Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/3230302e37362e3131382e302f32342d3234203d3e203238343437.roa
File:                     3230302e37362e3131382e302f32342d3234203d3e203238343437.roa (raw, json)
Hash identifier:          7ThB6slL9xzUrwVZe9Im2yVp8GH8FA5w3ocQ712T2ug=
Subject key identifier:   75:6D:95:7A:66:1A:FE:BD:86:FE:55:36:B1:28:3E:65:9E:B2:F7:69
Certificate issuer:       /CN=E785855AE57240B2FBDD57CDBA7782BF3C0A1D53
Certificate serial:       55E32F9FFBE0C95A477A94C64055C85EEBA56ADF
Authority key identifier: E7:85:85:5A:E5:72:40:B2:FB:DD:57:CD:BA:77:82:BF:3C:0A:1D:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/3230302e37362e3131382e302f32342d3234203d3e203238343437.roa
Signing time:             Fri 30 Oct 2026 16:06:20 +0000
ROA not before:           Fri 30 Oct 2026 16:01:20 +0000
ROA not after:            Fri 29 Oct 2027 16:06:20 +0000
asID:                     28447
IP address blocks:        200.76.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e3:2f:9f:fb:e0:c9:5a:47:7a:94:c6:40:55:c8:5e:eb:a5:6a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E785855AE57240B2FBDD57CDBA7782BF3C0A1D53
        Validity
            Not Before: Oct 30 16:01:20 2026 GMT
            Not After : Oct 29 16:06:20 2027 GMT
        Subject: CN=756D957A661AFEBD86FE5536B1283E659EB2F769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:d9:89:f7:db:6a:cb:b3:e2:89:57:c9:41:
                    fb:02:6e:4c:8d:6b:b5:a6:ab:55:b4:d7:78:f6:32:
                    d3:1f:62:66:2f:72:3e:74:9f:d7:ba:85:b7:c0:1d:
                    2e:71:ef:4d:b8:6f:c9:cc:fb:4f:05:78:80:1c:b7:
                    79:c5:e9:e0:9d:15:f0:7c:d6:65:08:36:f4:f0:a8:
                    fd:37:05:43:8b:26:b0:b8:c3:29:d7:52:23:55:0f:
                    8c:b2:47:d9:50:92:ae:2e:e0:08:f6:57:a4:fe:be:
                    be:f9:3b:e3:d7:1f:28:da:c7:16:41:ea:45:22:b2:
                    2d:d3:b9:28:6f:b9:cc:4f:4b:3e:e5:d3:5e:cf:ee:
                    c5:34:c4:75:e6:72:0a:57:c3:66:72:d7:7f:99:05:
                    58:94:2f:33:b6:23:ee:d2:67:eb:de:30:89:73:df:
                    ba:11:d4:64:2d:be:2b:6e:8d:70:68:1d:3d:4c:5f:
                    36:f4:17:1c:c0:92:1f:45:d7:12:06:f6:e1:d8:fe:
                    38:f3:71:5f:e4:8f:58:72:a3:bf:2f:a6:6b:46:58:
                    dc:87:9f:52:6e:83:1c:6c:69:fa:53:f6:37:f3:ef:
                    06:03:5a:17:85:e8:4b:79:c9:d0:be:17:28:3f:fa:
                    13:e3:b4:a9:7f:3e:0c:d6:20:f1:92:1b:c9:2b:4d:
                    8d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6D:95:7A:66:1A:FE:BD:86:FE:55:36:B1:28:3E:65:9E:B2:F7:69
            X509v3 Authority Key Identifier:
                keyid:E7:85:85:5A:E5:72:40:B2:FB:DD:57:CD:BA:77:82:BF:3C:0A:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/3230302e37362e3131382e302f32342d3234203d3e203238343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:4e:4e:c7:33:38:e5:ad:d8:a4:3b:df:2b:27:e5:23:19:46:
         5d:fd:b5:16:fd:84:29:15:98:47:82:f7:54:2d:d7:1c:45:42:
         14:ec:77:ac:ec:1e:43:47:86:4f:8a:49:0b:a3:c3:b5:07:c1:
         d4:97:b8:ca:6e:21:a5:15:61:8a:8f:f8:d5:5b:16:07:55:18:
         30:5e:e9:14:18:9a:94:a2:d4:d1:d5:80:db:7d:d7:4d:9a:f8:
         d8:aa:63:3c:71:19:36:92:60:6b:e6:0c:f1:72:13:96:80:6b:
         2e:39:84:a8:d6:3a:3f:83:cf:98:08:2e:48:d7:63:a7:ae:ea:
         f9:b0:9a:2a:95:91:9a:4e:3c:23:fc:34:2d:b0:71:47:d4:2f:
         a7:d9:8f:2e:7d:cc:6f:76:4e:05:46:a5:61:14:9d:35:57:00:
         91:f9:58:28:49:a5:39:f1:72:bb:1b:59:9a:03:75:9d:d4:31:
         05:39:b1:b8:89:e7:fa:0d:1a:4d:66:a5:1c:0d:e2:2c:03:d4:
         cd:2b:0a:71:ca:13:fd:bc:87:bc:eb:08:5a:44:7a:51:0d:45:
         7b:0f:43:34:77:f6:f0:ea:07:dd:45:cd:29:b2:58:24:a9:ea:
         80:df:2b:75:1a:76:11:74:0a:d5:cc:7b:4f:34:82:27:75:08:
         c8:1c:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 11:34:13 2026 by rpki-client