Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/3230302e31302e32342e302f32322d3234203d3e203131333430.roa
File:                     3230302e31302e32342e302f32322d3234203d3e203131333430.roa (raw, json)
Hash identifier:          BNlYLJwW1jj0YKir9Ap32iiT2fkKbA+QaM/9IV0WDds=
Subject key identifier:   1A:FC:AA:08:C3:A8:57:2A:C3:11:BE:AB:7B:29:29:8E:F0:43:44:AC
Certificate issuer:       /CN=88105C59540F4AEA2F003915544F3908697919AC
Certificate serial:       6C50855DCCF8556B34C8612356A437106B477585
Authority key identifier: 88:10:5C:59:54:0F:4A:EA:2F:00:39:15:54:4F:39:08:69:79:19:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88105C59540F4AEA2F003915544F3908697919AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/3230302e31302e32342e302f32322d3234203d3e203131333430.roa
Signing time:             Mon 06 Jul 2026 20:00:00 +0000
ROA not before:           Mon 06 Jul 2026 19:55:00 +0000
ROA not after:            Mon 05 Jul 2027 20:00:00 +0000
asID:                     11340
IP address blocks:        200.10.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/88105C59540F4AEA2F003915544F3908697919AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/88105C59540F4AEA2F003915544F3908697919AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88105C59540F4AEA2F003915544F3908697919AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:50:85:5d:cc:f8:55:6b:34:c8:61:23:56:a4:37:10:6b:47:75:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88105C59540F4AEA2F003915544F3908697919AC
        Validity
            Not Before: Jul  6 19:55:00 2026 GMT
            Not After : Jul  5 20:00:00 2027 GMT
        Subject: CN=1AFCAA08C3A8572AC311BEAB7B29298EF04344AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6b:dd:e3:fd:9c:97:5b:3d:f6:eb:39:23:f3:
                    6a:32:fd:bc:0a:69:00:00:f3:b5:90:d8:8f:16:0c:
                    93:d8:97:62:2a:0c:61:7b:be:af:11:a7:f6:ab:01:
                    88:52:ef:63:0c:6d:ab:cf:a8:3b:61:9c:ed:ef:1d:
                    99:b3:ba:20:cc:26:fb:d2:2d:8c:3a:80:15:13:23:
                    34:42:32:f9:9c:dd:d5:e4:74:cc:39:31:5f:6b:f2:
                    c7:5b:af:d4:9d:de:35:58:88:12:77:0b:72:00:88:
                    44:fb:21:2d:63:b5:6c:b9:fd:92:d4:4f:a3:1e:4f:
                    d4:b0:93:26:26:21:7e:44:5a:fe:9b:b7:d3:94:fe:
                    6f:7a:1f:9d:fa:45:94:06:62:05:48:e5:74:d5:6b:
                    2b:eb:5a:83:5c:09:94:fc:d4:f0:97:fc:a5:fc:cc:
                    ac:ff:78:df:02:88:ea:e0:43:9b:4d:da:c0:8a:55:
                    03:4b:05:ff:2f:2b:99:e4:9d:1e:1e:c4:94:9d:51:
                    80:f6:d2:05:8c:77:f0:b3:24:83:e9:9f:9c:2a:73:
                    fa:82:85:93:77:01:b1:56:df:a1:a6:5e:56:c2:31:
                    a8:a7:33:e7:fe:e4:da:a9:0c:ec:fd:00:de:9e:d9:
                    67:11:a6:ce:a0:85:2c:27:83:ed:42:84:0e:b3:ff:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FC:AA:08:C3:A8:57:2A:C3:11:BE:AB:7B:29:29:8E:F0:43:44:AC
            X509v3 Authority Key Identifier:
