Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233372e302f32342d3234203d3e20323632393136.roa
File:                     3230302e39352e3233372e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          3I0/ds1EHiiLC7PYdTf/cRmW54OgXx2j1koyzJnObcY=
Subject key identifier:   3B:70:ED:86:20:60:92:96:99:9F:20:12:66:69:FB:E6:99:95:66:36
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       14E70DE31084D73559A8595DD59B761613FC0317
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233372e302f32342d3234203d3e20323632393136.roa
Signing time:             Tue 16 Jun 2026 17:48:06 +0000
ROA not before:           Tue 16 Jun 2026 17:43:06 +0000
ROA not after:            Tue 15 Jun 2027 17:48:06 +0000
asID:                     262916
IP address blocks:        200.95.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e7:0d:e3:10:84:d7:35:59:a8:59:5d:d5:9b:76:16:13:fc:03:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jun 16 17:43:06 2026 GMT
            Not After : Jun 15 17:48:06 2027 GMT
        Subject: CN=3B70ED8620609296999F20126669FBE699956636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:e4:c2:3f:5d:e6:ed:3f:7d:02:8d:a8:7c:
                    e9:d6:ac:a8:e9:87:6e:47:d0:4b:c3:c5:fe:5a:52:
                    59:ab:68:f1:b7:bd:3a:67:97:7c:22:93:48:13:9d:
                    38:b5:6a:a9:c6:23:ed:f3:16:9f:89:a1:15:14:30:
                    ca:61:71:ec:25:73:d9:d4:19:5e:b8:4d:84:3a:f6:
                    53:09:31:bd:9f:72:9c:85:14:f4:7a:ad:be:db:01:
                    6f:85:ed:5c:79:0a:dc:55:49:33:6a:57:a3:18:15:
                    8d:c7:c9:7f:dd:2d:d5:d4:95:84:47:8e:81:20:65:
                    6d:ef:b1:50:eb:54:2f:e9:42:82:d7:33:a8:34:99:
                    24:62:a7:44:aa:a1:96:44:1a:11:1a:2c:54:44:36:
                    92:05:da:9e:a3:e9:79:ca:2c:f1:ca:a7:2d:76:4e:
                    f9:c7:c8:ee:fa:8c:34:51:00:ce:b3:ee:30:81:be:
                    60:cd:5f:ed:77:6a:e9:20:a0:eb:5e:b9:16:6e:35:
                    41:71:76:c2:4f:f1:f7:cb:29:67:68:c7:e4:11:f9:
                    ef:f7:0b:8e:82:b3:97:3d:90:86:be:3e:17:b3:4f:
                    fd:a7:a0:3d:9c:c9:e8:49:ef:99:b5:ad:e8:0a:9d:
                    71:f9:dd:da:fa:1a:a8:e6:f2:3e:81:f2:1f:06:85:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:70:ED:86:20:60:92:96:99:9F:20:12:66:69:FB:E6:99:95:66:36
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233372e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:98:1d:b3:b1:1b:b6:bc:e0:77:cc:24:a8:a4:7b:41:b2:6d:
         ce:55:95:61:90:ee:19:6a:d6:b7:63:e9:fe:ea:6f:9d:35:ff:
         73:39:c8:65:ac:43:c8:de:5e:9b:45:b4:31:7f:4e:f3:fb:3d:
         54:6b:75:a1:b0:ae:83:fa:80:0d:b0:0a:c0:e6:f2:8b:e3:45:
         df:ad:a3:28:3f:91:6f:ee:d6:13:74:f1:e9:4e:a1:3a:16:c7:
         69:f0:85:0c:79:21:28:4c:aa:9b:31:c0:92:7f:0d:c2:a0:ab:
         66:7f:ba:d9:28:89:89:94:ff:e1:0f:a5:70:ab:f1:70:92:99:
         a6:87:ea:d2:29:b2:f3:1f:33:3f:5c:c1:e9:e7:83:26:a1:e2:
         31:0d:68:e7:6d:e2:52:a9:35:fa:3d:26:84:49:09:c9:ed:84:
         dc:f3:66:0d:7e:78:81:6c:29:35:7f:c7:f9:29:f6:cb:43:9c:
         01:46:ab:ed:f8:61:74:08:7d:67:7c:22:a2:b8:41:e2:63:ad:
         d1:90:49:ac:c1:b9:2f:9f:d5:32:58:6b:95:61:61:c2:2d:b3:
         d7:7e:53:ee:ec:1b:f0:67:d6:16:a8:4a:31:a2:5e:d0:72:5b:
         7c:a4:29:e6:05:77:96:23:e7:99:08:b2:70:e2:a9:e6:3f:f1:
         7e:19:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:21:29 2026 by rpki-client