Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/3230302e302e39362e302f32322d3232203d3e20323635353733.roa
File:                     3230302e302e39362e302f32322d3232203d3e20323635353733.roa (raw, json)
Hash identifier:          2xWcfkCOAUPHveKflopGcOjbuEDnWmEoTeHcxwpF/Ro=
Subject key identifier:   68:DE:07:0E:B3:60:8C:9C:EA:4D:A6:B7:6B:36:71:27:EA:1F:4F:AE
Certificate issuer:       /CN=9944437270C81D9C983F17FF6E081781B0A72418
Certificate serial:       27092EEF6AB62DE3A3F3A35B07C12821E5F36AE9
Authority key identifier: 99:44:43:72:70:C8:1D:9C:98:3F:17:FF:6E:08:17:81:B0:A7:24:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9944437270C81D9C983F17FF6E081781B0A72418.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/3230302e302e39362e302f32322d3232203d3e20323635353733.roa
Signing time:             Sat 11 Jul 2026 18:40:00 +0000
ROA not before:           Sat 11 Jul 2026 18:35:00 +0000
ROA not after:            Sat 10 Jul 2027 18:40:00 +0000
asID:                     265573
IP address blocks:        200.0.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/9944437270C81D9C983F17FF6E081781B0A72418.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/9944437270C81D9C983F17FF6E081781B0A72418.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9944437270C81D9C983F17FF6E081781B0A72418.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:09:2e:ef:6a:b6:2d:e3:a3:f3:a3:5b:07:c1:28:21:e5:f3:6a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944437270C81D9C983F17FF6E081781B0A72418
        Validity
            Not Before: Jul 11 18:35:00 2026 GMT
            Not After : Jul 10 18:40:00 2027 GMT
        Subject: CN=68DE070EB3608C9CEA4DA6B76B367127EA1F4FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:e2:c5:2a:a8:56:43:99:94:47:e7:8f:b6:
                    e8:b9:f7:f8:53:04:26:b1:c5:b2:fd:e0:0c:48:a8:
                    81:f4:90:65:ea:5f:3e:54:d1:bf:81:d9:6d:30:a3:
                    90:bc:ab:70:0c:3a:f0:6f:01:a8:23:9b:56:9d:dd:
                    91:16:17:48:ad:a7:1e:4a:86:81:ec:bc:bf:90:d0:
                    49:7f:32:d7:43:a7:3b:8e:16:ce:3e:b4:78:90:a8:
                    cb:16:15:33:b4:29:19:1d:04:ba:ee:98:10:b3:16:
                    b0:26:ba:a7:ba:d6:eb:31:ca:bb:8a:03:85:d5:16:
                    0c:0c:28:88:bb:d9:37:9f:0a:b3:81:17:bf:ff:db:
                    26:18:a7:33:25:e3:06:e3:9f:56:10:57:19:47:5d:
                    1b:eb:a7:fa:97:b7:5b:98:c4:be:ce:ff:57:0d:4d:
                    da:ca:13:78:69:be:ad:0d:52:4d:af:26:27:8a:8b:
                    9d:9e:86:76:fe:52:38:f5:a3:ba:51:16:38:fb:0a:
                    6e:65:6b:d2:9e:99:d2:00:3c:2d:13:b2:61:54:6f:
                    e0:9a:71:95:80:82:05:2a:f4:11:60:73:44:90:d6:
                    10:66:29:94:65:e7:bf:13:c4:c5:ef:16:40:78:2b:
                    9d:3b:5b:65:99:2d:c3:3b:b6:9d:26:55:13:b3:ea:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DE:07:0E:B3:60:8C:9C:EA:4D:A6:B7:6B:36:71:27:EA:1F:4F:AE
            X509v3 Authority Key Identifier:
