Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f32332d3234203d3e20323632393136.roa
File:                     3230302e39352e3232342e302f32332d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          64Q8yJOBTG5A5CjZ18yy+e06wtbSBnOb1A9bNhaXlcg=
Subject key identifier:   0F:16:A4:E0:8F:49:63:44:F3:E7:C2:05:62:43:93:A4:94:67:4D:0A
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       52A28246792A1A4872C50A3FC3A3DD30575187A7
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f32332d3234203d3e20323632393136.roa
Signing time:             Tue 16 Jun 2026 17:48:04 +0000
ROA not before:           Tue 16 Jun 2026 17:43:04 +0000
ROA not after:            Tue 15 Jun 2027 17:48:04 +0000
asID:                     262916
IP address blocks:        200.95.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a2:82:46:79:2a:1a:48:72:c5:0a:3f:c3:a3:dd:30:57:51:87:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jun 16 17:43:04 2026 GMT
            Not After : Jun 15 17:48:04 2027 GMT
        Subject: CN=0F16A4E08F496344F3E7C205624393A494674D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:5f:e2:7a:4d:3a:d4:5a:37:c5:fe:d6:e2:
                    e2:4e:5d:79:e3:a3:78:be:e6:bb:db:f9:25:0a:6c:
                    6e:c7:cf:45:74:55:93:0a:e6:80:9a:6b:35:83:80:
                    35:d5:2c:63:36:75:f5:a2:8b:3a:14:b9:f7:1d:cd:
                    27:cc:e0:c0:92:fd:c1:ba:fc:cb:dc:44:da:c9:a4:
                    54:6c:76:3d:1c:5c:2e:cc:6c:b4:5d:81:63:c8:fe:
                    bd:6e:8a:62:e3:d7:94:48:85:4b:e1:d3:f0:1b:45:
                    4a:18:de:46:8f:59:80:3b:bd:11:67:06:76:72:45:
                    fb:0f:dd:06:4d:bf:8b:32:db:dd:60:5e:af:f1:f8:
                    04:3a:a1:93:49:4e:70:32:22:19:2f:0b:9e:5c:26:
                    04:42:42:5e:3c:8e:25:ba:94:13:09:b7:41:77:71:
                    ec:ab:33:cf:8e:d5:42:45:df:2f:34:4c:01:48:df:
                    71:e0:4d:23:4f:1e:c5:fc:ee:cc:d4:a3:85:df:1f:
                    f8:01:8a:c4:0f:9d:b8:e3:ba:c5:45:fe:53:8b:31:
                    d9:01:2e:3d:c9:be:78:6e:51:38:fa:a2:b5:68:5d:
                    d7:65:26:2e:5f:f0:a0:13:bb:f3:b0:05:ae:1e:b9:
                    eb:a5:49:43:aa:3f:eb:ff:13:a7:d8:a1:f8:ff:ed:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:16:A4:E0:8F:49:63:44:F3:E7:C2:05:62:43:93:A4:94:67:4D:0A
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f32332d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:49:d9:a5:db:3c:bd:b2:23:4d:45:79:9e:e2:8c:fb:4d:
         67:21:e1:f1:5a:7f:b3:08:36:5d:36:97:d7:5c:3d:b5:9d:80:
         6a:af:0e:95:02:04:52:01:4c:fc:11:e1:dd:2f:04:40:1e:d4:
         31:f6:3a:1c:d3:ab:7d:13:e0:6c:eb:f4:ea:bc:19:e9:63:67:
         e9:b2:11:0f:1e:99:0c:8a:d9:c6:08:99:e3:db:61:41:c6:31:
         bb:ac:69:dd:38:97:2d:95:71:31:61:b3:95:0b:ea:ec:a5:7b:
         2f:4e:16:b3:7b:94:47:fa:16:e0:c9:7d:f6:77:5f:ae:91:33:
         93:0c:55:8f:96:06:22:f1:e9:0d:08:f9:9a:9b:49:2c:13:4f:
         a7:7a:5d:8f:db:8c:11:c1:34:06:75:44:76:48:fb:59:79:20:
         33:ba:07:6b:09:eb:c1:a5:67:da:3e:cd:c6:e0:e6:5b:43:5d:
         8d:0b:72:6d:ee:7e:fb:82:ce:7f:6a:09:2a:39:37:21:c0:cd:
         01:57:b2:aa:34:74:dd:c3:f6:9c:ed:20:58:19:61:42:9e:30:
         5c:8d:c0:e0:ad:3b:13:4d:e0:d8:00:f5:70:eb:41:6e:18:32:
         96:a3:7b:64:77:64:b6:1f:cf:91:fb:95:a6:f7:f1:fa:20:54:
         51:2e:3b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:21:29 2026 by rpki-client