Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/3230302e31302e31362e302f32312d3234203d3e203131333430.roa
File:                     3230302e31302e31362e302f32312d3234203d3e203131333430.roa (raw, json)
Hash identifier:          J9cHgzPIuPZWq0RCVuBrL7a2VRtrQf4t9yJG/juRcOY=
Subject key identifier:   CF:BA:34:B0:5E:E0:45:E7:F7:AB:51:5A:A9:A5:E1:68:9B:97:80:F4
Certificate issuer:       /CN=88105C59540F4AEA2F003915544F3908697919AC
Certificate serial:       7967F7D536D173B8149C6F229C45A3595A41A4FE
Authority key identifier: 88:10:5C:59:54:0F:4A:EA:2F:00:39:15:54:4F:39:08:69:79:19:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88105C59540F4AEA2F003915544F3908697919AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/3230302e31302e31362e302f32312d3234203d3e203131333430.roa
Signing time:             Mon 06 Jul 2026 20:00:00 +0000
ROA not before:           Mon 06 Jul 2026 19:55:00 +0000
ROA not after:            Mon 05 Jul 2027 20:00:00 +0000
asID:                     11340
IP address blocks:        200.10.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/88105C59540F4AEA2F003915544F3908697919AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/88105C59540F4AEA2F003915544F3908697919AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88105C59540F4AEA2F003915544F3908697919AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:67:f7:d5:36:d1:73:b8:14:9c:6f:22:9c:45:a3:59:5a:41:a4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88105C59540F4AEA2F003915544F3908697919AC
        Validity
            Not Before: Jul  6 19:55:00 2026 GMT
            Not After : Jul  5 20:00:00 2027 GMT
        Subject: CN=CFBA34B05EE045E7F7AB515AA9A5E1689B9780F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:ca:72:6b:48:d7:32:48:26:4b:f5:0b:c6:
                    29:35:15:cf:92:52:cc:56:b7:47:77:52:1d:3d:82:
                    16:0d:5a:80:2f:7e:a0:8d:58:81:94:74:bd:87:5b:
                    ed:28:28:50:17:7b:3e:cf:5c:42:77:5b:99:14:2d:
                    b8:63:d1:7d:83:69:0a:ff:d8:ee:3c:c6:32:83:e0:
                    bd:67:d6:ae:5b:4d:bb:c3:f7:bd:86:e8:54:29:fc:
                    57:a1:df:e0:84:e8:04:40:25:a5:8e:04:f2:48:dd:
                    82:3b:01:75:01:ea:fa:98:9b:db:c1:3a:1c:44:b8:
                    8c:01:a6:24:9c:d9:85:5e:7c:e5:ba:3c:24:db:b1:
                    45:3c:7c:bd:e3:55:7c:aa:87:db:c9:51:36:64:a5:
                    2f:72:80:1c:c7:26:d4:15:57:4f:d7:8b:14:87:44:
                    96:40:dc:4d:45:1d:52:f5:44:8e:fd:02:4a:71:74:
                    7f:b6:d0:54:a5:92:e5:db:9b:5c:d7:38:81:a7:fa:
                    e9:d8:d6:c5:01:88:0d:ad:c6:42:18:53:7e:e2:b9:
                    79:d9:77:17:45:e5:30:25:24:d2:0c:fc:8d:83:79:
                    4b:95:17:5b:f1:1a:79:18:db:05:3a:e9:d3:b5:a1:
                    9d:f3:d1:81:35:a8:fa:10:67:56:5e:dc:ac:fd:2c:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BA:34:B0:5E:E0:45:E7:F7:AB:51:5A:A9:A5:E1:68:9B:97:80:F4
            X509v3 Authority Key Identifier:
