Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233392e302f32342d3234203d3e20323632393136.roa
File:                     3230302e39352e3233392e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          O8BJBu1rblycmbzKYOelIybeiBrzUoqC0dIxIsypvq4=
Subject key identifier:   54:86:9B:BF:58:89:DF:F2:FA:5D:5F:F5:54:15:28:D3:37:66:E0:19
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       5099E5E10664A2863A669156AE975D45B761E985
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233392e302f32342d3234203d3e20323632393136.roa
Signing time:             Tue 16 Jun 2026 17:48:05 +0000
ROA not before:           Tue 16 Jun 2026 17:43:05 +0000
ROA not after:            Tue 15 Jun 2027 17:48:05 +0000
asID:                     262916
IP address blocks:        200.95.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:99:e5:e1:06:64:a2:86:3a:66:91:56:ae:97:5d:45:b7:61:e9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jun 16 17:43:05 2026 GMT
            Not After : Jun 15 17:48:05 2027 GMT
        Subject: CN=54869BBF5889DFF2FA5D5FF5541528D33766E019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:7d:8d:e9:1b:8b:2e:67:b4:84:ee:5f:ff:
                    55:5a:dd:74:aa:46:7d:70:6f:39:82:33:50:6d:64:
                    8f:e6:49:a7:74:d2:4b:e4:82:87:7d:ce:9f:28:d2:
                    95:df:ff:04:66:0f:83:92:00:ec:c5:92:2f:cd:0d:
                    2c:9a:20:38:e4:d3:e0:20:46:db:ce:09:4b:5a:bb:
                    e7:0c:ec:a1:ee:18:83:ba:07:8f:01:73:d9:88:bb:
                    44:e7:1e:ab:ac:1d:7b:cf:4e:ff:1b:7f:cd:dd:57:
                    6a:8e:57:0a:e4:2b:cd:d9:bd:ad:37:4c:e0:d1:aa:
                    a1:f8:16:5a:ed:4a:37:66:e4:b7:9f:d0:2e:e0:ca:
                    af:24:9b:c6:c5:f3:fa:11:62:2f:df:f0:e4:6c:68:
                    1e:5c:c3:7a:77:5b:ca:91:bc:72:f1:18:9a:b7:32:
                    eb:3b:f5:c1:4d:da:37:d3:72:4e:0c:4b:0c:bc:4c:
                    78:f0:32:ea:b0:ff:86:f0:78:a1:bf:c8:9c:c0:89:
                    18:60:e9:23:e9:95:0d:a5:ac:35:f9:2b:7c:b0:09:
                    c7:0d:b0:9d:17:5d:9a:2f:a3:c1:47:92:da:a8:31:
                    74:16:70:a3:02:ff:93:78:40:b5:a7:d1:1f:7d:e9:
                    1b:2b:55:39:96:e1:18:0e:cc:c7:91:b6:d9:75:29:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:9B:BF:58:89:DF:F2:FA:5D:5F:F5:54:15:28:D3:37:66:E0:19
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233392e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:02:e6:c3:57:f7:e1:15:e5:ed:80:52:1d:f3:6b:01:6e:bb:
         c3:d5:4e:37:b6:e7:e7:53:4b:2c:85:c3:26:a7:0d:72:3c:93:
