Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3135322e302f32312d3231203d3e203133393939.roa
File:                     3230302e37372e3135322e302f32312d3231203d3e203133393939.roa (raw, json)
Hash identifier:          XIXXa0WNP1437M0Dlctn4+VFG3i60xrxikj9P6y/X24=
Subject key identifier:   14:0C:98:6A:39:29:93:8B:0E:8B:34:A4:27:B5:03:18:D0:75:4E:43
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       7933BFA9057B5370245C5239661EFDAC0F88E30C
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3135322e302f32312d3231203d3e203133393939.roa
Signing time:             Thu 07 May 2026 07:41:32 +0000
ROA not before:           Thu 07 May 2026 07:36:32 +0000
ROA not after:            Thu 06 May 2027 07:41:32 +0000
asID:                     13999
IP address blocks:        200.77.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 21:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:33:bf:a9:05:7b:53:70:24:5c:52:39:66:1e:fd:ac:0f:88:e3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: May  7 07:36:32 2026 GMT
            Not After : May  6 07:41:32 2027 GMT
        Subject: CN=140C986A3929938B0E8B34A427B50318D0754E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:28:9b:1c:79:8b:ca:e6:a0:4f:c7:bb:6c:
                    4c:bb:77:92:20:ff:46:97:34:c2:60:d6:91:5c:98:
                    e3:f7:ca:71:29:ca:0b:33:f5:66:df:8e:fc:bf:4a:
                    4c:a0:5b:46:92:1f:a5:3d:20:67:7c:82:ef:fb:40:
                    a8:a7:d5:04:37:7a:29:cc:c1:9e:7e:34:8d:51:6c:
                    cb:ef:00:9f:f3:5e:ce:a0:53:b8:d2:1c:bd:55:f7:
                    1c:4d:3c:25:74:fd:d9:69:7b:6d:63:fb:95:7e:be:
                    69:3f:cd:31:b9:e4:b2:0a:87:21:32:95:d9:58:09:
                    b5:d2:5e:7a:df:fc:29:84:03:8a:b6:03:a7:34:53:
                    79:1c:44:84:bc:5f:09:ee:0a:e7:57:c1:7c:7c:63:
                    0d:4e:d5:e9:b4:dc:9d:42:7d:86:30:c5:40:68:d4:
                    dc:6e:08:3f:4b:c8:d5:85:bb:1f:43:16:3e:c3:01:
                    2f:e7:66:8f:02:08:47:4d:47:90:4a:e9:79:7f:f8:
                    72:ea:2a:3d:d3:7f:0d:ac:00:4d:31:f5:b1:b5:9f:
                    87:05:14:ae:d4:9d:70:c0:c2:47:b5:5c:65:5f:71:
                    75:aa:7e:b3:d2:f3:af:94:6f:b5:39:b8:f1:0f:86:
                    ad:e2:ba:13:76:39:5e:84:03:c9:2b:1b:bb:a5:9c:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0C:98:6A:39:29:93:8B:0E:8B:34:A4:27:B5:03:18:D0:75:4E:43
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3135322e302f32312d3231203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:48:a0:69:ab:3f:94:23:16:d5:91:34:af:53:f7:07:8b:42:
         f3:db:ef:93:9d:b5:74:8c:28:95:6d:05:be:48:a7:9e:2e:9c:
         51:90:db:d0:11:a9:57:93:44:14:03:e4:57:16:cc:00:2c:06:
         e8:ed:28:b4:df:fc:4d:a0:68:73:a9:6b:8b:bc:f9:53:89:ba:
         12:d5:e8:b3:ef:ec:9a:f2:44:bf:59:d1:0c:78:c6:d5:db:a3:
         cd:05:ab:da:68:54:06:63:2c:e7:4a:ac:f8:28:b2:5f:90:48:
         d4:ba:f6:91:53:46:04:e2:5d:00:c7:67:f8:f1:1f:2b:60:12:
         a0:3d:58:eb:3c:3d:60:77:c8:93:ba:1e:05:bd:1c:e7:b6:fc:
         ff:59:66:db:e3:c0:9f:84:31:38:ac:2e:ae:77:95:de:64:3d:
         14:f0:b4:b0:71:69:b0:b9:da:fd:4e:7d:16:7e:d8:5a:bd:bf:
         e4:e8:9f:b1:b3:db:95:aa:2f:25:69:71:3f:a7:43:4c:79:28:
         d3:f6:ed:f6:df:50:c3:0a:b4:36:e2:84:0f:ae:1c:c1:c2:51:
         81:fa:e4:29:ae:3d:eb:ed:e4:ab:df:3e:d7:2c:c7:66:e1:76:
         db:f9:fa:be:35:06:b6:0e:53:60:f3:7e:d4:df:b6:26:19:21:
         cd:5a:39:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:49:45 2026 by rpki-client