                keyid:99:44:43:72:70:C8:1D:9C:98:3F:17:FF:6E:08:17:81:B0:A7:24:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/9944437270C81D9C983F17FF6E081781B0A72418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9944437270C81D9C983F17FF6E081781B0A72418.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDB250071B9E9CAD81113A83E2856A55D37D8C3D7B74E6D812FF78ACC51E3F4C/0/3230302e302e39362e302f32322d3232203d3e20323635353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:a7:d3:5b:31:ec:22:97:6a:44:40:5d:da:cc:94:b5:fb:89:
         ed:1c:f7:22:ab:ed:99:ba:05:ae:e6:36:1d:d2:e5:53:ec:80:
         1b:ba:bc:1e:7d:53:e3:6d:56:fb:a9:12:2c:e3:35:a0:2d:a6:
         0c:8f:1b:de:bc:68:cb:15:37:69:e5:8c:0b:f2:6e:b8:8e:99:
         46:59:73:5e:02:bd:ab:3d:02:64:86:89:78:96:3c:02:fe:f2:
         f7:df:b1:08:1f:5d:1b:f4:af:e7:48:a5:61:ce:22:cd:51:0e:
         a4:66:8b:73:24:b7:1b:b5:11:0e:eb:9a:8f:39:2f:1a:4d:0d:
         96:5a:81:40:1b:5f:d0:aa:16:60:e7:46:8c:e8:9f:cb:06:2e:
         a6:d2:65:ec:7f:9e:78:a0:f6:9a:66:a3:60:2c:49:cb:d9:5e:
         63:81:21:00:c9:f8:95:7e:10:4d:2a:55:bb:bb:98:0b:e4:71:
         60:d8:f3:56:1d:98:ba:8e:5d:f9:0d:d3:95:89:52:09:f0:89:
         b1:74:86:5f:7e:41:ab:e5:ef:6e:b7:2d:74:6d:c6:74:88:bb:
         b6:03:fe:f9:95:f0:eb:b7:bb:ac:3e:45:14:3e:6d:d9:c1:6f:
         07:fc:a5:e2:49:45:a2:b7:03:90:e2:b2:54:11:e5:0a:9d:0d:
         72:c5:a5:c2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJwku72q2LeOj86NbB8EoIeXzaukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk0NDQzNzI3MEM4MUQ5Qzk4M0YxN0ZGNkUwODE3ODFC
MEE3MjQxODAeFw0yNjA3MTExODM1MDBaFw0yNzA3MTAxODQwMDBaMDMxMTAvBgNV
BAMTKDY4REUwNzBFQjM2MDhDOUNFQTREQTZCNzZCMzY3MTI3RUExRjRGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/eOLFKqhWQ5mUR+ePtui59/hT
BCaxxbL94AxIqIH0kGXqXz5U0b+B2W0wo5C8q3AMOvBvAagjm1ad3ZEWF0itpx5K
hoHsvL+Q0El/MtdDpzuOFs4+tHiQqMsWFTO0KRkdBLrumBCzFrAmuqe61usxyruK
A4XVFgwMKIi72TefCrOBF7//2yYYpzMl4wbjn1YQVxlHXRvrp/qXt1uYxL7O/1cN
TdrKE3hpvq0NUk2vJieKi52ehnb+Ujj1o7pRFjj7Cm5la9KemdIAPC0TsmFUb+Ca
cZWAggUq9BFgc0SQ1hBmKZRl578TxMXvFkB4K507W2WZLcM7tp0mVROz6vQ1AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUaN4HDrNgjJzqTaa3azZxJ+ofT64wHwYDVR0j
BBgwFoAUmURDcnDIHZyYPxf/bggXgbCnJBgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CREIyNTAwNzFCOUU5Q0FEODExMTNBODNFMjg1NkE1NUQz
N0Q4QzNEN0I3NEU2RDgxMkZGNzhBQ0M1MUUzRjRDLzAvOTk0NDQzNzI3MEM4MUQ5
Qzk4M0YxN0ZGNkUwODE3ODFCMEE3MjQxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTQ0NDM3MjcwQzgxRDlDOTgz
RjE3RkY2RTA4MTc4MUIwQTcyNDE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkRCMjUwMDcxQjlFOUNBRDgxMTEzQTgzRTI4NTZBNTVEMzdEOEMzRDdC
NzRFNkQ4MTJGRjc4QUNDNTFFM0Y0Qy8wLzMyMzAzMDJlMzAyZTM5MzYyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUzNTM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIAGAwDQYJ
KoZIhvcNAQELBQADggEBADin01sx7CKXakRAXdrMlLX7ie0c9yKr7Zm6Ba7mNh3S
5VPsgBu6vB59U+NtVvupEizjNaAtpgyPG968aMsVN2nljAvybriOmUZZc14Cvas9
AmSGiXiWPAL+8vffsQgfXRv0r+dIpWHOIs1RDqRmi3Mktxu1EQ7rmo85LxpNDZZa
gUAbX9CqFmDnRozon8sGLqbSZex/nnig9ppmo2AsScvZXmOBIQDJ+JV+EE0qVbu7
mAvkcWDY81YdmLqOXfkN05WJUgnwibF0hl9+Qavl7263LXRtxnSIu7YD/vmV8Ou3
u6w+RRQ+bdnBbwf8peJJRaK3A5DislQR5QqdDXLFpcI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:02:41 2026 by rpki-client