         fa:d5:d7:52:ee:4e:9d:fe:af:bc:23:36:fc:c5:57:2c:e5:94:
         34:67:af:e4:b9:13:c4:9b:c6:39:c9:de:2a:e6:fd:9a:a0:4e:
         f4:3b:ae:34:6a:26:05:e0:78:db:96:88:5d:83:26:8d:94:ff:
         0b:ac:89:f8:3b:0b:b0:b8:29:72:8c:44:15:23:dd:f8:d9:2b:
         42:7a:51:86:25:76:68:1a:fb:54:71:cd:1d:24:87:0c:b1:59:
         a1:47:d1:3a:fa:16:fd:9f:06:0d:70:4d:31:7b:57:d2:1e:2a:
         b6:9a:5c:1c:65:5a:c6:2b:cb:b7:71:49:20:37:6c:7a:1f:c9:
         36:bb:8e:13:31:dd:55:76:05:27:42:d6:c5:bd:39:68:16:a8:
         8b:2b:7f:1a:5d:a4:d9:68:6e:7a:2a:16:39:f8:ed:05:f8:45:
         b6:6d:92:e7:c4:11:2f:16:1d:23:ae:51:3c:b4:e3:b5:44:4f:
         31:bb:67:78:30:e5:14:a9:2e:23:8a:dd:b0:4d:2b:b4:d7:46:
         c7:42:39:76:e7:91:52:9c:7c:5a:58:39:a3:f6:5f:51:0a:f4:
         50:f1:68:81
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUJnl4QZkooY6ZpFWrpddRbdh6YUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk3NzFCMkQzMDlCMDVCQjhDMkYwRUEzNkZGMTc1MDFF
MjQyQTE5RTAeFw0yNjA2MTYxNzQzMDVaFw0yNzA2MTUxNzQ4MDVaMDMxMTAvBgNV
BAMTKDU0ODY5QkJGNTg4OURGRjJGQTVENUZGNTU0MTUyOEQzMzc2NkUwMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf0X2N6RuLLme0hO5f/1Va3XSq
Rn1wbzmCM1BtZI/mSad00kvkgod9zp8o0pXf/wRmD4OSAOzFki/NDSyaIDjk0+Ag
RtvOCUtau+cM7KHuGIO6B48Bc9mIu0TnHqusHXvPTv8bf83dV2qOVwrkK83Zva03
TODRqqH4FlrtSjdm5Lef0C7gyq8km8bF8/oRYi/f8ORsaB5cw3p3W8qRvHLxGJq3
Mus79cFN2jfTck4MSwy8THjwMuqw/4bweKG/yJzAiRhg6SPplQ2lrDX5K3ywCccN
sJ0XXZovo8FHktqoMXQWcKMC/5N4QLWn0R996RsrVTmW4RgOzMeRttl1KerNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUVIabv1iJ3/L6XV/1VBUo0zdm4BkwHwYDVR0j
BBgwFoAU6XcbLTCbBbuMLw6jb/F1AeJCoZ4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMEVCNkQ5NTYxNUUzNkRDQUQzNTE2NEE2OTkxMDk3OTJD
M0ZDRDNGODYxQjhDN0QxQTYwMTA2QUQzM0ZGRkUyLzAvRTk3NzFCMkQzMDlCMDVC
QjhDMkYwRUEzNkZGMTc1MDFFMjQyQTE5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTc3MUIyRDMwOUIwNUJCOEMy
RjBFQTM2RkYxNzUwMUUyNDJBMTlFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDBFQjZEOTU2MTVFMzZEQ0FEMzUxNjRBNjk5MTA5NzkyQzNGQ0QzRjg2
MUI4QzdEMUE2MDEwNkFEMzNGRkZFMi8wLzMyMzAzMDJlMzkzNTJlMzIzMzM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyF/v
MA0GCSqGSIb3DQEBCwUAA4IBAQC+AubDV/fhFeXtgFId82sBbrvD1U43tufnU0ss
hcMmpw1yPJP61ddS7k6d/q+8Izb8xVcs5ZQ0Z6/kuRPEm8Y5yd4q5v2aoE70O640
aiYF4HjblohdgyaNlP8LrIn4OwuwuClyjEQVI9342StCelGGJXZoGvtUcc0dJIcM
sVmhR9E6+hb9nwYNcE0xe1fSHiq2mlwcZVrGK8u3cUkgN2x6H8k2u44TMd1VdgUn
QtbFvTloFqiLK38aXaTZaG56KhY5+O0F+EW2bZLnxBEvFh0jrlE8tOO1RE8xu2d4
MOUUqS4jit2wTSu010bHQjl255FSnHxaWDmj9l9RCvRQ8WiB
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:21:29 2026 by rpki-client