                keyid:88:10:5C:59:54:0F:4A:EA:2F:00:39:15:54:4F:39:08:69:79:19:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/88105C59540F4AEA2F003915544F3908697919AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88105C59540F4AEA2F003915544F3908697919AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/3230302e31302e31362e302f32312d3234203d3e203131333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:17:1b:b3:65:c8:bf:3e:f2:14:78:32:50:1a:de:fb:11:13:
         b8:85:54:6f:88:f3:61:35:0f:5d:22:a4:87:a4:50:e9:0a:96:
         45:81:e0:20:88:4a:07:e3:25:61:93:2e:54:52:a9:69:fb:c2:
         95:bb:fc:b9:68:29:43:60:dd:ae:77:54:c2:9e:f3:34:61:27:
         49:ff:a0:66:a6:90:a0:21:77:0f:64:77:bd:fd:99:b5:f2:b8:
         af:34:be:43:ae:d9:eb:de:ef:28:0b:6e:86:2a:8b:41:36:c5:
         69:5b:c9:c1:0d:14:af:96:a9:50:51:99:8f:b3:3c:c6:b5:a1:
         74:44:22:a1:f1:a7:58:1c:ee:3f:a6:b9:1a:2f:67:85:90:78:
         66:b1:76:40:67:13:6f:e3:47:68:ef:96:f4:33:15:f5:86:d1:
         7a:cd:8c:9e:41:da:fb:bc:3e:94:79:e8:b8:6d:4f:15:59:3b:
         24:94:53:35:35:5e:62:59:cc:30:f7:00:0d:a6:33:74:12:4f:
         79:fc:1c:8a:55:b3:4c:e5:07:5e:81:0c:ea:0c:a9:17:7a:7e:
         dd:5d:67:6e:05:fc:62:d7:89:82:21:05:99:ba:78:5d:a7:63:
         71:85:30:ce:0f:f4:74:f4:bf:30:7e:f3:39:74:2c:a7:53:5f:
         5b:00:66:2c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUeWf31TbRc7gUnG8inEWjWVpBpP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgxMDVDNTk1NDBGNEFFQTJGMDAzOTE1NTQ0RjM5MDg2
OTc5MTlBQzAeFw0yNjA3MDYxOTU1MDBaFw0yNzA3MDUyMDAwMDBaMDMxMTAvBgNV
BAMTKENGQkEzNEIwNUVFMDQ1RTdGN0FCNTE1QUE5QTVFMTY4OUI5NzgwRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiD8pya0jXMkgmS/ULxik1Fc+S
UsxWt0d3Uh09ghYNWoAvfqCNWIGUdL2HW+0oKFAXez7PXEJ3W5kULbhj0X2DaQr/
2O48xjKD4L1n1q5bTbvD972G6FQp/Feh3+CE6ARAJaWOBPJI3YI7AXUB6vqYm9vB
OhxEuIwBpiSc2YVefOW6PCTbsUU8fL3jVXyqh9vJUTZkpS9ygBzHJtQVV0/XixSH
RJZA3E1FHVL1RI79AkpxdH+20FSlkuXbm1zXOIGn+unY1sUBiA2txkIYU37iuXnZ
dxdF5TAlJNIM/I2DeUuVF1vxGnkY2wU66dO1oZ3z0YE1qPoQZ1Ze3Kz9LEl1AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUz7o0sF7gRef3q1FaqaXhaJuXgPQwHwYDVR0j
BBgwFoAUiBBcWVQPSuovADkVVE85CGl5GawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzczMDVGRjRCRUUxNzcxMTkwRUM4NDY1REMxNTE1MzQz
N0FDQjlGNzhFM0RENDVDMkVCMjFGQ0VGNTBGNDBCLzAvODgxMDVDNTk1NDBGNEFF
QTJGMDAzOTE1NTQ0RjM5MDg2OTc5MTlBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODEwNUM1OTU0MEY0QUVBMkYw
MDM5MTU1NDRGMzkwODY5NzkxOUFDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkM3MzA1RkY0QkVFMTc3MTE5MEVDODQ2NURDMTUxNTM0MzdBQ0I5Rjc4
RTNERDQ1QzJFQjIxRkNFRjUwRjQwQi8wLzMyMzAzMDJlMzEzMDJlMzEzNjJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzEzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIChAwDQYJ
KoZIhvcNAQELBQADggEBAHAXG7NlyL8+8hR4MlAa3vsRE7iFVG+I82E1D10ipIek
UOkKlkWB4CCISgfjJWGTLlRSqWn7wpW7/LloKUNg3a53VMKe8zRhJ0n/oGamkKAh
dw9kd739mbXyuK80vkOu2eve7ygLboYqi0E2xWlbycENFK+WqVBRmY+zPMa1oXRE
IqHxp1gc7j+muRovZ4WQeGaxdkBnE2/jR2jvlvQzFfWG0XrNjJ5B2vu8PpR56Lht
TxVZOySUUzU1XmJZzDD3AA2mM3QST3n8HIpVs0zlB16BDOoMqRd6ft1dZ24F/GLX
iYIhBZm6eF2nY3GFMM4P9HT0vzB+8zl0LKdTX1sAZiw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:18 2026 by rpki-client