Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134382e302f32322d3234203d3e203133393939.roa
File:                     3230302e37372e3134382e302f32322d3234203d3e203133393939.roa (raw, json)
Hash identifier:          pUSYe1xdiQtFDs+xTqRLi5L3my7oSkDq+lwVoa/SDFw=
Subject key identifier:   DA:53:B5:69:34:7D:48:1B:11:50:6F:62:DC:C7:F7:1F:52:A7:64:FF
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       29049F05DF2C62B0FBA303EA4BF42C7C6A119609
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134382e302f32322d3234203d3e203133393939.roa
Signing time:             Thu 07 May 2026 07:41:33 +0000
ROA not before:           Thu 07 May 2026 07:36:33 +0000
ROA not after:            Thu 06 May 2027 07:41:33 +0000
asID:                     13999
IP address blocks:        200.77.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 21:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:04:9f:05:df:2c:62:b0:fb:a3:03:ea:4b:f4:2c:7c:6a:11:96:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: May  7 07:36:33 2026 GMT
            Not After : May  6 07:41:33 2027 GMT
        Subject: CN=DA53B569347D481B11506F62DCC7F71F52A764FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:6c:9f:cd:f4:3f:15:21:a8:d0:99:ca:45:
                    0a:0c:6d:60:ad:92:4e:ea:d6:d0:09:2c:88:80:a8:
                    3d:eb:79:fc:e4:df:1d:d1:ef:ab:56:8b:4a:23:32:
                    82:78:98:ae:68:a0:81:e2:18:33:b8:1e:3d:25:d5:
                    63:47:b4:b9:f4:ef:72:98:b2:dd:aa:df:ed:15:3e:
                    96:7b:60:0d:48:e7:9f:95:1b:2b:3c:4b:18:72:5f:
                    32:e5:ef:7a:37:95:7b:3b:ab:34:0e:9e:32:71:f1:
                    d2:36:63:04:f0:5b:c1:d2:c0:a4:10:72:ce:8b:ed:
                    c0:4f:fe:6b:88:b4:29:cf:73:cf:45:e1:7a:7b:0d:
                    3f:bd:d4:2a:a8:8b:52:13:5c:0b:08:7d:39:a0:2b:
                    be:0f:84:74:9c:76:2c:0c:bd:4e:85:ad:f8:22:ce:
                    7c:f1:47:a6:7a:a3:81:49:5c:62:69:9e:d2:b0:d3:
                    04:0c:80:e5:0f:c2:9f:60:48:0f:3a:0b:34:f8:78:
                    dc:db:23:04:eb:05:cd:62:df:d2:8a:34:91:d4:e1:
                    13:2f:b7:7f:90:e9:da:b2:60:b2:35:80:5f:32:69:
                    e8:ea:47:41:95:3a:47:a6:42:ac:93:6b:3b:63:d0:
                    fd:f2:60:7c:26:f4:39:b2:12:9c:2d:1d:ef:e4:a9:
                    35:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:53:B5:69:34:7D:48:1B:11:50:6F:62:DC:C7:F7:1F:52:A7:64:FF
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134382e302f32322d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:d3:c4:bb:59:d1:5f:0e:2f:d0:6d:d8:83:45:52:20:c3:de:
         f0:b4:61:7f:ec:6b:e3:d3:99:e0:36:48:2e:d9:6d:d1:87:36:
         f1:80:ee:5f:aa:88:79:11:53:cb:58:b8:ce:35:b0:62:e5:a4:
         6b:4d:24:a4:1f:48:54:5d:a2:31:14:76:2e:a4:2c:52:df:fa:
         dc:c0:2f:25:86:32:4f:e4:c9:a8:68:74:90:86:f0:35:ae:f3:
         70:73:1f:5d:ee:79:85:79:a9:9d:fb:8c:78:90:75:7e:e0:dc:
         6f:d7:f6:ff:15:17:dd:c3:f0:98:d0:dc:1d:65:e6:f8:8f:7e:
         72:0f:8a:45:4f:a3:b3:6c:74:44:c2:ae:53:6a:7b:29:88:be:
         fe:5c:32:4e:8d:af:e1:18:04:77:fd:64:97:1f:fe:dd:98:ce:
         28:c8:f4:32:85:34:f5:42:ec:25:3c:70:5f:22:3d:19:7a:2f:
         fa:67:16:87:f7:0c:23:24:41:b4:8a:1f:1b:b8:78:8b:f3:3e:
         87:50:47:04:49:42:2a:eb:1a:f3:86:99:ba:5a:82:79:5c:aa:
         9e:32:69:85:e2:65:5a:cd:82:d5:26:42:42:df:26:76:70:23:
         97:25:08:19:45:c3:a8:50:b4:3d:38:d2:4e:1d:63:17:e2:13:
         21:db:22:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:26:57 2026 by rpki-client