Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133382e302f32332d3234203d3e203237363732.roa
File:                     3230302e37372e3133382e302f32332d3234203d3e203237363732.roa (raw, json)
Hash identifier:          gRY8zspXAz9VFrFUkjdVT2tTrFX+qZ3iCPIL7QG9QdQ=
Subject key identifier:   3B:8D:70:86:DE:63:12:BC:B8:0E:4F:C0:52:4B:0A:37:63:E3:DF:C7
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       665D5B7C115907FE1365BB051345EBDFF88C65D3
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133382e302f32332d3234203d3e203237363732.roa
Signing time:             Tue 16 Jun 2026 17:48:06 +0000
ROA not before:           Tue 16 Jun 2026 17:43:06 +0000
ROA not after:            Tue 15 Jun 2027 17:48:06 +0000
asID:                     27672
IP address blocks:        200.77.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5d:5b:7c:11:59:07:fe:13:65:bb:05:13:45:eb:df:f8:8c:65:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jun 16 17:43:06 2026 GMT
            Not After : Jun 15 17:48:06 2027 GMT
        Subject: CN=3B8D7086DE6312BCB80E4FC0524B0A3763E3DFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:fc:12:3e:09:72:90:e9:a1:4b:e5:14:10:
                    20:92:36:8e:cb:7c:bb:c6:8b:f6:33:bd:d7:e2:f5:
                    48:b8:f7:56:a3:ca:c3:f9:46:f9:16:d2:ab:8f:f1:
                    c0:98:7b:f2:84:71:59:18:f0:cd:52:49:30:b5:b8:
                    79:2b:1f:09:e9:fb:54:3c:81:64:0e:ea:5b:5b:17:
                    53:fe:49:c9:60:68:25:d4:0c:c0:7c:44:c9:83:8f:
                    91:fc:71:21:09:ab:cd:40:5b:3e:f0:9a:69:df:e2:
                    53:a9:6c:8e:81:d9:c8:60:4f:9d:eb:38:a8:17:c8:
                    e1:eb:fb:9b:cc:dc:09:01:68:50:a3:6b:ea:36:c4:
                    8d:8d:c5:e9:bf:df:2f:c8:f3:b1:ee:85:81:85:69:
                    99:45:21:dc:fe:0b:c4:2f:5a:d5:b8:64:dd:c8:38:
                    15:77:e5:3d:38:56:68:e5:83:3b:c0:f2:02:80:3c:
                    e6:4a:79:9e:9f:c7:74:c9:35:db:de:e5:e3:f1:4e:
                    b5:d5:3b:61:60:fe:ca:b9:0d:54:ad:af:ee:00:53:
                    a1:b6:12:6c:12:47:1f:7d:f1:91:92:e1:39:f4:3d:
                    87:7f:d3:95:d3:70:4e:90:b2:85:96:da:d2:59:7d:
                    ec:f9:88:0b:8c:08:11:45:9d:cc:71:66:c0:31:41:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8D:70:86:DE:63:12:BC:B8:0E:4F:C0:52:4B:0A:37:63:E3:DF:C7
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3133382e302f32332d3234203d3e203237363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:13:1c:ce:79:9e:48:78:de:39:fe:e7:29:64:7e:8a:ee:a5:
         88:8d:66:7d:d9:28:1e:39:d3:20:32:7b:21:4e:eb:b1:91:e7:
         50:3e:84:95:51:a6:e1:9a:bf:ea:ac:31:75:ca:74:d0:aa:13:
         05:dc:bb:77:e2:0a:21:9b:48:fc:a7:55:89:d3:42:2b:d2:f5:
         47:32:2c:12:55:6b:f9:1c:1a:6b:3b:f3:3f:8f:7c:b1:37:d7:
         8d:fc:b5:cd:ec:a0:f7:77:b4:fa:91:60:d5:f9:5d:1c:f0:4f:
         0e:80:01:01:66:78:f1:c9:af:da:f9:04:b3:66:ed:0d:04:d3:
         4c:13:0f:b8:7f:77:b4:fd:31:e5:65:b1:1f:b2:a9:fd:88:50:
         54:3f:18:61:e4:67:bc:a0:2f:19:27:86:6e:be:6d:86:72:8e:
         27:80:d2:d7:1b:98:84:82:9d:e3:03:88:cb:de:69:f8:db:69:
         1b:d9:a0:61:24:6a:91:14:d7:4b:9f:da:e9:25:c7:98:62:5e:
         94:34:20:f8:03:cb:f7:e9:7f:76:0a:9a:2c:c8:7c:6d:4f:ec:
         0a:54:c4:b0:86:3e:47:c6:85:e6:40:a8:4a:63:a7:ad:dc:e5:
         2d:63:34:b9:32:bb:6f:10:be:2b:4f:42:9e:31:62:7c:42:ef:
         87:1b:42:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:37 2026 by rpki-client