                keyid:88:10:5C:59:54:0F:4A:EA:2F:00:39:15:54:4F:39:08:69:79:19:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/88105C59540F4AEA2F003915544F3908697919AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88105C59540F4AEA2F003915544F3908697919AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC7305FF4BEE1771190EC8465DC15153437ACB9F78E3DD45C2EB21FCEF50F40B/0/3230302e31302e32342e302f32322d3234203d3e203131333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:02:89:b9:f0:ba:86:77:35:1a:30:12:34:9a:07:49:a7:
         47:16:24:b0:cf:dc:ed:8d:fa:9c:d1:c8:4c:a1:54:d2:9b:66:
         f5:03:19:12:f9:84:ba:dc:20:8f:e3:01:b6:06:26:f0:05:cf:
         8b:99:7a:c4:4a:82:ab:bc:8a:f5:cb:18:31:a2:f9:5b:6d:98:
         3c:1e:68:18:73:81:c8:86:d6:7e:96:28:b9:b4:29:08:c1:8b:
         10:14:fd:ff:db:24:c3:b3:70:19:db:03:76:dd:22:2d:8d:9d:
         a3:a9:b7:c2:24:7a:ee:55:51:66:ba:c0:cc:80:6d:57:f3:b4:
         f0:5f:18:d8:ab:fa:e8:46:52:d0:cc:37:b6:62:69:df:51:0e:
         b0:0d:e6:ae:05:ab:30:94:35:52:ff:a8:1a:43:ec:c4:28:42:
         e5:0c:a8:42:f3:73:0d:d5:0d:09:5c:dd:79:59:4c:9f:d5:3e:
         9c:3a:53:ec:3d:26:96:24:89:6a:12:98:c6:fa:b7:9a:22:6e:
         e5:a8:d5:38:0a:fa:ea:0a:1a:36:bf:74:4b:79:a3:00:12:69:
         96:b8:4c:28:d1:eb:cc:d3:28:1f:a6:e1:c8:83:e4:55:11:ec:
         85:f4:45:c8:79:4a:91:6b:02:b0:a2:c7:a1:8d:d1:96:89:f8:
         8a:19:dd:28
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUbFCFXcz4VWs0yGEjVqQ3EGtHdYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgxMDVDNTk1NDBGNEFFQTJGMDAzOTE1NTQ0RjM5MDg2
OTc5MTlBQzAeFw0yNjA3MDYxOTU1MDBaFw0yNzA3MDUyMDAwMDBaMDMxMTAvBgNV
BAMTKDFBRkNBQTA4QzNBODU3MkFDMzExQkVBQjdCMjkyOThFRjA0MzQ0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqa93j/ZyXWz326zkj82oy/bwK
aQAA87WQ2I8WDJPYl2IqDGF7vq8Rp/arAYhS72MMbavPqDthnO3vHZmzuiDMJvvS
LYw6gBUTIzRCMvmc3dXkdMw5MV9r8sdbr9Sd3jVYiBJ3C3IAiET7IS1jtWy5/ZLU
T6MeT9SwkyYmIX5EWv6bt9OU/m96H536RZQGYgVI5XTVayvrWoNcCZT81PCX/KX8
zKz/eN8CiOrgQ5tN2sCKVQNLBf8vK5nknR4exJSdUYD20gWMd/CzJIPpn5wqc/qC
hZN3AbFW36GmXlbCMainM+f+5NqpDOz9AN6e2WcRps6ghSwng+1ChA6z//EBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUGvyqCMOoVyrDEb6reykpjvBDRKwwHwYDVR0j
BBgwFoAUiBBcWVQPSuovADkVVE85CGl5GawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzczMDVGRjRCRUUxNzcxMTkwRUM4NDY1REMxNTE1MzQz
N0FDQjlGNzhFM0RENDVDMkVCMjFGQ0VGNTBGNDBCLzAvODgxMDVDNTk1NDBGNEFF
QTJGMDAzOTE1NTQ0RjM5MDg2OTc5MTlBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODEwNUM1OTU0MEY0QUVBMkYw
MDM5MTU1NDRGMzkwODY5NzkxOUFDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkM3MzA1RkY0QkVFMTc3MTE5MEVDODQ2NURDMTUxNTM0MzdBQ0I5Rjc4
RTNERDQ1QzJFQjIxRkNFRjUwRjQwQi8wLzMyMzAzMDJlMzEzMDJlMzIzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzEzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIChgwDQYJ
KoZIhvcNAQELBQADggEBABDsAom58LqGdzUaMBI0mgdJp0cWJLDP3O2N+pzRyEyh
VNKbZvUDGRL5hLrcII/jAbYGJvAFz4uZesRKgqu8ivXLGDGi+VttmDweaBhzgciG
1n6WKLm0KQjBixAU/f/bJMOzcBnbA3bdIi2NnaOpt8Ikeu5VUWa6wMyAbVfztPBf
GNir+uhGUtDMN7Ziad9RDrAN5q4FqzCUNVL/qBpD7MQoQuUMqELzcw3VDQlc3XlZ
TJ/VPpw6U+w9JpYkiWoSmMb6t5oibuWo1TgK+uoKGja/dEt5owASaZa4TCjR68zT
KB+m4ciD5FUR7IX0Rch5SpFrArCix6GN0ZaJ+IoZ3Sg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:47:51 2026 by rpki-client