Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233322e302f32332d3234203d3e20323633323338.roa
File:                     3230302e35302e3233322e302f32332d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          eHvdZvxib68xeMKOxHOHI7w9NvBSPjZfz6w2NaR5Oyg=
Subject key identifier:   A7:55:FC:08:E6:CF:66:A7:19:8D:09:61:F3:73:07:2F:48:2A:53:B5
Certificate issuer:       /CN=41806D94B94505925BCA08B32FC096F1C4BED461
Certificate serial:       4E4E6E49235985631D1D18AE7624CA3671DC8E9C
Authority key identifier: 41:80:6D:94:B9:45:05:92:5B:CA:08:B3:2F:C0:96:F1:C4:BE:D4:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233322e302f32332d3234203d3e20323633323338.roa
Signing time:             Fri 10 Jul 2026 23:51:57 +0000
ROA not before:           Fri 10 Jul 2026 23:46:57 +0000
ROA not after:            Fri 09 Jul 2027 23:51:57 +0000
asID:                     263238
IP address blocks:        200.50.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/41806D94B94505925BCA08B32FC096F1C4BED461.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/41806D94B94505925BCA08B32FC096F1C4BED461.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4e:6e:49:23:59:85:63:1d:1d:18:ae:76:24:ca:36:71:dc:8e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41806D94B94505925BCA08B32FC096F1C4BED461
        Validity
            Not Before: Jul 10 23:46:57 2026 GMT
            Not After : Jul  9 23:51:57 2027 GMT
        Subject: CN=A755FC08E6CF66A7198D0961F373072F482A53B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:16:82:3d:51:d2:a7:eb:3b:f2:db:61:5d:
                    0f:54:46:31:28:7e:89:36:24:e8:6f:07:02:93:05:
                    5e:0a:83:a4:d3:4f:16:46:ec:a1:db:25:c3:5f:5f:
                    8a:43:71:ff:03:3f:b6:b4:a5:4e:8e:f6:9e:8e:f1:
                    e6:9d:d7:63:6a:56:32:d6:6b:87:52:60:d9:c5:6a:
                    b8:38:af:63:48:27:04:20:f0:1b:fb:d7:64:d6:61:
                    fc:fb:af:89:57:c1:08:25:a0:ae:49:af:7d:89:9b:
                    c8:55:fa:bd:0d:6e:98:13:92:1d:e3:b7:e5:38:0a:
                    2a:ec:79:b5:eb:6d:73:2b:86:a5:2f:5f:19:64:82:
                    11:b6:14:94:aa:20:fd:5b:70:26:75:fa:e6:8d:fc:
                    98:3e:4e:63:38:ee:2f:2a:18:0a:f8:6d:eb:e9:11:
                    7f:52:a5:98:ba:74:20:79:fe:28:6f:9f:32:b8:1f:
                    88:9b:71:d5:6d:96:d3:ce:49:29:cb:8c:78:29:d9:
                    c6:bd:b8:81:0e:b4:9d:d8:0f:1d:4a:2c:ac:c2:82:
                    7b:aa:bd:73:78:3e:4b:8f:0a:e7:89:48:29:13:e7:
                    14:94:ce:30:f3:12:fe:22:a5:fb:96:a0:83:32:07:
                    51:1d:10:70:72:79:96:07:33:3b:a0:47:c1:cb:92:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:FC:08:E6:CF:66:A7:19:8D:09:61:F3:73:07:2F:48:2A:53:B5
            X509v3 Authority Key Identifier:
                keyid:41:80:6D:94:B9:45:05:92:5B:CA:08:B3:2F:C0:96:F1:C4:BE:D4:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/41806D94B94505925BCA08B32FC096F1C4BED461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233322e302f32332d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:31:1a:70:28:39:63:dc:59:a3:92:6b:ce:5d:dc:5e:f0:3b:
         f6:9a:84:b9:a3:c0:24:f5:49:13:3c:6f:bb:49:c5:38:96:d5:
         15:4a:51:9c:8f:c4:43:0a:35:d9:5a:00:d2:22:4b:b4:5a:1d:
         75:5b:3f:ab:a8:dc:50:bc:58:2f:7e:dc:94:de:aa:a0:67:ac:
         d8:1f:fc:07:4e:1d:69:b9:91:8b:18:32:e3:ad:2f:c2:5b:fd:
         90:61:28:b1:55:9b:b5:40:a5:3b:4f:c6:6d:12:b2:d3:5d:7f:
         6b:e7:94:fb:28:f2:a3:71:c9:fa:8b:33:81:46:22:ca:47:ed:
         51:b4:03:c3:5b:4a:09:13:ac:5f:79:a6:02:84:2d:fa:ca:e9:
         88:69:46:72:1b:3a:f7:92:fd:f9:29:43:98:39:1c:d8:56:4c:
         ee:88:32:e2:5e:7b:e8:5c:3a:8c:41:ff:e5:5d:22:0b:3c:b2:
         22:e9:54:10:12:56:25:17:41:51:06:cc:eb:ad:44:03:1b:9a:
         8c:3d:bd:5f:87:d4:e9:4b:5f:4a:90:b4:a0:38:00:ad:2f:47:
         67:2c:6d:09:ce:80:5f:93:68:8a:7b:c0:b6:47:c8:77:a3:a4:
         c8:1d:ca:60:1b:58:d6:fc:47:98:d5:63:d6:10:18:bf:d5:1d:
         3a:2e:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:56:41 2026 by rpki-client