
Subject key identifier:   DA:60:80:94:5C:08:15:CA:24:C8:D7:6A:E1:54:60:C6:FD:54:FE:61
Certificate issuer:       /CN=863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20
Certificate serial:       5F6CA29E2F20085E9B0C30C10EDE1347D5329054
Authority key identifier: 86:3D:5F:7E:B9:BB:2A:53:09:A1:F8:CB:1C:82:09:D9:FB:C5:5D:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e2037313935.roa
Signing time:             Thu 23 Jul 2026 16:30:00 +0000
ROA not before:           Thu 23 Jul 2026 16:25:00 +0000
ROA not after:            Thu 22 Jul 2027 16:30:00 +0000
asID:                     7195
IP address blocks:        209.45.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6c:a2:9e:2f:20:08:5e:9b:0c:30:c1:0e:de:13:47:d5:32:90:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20
        Validity
            Not Before: Jul 23 16:25:00 2026 GMT
            Not After : Jul 22 16:30:00 2027 GMT
        Subject: CN=DA6080945C0815CA24C8D76AE15460C6FD54FE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:20:63:ea:d4:32:b6:aa:38:9a:30:1a:c7:
                    b9:81:b1:b9:7a:ab:f7:bf:2a:04:1d:4a:92:f5:82:
                    6b:50:7e:e5:b5:e4:af:c0:29:3f:2d:11:39:77:64:
                    b4:4f:0a:d0:d6:e3:2d:8d:51:96:0f:d2:39:20:6a:
                    36:1a:fe:ea:45:2c:8c:99:e6:61:16:bb:bf:a4:a1:
                    b1:91:91:a9:62:03:e9:a8:37:34:41:a8:2c:cc:98:
                    de:b6:f7:23:4f:68:c3:7a:ae:f5:6b:bf:9d:3a:a0:
                    fd:00:8a:73:ca:55:cf:83:e7:35:27:ee:e1:8f:f4:
                    26:14:fa:b6:af:2a:da:ed:6f:e9:8b:d5:ef:ed:e5:
                    b3:ab:cd:cb:4a:4f:63:6f:17:fb:db:dd:86:d5:e6:
                    3e:e1:ba:42:b7:4b:29:e1:14:a2:65:6b:92:3f:ec:
                    6b:ad:1f:25:b9:a7:b9:36:1c:08:7b:81:9f:9c:54:
                    16:80:e5:87:db:25:af:f2:f5:de:6d:16:52:49:4b:
                    cb:ba:a2:77:b3:a0:13:e0:80:a7:75:24:75:c5:95:
                    5e:8e:af:9d:0d:bd:3b:94:8c:0d:d5:a9:ec:6c:16:
                    40:5d:82:ee:63:1f:6f:91:0e:b2:4f:cf:ab:40:99:
                    94:b0:96:e3:a5:2b:80:7b:d4:f3:6f:fc:b3:2e:c8:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:60:80:94:5C:08:15:CA:24:C8:D7:6A:E1:54:60:C6:FD:54:FE:61
            X509v3 Authority Key Identifier:
                keyid:86:3D:5F:7E:B9:BB:2A:53:09:A1:F8:CB:1C:82:09:D9:FB:C5:5D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/863D5F7EB9BB2A5309A1F8CB1C8209D9FBC55D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e2037313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.45.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:e5:c5:8b:e8:b4:97:5f:f7:07:cc:5a:c7:99:85:f8:eb:f9:
         30:fb:39:0b:27:41:c6:7c:61:cc:57:2f:1e:01:18:c0:7a:d2:
         27:12:42:86:bc:80:d9:12:cf:c6:27:c3:68:ee:da:8d:f2:c6:
         da:30:af:91:e7:62:25:38:01:69:9a:c4:21:57:6a:b5:95:e8:
         7c:3c:36:51:e0:3d:07:73:89:fd:81:7a:c5:e2:ca:01:1e:7c:
         ad:da:f2:f7:13:70:8a:b4:f5:bd:5e:de:0f:aa:31:0e:73:c1:
         ed:f7:04:4a:19:25:d5:b5:be:02:bd:6d:eb:29:7e:08:86:ca:
         66:09:93:2a:46:c8:a9:19:a4:13:ab:a5:39:bf:60:4f:99:62:
         d5:a7:c3:01:ae:ff:37:4f:39:1a:54:b8:b3:e5:44:8b:4d:40:
         55:ee:c3:b2:12:51:4a:8c:62:40:a4:0b:8a:10:ca:c2:44:a3:
         0d:75:58:38:2d:b6:28:39:38:74:a9:20:c3:f2:1e:3e:16:65:
         87:d2:02:24:9c:e1:42:a8:72:8c:1b:27:e6:a7:b9:a0:3d:11:
         bc:d3:6e:d7:5b:77:96:eb:ef:4b:cc:1c:35:0e:4e:a4:00:37:
         3b:a8:2f:d0:73:c4:8e:d1:58:bb:9d:a7:77:02:71:0d:8d:93:
         ff:03:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:31:04 2026 by rpki-client