Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134342e302f32312d3232203d3e203237363732.roa
File:                     3230302e37372e3134342e302f32312d3232203d3e203237363732.roa (raw, json)
Hash identifier:          fZOZg4PZjMY+353QRhhdjx1tMBY370dDwNsL2oCsjvM=
Subject key identifier:   F2:7E:3D:9C:5E:24:01:9D:17:E7:93:E9:48:7D:70:49:FE:4B:96:E8
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       333BFCF408DA3C660621903537F94C7237BCB225
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134342e302f32312d3232203d3e203237363732.roa
Signing time:             Tue 16 Jun 2026 17:48:06 +0000
ROA not before:           Tue 16 Jun 2026 17:43:06 +0000
ROA not after:            Tue 15 Jun 2027 17:48:06 +0000
asID:                     27672
IP address blocks:        200.77.144.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3b:fc:f4:08:da:3c:66:06:21:90:35:37:f9:4c:72:37:bc:b2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jun 16 17:43:06 2026 GMT
            Not After : Jun 15 17:48:06 2027 GMT
        Subject: CN=F27E3D9C5E24019D17E793E9487D7049FE4B96E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:1c:2e:ed:eb:7d:e6:43:40:ca:c4:f2:ce:
                    a8:28:37:81:cf:39:90:19:04:e7:bf:3d:dd:e0:e8:
                    fb:37:d9:f5:5f:5d:f5:4a:62:9f:a9:de:cc:14:ee:
                    e8:5b:43:d1:f5:b2:5c:21:32:57:42:d2:27:2c:45:
                    1c:ec:eb:46:07:6f:04:47:14:46:cf:75:d3:42:ec:
                    11:5d:ac:aa:0c:45:7e:ef:d7:b9:ea:47:f7:18:53:
                    a0:14:01:67:52:09:4c:95:91:0b:8e:b2:af:ee:f9:
                    f9:92:87:38:26:6a:2b:a2:63:bd:60:4e:c5:cf:1e:
                    ab:77:11:8d:bd:c0:be:3a:8a:3f:90:4e:49:55:f4:
                    70:8d:24:d9:6a:43:ea:39:f2:05:d8:c2:0a:4c:f1:
                    3a:b3:b8:73:2c:c4:63:39:87:dd:fb:c1:c5:2e:0f:
                    54:cc:6b:3f:03:1b:c9:d8:60:cb:d7:2b:fd:e6:ec:
                    91:f5:cc:5e:a0:84:b6:f5:4c:eb:bc:6b:60:85:fd:
                    7e:73:27:13:0f:16:70:f5:46:44:2e:b7:5e:dc:ae:
                    bf:11:2c:f8:f6:8e:ec:ad:7b:c5:a7:0a:44:94:80:
                    3d:9c:37:ac:09:ca:94:6f:7e:77:de:f9:44:5f:ae:
                    06:78:67:04:37:54:9f:2f:6c:6b:23:f8:62:53:42:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7E:3D:9C:5E:24:01:9D:17:E7:93:E9:48:7D:70:49:FE:4B:96:E8
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134342e302f32312d3232203d3e203237363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:6d:27:93:74:45:e7:cb:58:1b:84:19:58:4d:75:62:14:30:
         3e:f0:1e:b8:10:2a:1d:da:d8:70:1d:ae:bc:f9:06:ef:8b:bd:
         fa:8c:c8:b1:64:bb:86:c7:7f:16:90:87:89:eb:e9:cc:ae:e6:
         72:0e:13:ae:1e:b2:8a:2e:b2:40:96:20:01:8c:e2:c1:91:aa:
         4d:78:e2:a0:09:b9:99:ed:28:7d:eb:a1:2f:01:83:5a:d0:82:
         5f:85:cb:c1:14:88:48:b4:cb:7f:68:2c:e0:67:3d:cd:72:94:
         4a:be:38:12:b5:fe:b4:c9:6d:34:80:73:ec:fc:04:e3:0d:c9:
         b9:5a:76:7b:04:63:8b:fa:2e:0a:fd:e2:f6:62:e2:fb:50:72:
         b2:23:c4:72:83:e4:3a:77:a0:ea:c1:f6:41:13:4e:9a:3d:da:
         54:15:82:bc:e0:b5:a7:d2:f5:91:c1:04:00:d8:28:55:fe:7b:
         b8:52:0d:30:78:82:a6:14:72:df:7c:2a:63:80:ec:fd:9e:d0:
         92:0b:74:a5:a1:02:05:7b:73:6d:dc:b1:99:97:1c:79:2b:52:
         e5:ba:03:b2:4d:26:72:49:4d:95:6d:0d:d8:20:f0:e1:f2:2c:
         7d:90:bb:1d:3e:ef:6c:8c:10:5b:58:4c:2d:e8:95:72:f6:b2:
         1f:e7:3f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:36 2026 by rpki-client