Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233322e302f32322d3233203d3e203133393939.roa
File:                     3230302e39352e3233322e302f32322d3233203d3e203133393939.roa (raw, json)
Hash identifier:          l4dcWHgu6G+RJ0Fgp4xpjHcBkanGnNI/bm3tHbFhwPo=
Subject key identifier:   23:F6:84:1A:9C:7F:2E:63:A2:1A:43:73:B5:AE:E4:CB:E8:3D:E8:7C
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       308CBE5718F7BBD2103A4ED03B66DBAD0113C8EF
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233322e302f32322d3233203d3e203133393939.roa
Signing time:             Tue 16 Jun 2026 17:48:04 +0000
ROA not before:           Tue 16 Jun 2026 17:43:04 +0000
ROA not after:            Tue 15 Jun 2027 17:48:04 +0000
asID:                     13999
IP address blocks:        200.95.232.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8c:be:57:18:f7:bb:d2:10:3a:4e:d0:3b:66:db:ad:01:13:c8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jun 16 17:43:04 2026 GMT
            Not After : Jun 15 17:48:04 2027 GMT
        Subject: CN=23F6841A9C7F2E63A21A4373B5AEE4CBE83DE87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:b0:6d:95:c5:e4:97:65:0d:e3:3e:5e:4c:
                    f4:ad:48:db:f9:48:03:a0:95:6d:74:3a:3d:06:74:
                    b5:dd:2b:e0:f1:1c:8e:3c:4c:d9:58:54:22:0e:16:
                    fb:59:24:af:a5:bd:cc:9a:05:3e:03:e0:01:37:13:
                    48:25:e4:1d:68:ac:85:e4:86:00:d5:06:4a:fa:e9:
                    b1:39:5f:03:4e:17:27:06:f5:b9:54:fe:67:26:02:
                    21:ce:2c:fd:55:89:cd:19:05:b9:fc:c7:84:da:69:
                    77:45:eb:e7:b9:eb:65:32:96:ae:aa:03:da:71:7c:
                    48:d8:2c:2a:74:97:c2:a4:2c:09:51:6c:83:2f:b8:
                    63:61:c0:e9:6e:ae:ed:f3:11:f3:ef:20:09:9e:5b:
                    f0:03:70:4c:29:a6:a8:5d:be:a9:57:a3:3c:21:11:
                    1f:42:ed:a5:a4:be:97:1d:a0:98:b1:b3:41:93:b9:
                    00:5a:17:f3:cc:6f:cc:e0:8a:28:fc:89:81:5a:30:
                    fe:68:dd:d3:8b:5f:0f:37:be:a2:78:35:21:02:b8:
                    64:b0:af:cf:40:aa:53:65:b6:0c:59:6e:08:68:8c:
                    e8:6a:fa:85:44:08:fb:e6:e6:68:3f:06:2b:17:08:
                    ca:b3:1d:a9:16:60:c6:93:63:46:54:1d:e5:0a:49:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F6:84:1A:9C:7F:2E:63:A2:1A:43:73:B5:AE:E4:CB:E8:3D:E8:7C
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233322e302f32322d3233203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:aa:0b:4b:46:90:22:32:f4:a5:f1:29:0f:52:e8:46:7f:98:
         0f:8c:68:0f:e1:2b:c9:77:45:c7:46:f4:c1:92:d9:e2:76:94:
         54:13:c8:25:58:df:36:2e:18:ec:d9:61:69:b6:9f:fa:fa:08:
         b2:f6:03:1e:93:79:a3:ed:c5:67:36:9b:ce:e0:bf:0e:70:9a:
         b9:8f:fc:d5:0b:de:a2:b8:16:55:fd:7f:b0:61:b8:b0:c4:8d:
         c8:a7:fb:fd:09:9d:90:77:b9:26:fb:61:86:2d:9e:79:50:53:
         15:3f:18:32:5e:f6:7e:57:1b:a6:17:89:d1:77:e1:13:95:53:
         52:72:74:9a:a3:b7:c6:46:c4:8f:22:66:59:59:84:e5:5c:e0:
         42:fc:c8:6f:3f:d0:e5:92:86:f3:62:b9:1f:d2:d1:c8:2d:fc:
         76:f1:47:38:b3:cc:d0:a2:86:b8:89:a0:7f:63:1a:f0:a3:e7:
         a6:9c:c3:ff:90:c6:f7:a8:56:e9:70:1c:ac:bf:4f:6d:a0:53:
         9f:30:b0:92:c3:c9:a3:76:3b:ea:97:04:67:2d:45:09:92:34:
         e2:57:26:27:1a:f8:1c:c4:8c:cf:1a:0e:27:6d:01:aa:3f:28:
         7e:d1:ec:f8:a6:8b:15:e6:e6:e0:fe:8a:c6:46:a5:43:bf:25:
         3b:eb:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:33 2026 by rpki-client