Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232362e302f32332d3234203d3e203133393939.roa
File:                     3230302e39352e3232362e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          XqzV7ZvjqK8uukbz38cxgZGcbk0+1pHWqmPsrTdrZQo=
Subject key identifier:   1C:F3:9A:23:5D:A3:30:11:0C:A6:19:AD:52:71:52:2C:19:BE:70:DA
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       3F984DC2F555DC37691480F603D0BC749A609292
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232362e302f32332d3234203d3e203133393939.roa
Signing time:             Tue 16 Jun 2026 17:48:07 +0000
ROA not before:           Tue 16 Jun 2026 17:43:07 +0000
ROA not after:            Tue 15 Jun 2027 17:48:07 +0000
asID:                     13999
IP address blocks:        200.95.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:98:4d:c2:f5:55:dc:37:69:14:80:f6:03:d0:bc:74:9a:60:92:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jun 16 17:43:07 2026 GMT
            Not After : Jun 15 17:48:07 2027 GMT
        Subject: CN=1CF39A235DA330110CA619AD5271522C19BE70DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:64:d4:33:49:73:5f:de:88:cf:37:aa:f1:
                    5b:57:8e:e9:dc:ba:34:cc:4c:4b:27:30:58:8a:fc:
                    ab:e4:12:5b:81:ec:00:77:a6:0a:bd:07:fd:49:24:
                    fe:ce:9d:94:29:49:03:87:25:5f:25:44:2c:6d:aa:
                    80:e5:61:4b:f7:64:82:e6:21:dd:b7:05:25:17:5f:
                    20:f8:d1:c1:d1:2f:af:a4:f7:4d:1d:f8:0a:9d:68:
                    68:8c:a5:b8:24:d3:0d:37:01:79:c9:8c:14:cd:8f:
                    eb:38:04:63:39:e5:b8:30:fb:5f:60:8c:8a:8b:b3:
                    d9:52:cb:85:c9:b0:d4:59:52:cc:91:e9:16:32:54:
                    de:c3:27:8f:8f:8b:e5:84:ac:e9:77:19:e2:99:06:
                    1b:89:c7:e3:08:b7:4e:a4:e4:65:f9:c2:ea:4d:5d:
                    a6:90:52:48:3b:d2:d9:89:3b:77:88:dc:69:64:11:
                    f4:7d:a8:d0:05:cf:b6:eb:5a:a5:3f:7e:bf:fa:25:
                    63:1d:8e:eb:e8:c0:3f:8b:47:69:44:8c:d7:e5:64:
                    e6:d5:62:91:29:0b:d2:76:a6:8a:1e:3e:2a:2a:11:
                    d8:6d:f8:14:08:8d:88:83:3f:04:f6:86:2c:0e:27:
                    d1:2c:8f:81:34:2e:57:44:34:a2:91:f1:b4:dd:78:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F3:9A:23:5D:A3:30:11:0C:A6:19:AD:52:71:52:2C:19:BE:70:DA
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232362e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:59:7d:c4:56:f1:6c:30:45:61:08:8f:b1:54:e7:05:73:
         71:e4:80:ca:ff:63:6e:bd:d3:fb:0d:ab:71:95:8b:64:6a:78:
         5a:4e:36:7d:39:4d:31:55:0a:92:c2:1c:63:f2:54:b2:8d:a7:
         92:a4:a8:ba:fd:57:f1:18:30:25:95:55:32:99:18:d3:47:a6:
         15:bc:cd:af:e0:dc:d6:84:86:8d:db:c5:df:22:86:eb:61:46:
         a8:53:91:c3:ef:b3:39:81:8c:6d:db:76:c7:4a:ad:fe:58:2a:
         65:60:3d:3f:0e:fe:26:65:77:b7:c8:25:6b:3d:f8:16:97:d4:
         cb:3d:5d:5e:27:74:c2:35:91:75:11:84:0e:8d:19:ae:b2:60:
         3d:ba:e7:f6:f1:de:72:2c:1b:f3:15:53:ad:94:70:39:31:f0:
         ba:32:b0:08:58:e7:78:28:db:55:43:d7:f0:91:ea:25:1e:11:
         e6:7a:8b:37:02:e0:ba:30:dc:65:d6:03:00:38:f3:50:d2:77:
         6d:c7:40:27:95:13:b8:ad:0b:c9:23:81:b1:19:f8:f1:fa:61:
         57:14:8f:32:a4:c3:85:89:8f:1f:85:61:01:9b:4c:49:3c:53:
         34:66:e7:e9:4b:9d:3a:d6:6a:e7:11:2b:a2:7d:50:8e:51:89:
         91:ab:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:17:22 2026 by rpki-client