Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233342e302f32332d3234203d3e20323633323338.roa
File:                     3230302e35302e3233342e302f32332d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          z3MpbtwSUac7tJDjChmt+FuapxfJuhS7ot2hQ0Fw9/0=
Subject key identifier:   22:47:B0:25:1A:AE:CF:A6:EC:54:E1:DA:A7:D6:15:FF:F8:49:AE:70
Certificate issuer:       /CN=41806D94B94505925BCA08B32FC096F1C4BED461
Certificate serial:       03EF51683A2876C31944D10A3EBDA56BD3EF7763
Authority key identifier: 41:80:6D:94:B9:45:05:92:5B:CA:08:B3:2F:C0:96:F1:C4:BE:D4:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233342e302f32332d3234203d3e20323633323338.roa
Signing time:             Fri 10 Jul 2026 23:51:57 +0000
ROA not before:           Fri 10 Jul 2026 23:46:57 +0000
ROA not after:            Fri 09 Jul 2027 23:51:57 +0000
asID:                     263238
IP address blocks:        200.50.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/41806D94B94505925BCA08B32FC096F1C4BED461.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/41806D94B94505925BCA08B32FC096F1C4BED461.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ef:51:68:3a:28:76:c3:19:44:d1:0a:3e:bd:a5:6b:d3:ef:77:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41806D94B94505925BCA08B32FC096F1C4BED461
        Validity
            Not Before: Jul 10 23:46:57 2026 GMT
            Not After : Jul  9 23:51:57 2027 GMT
        Subject: CN=2247B0251AAECFA6EC54E1DAA7D615FFF849AE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:f0:b6:ea:89:b6:b1:f2:24:2f:56:b3:fa:
                    e7:82:34:74:8b:4d:76:2a:c2:0d:f5:d7:ff:4d:69:
                    04:99:e6:85:77:cb:2c:78:53:c9:62:a5:53:0a:42:
                    3b:f0:3a:9b:d7:5d:67:b7:e4:d8:d2:52:aa:3c:7c:
                    c8:77:94:7c:85:d8:70:18:b7:e8:e1:85:ad:c2:bd:
                    1d:68:2f:c8:97:8a:6c:50:a4:82:a7:68:77:82:71:
                    11:a0:35:9b:f4:39:32:2b:3f:e7:50:c6:71:97:ef:
                    33:d6:40:88:15:fc:e8:bf:d0:e0:3f:d0:da:ea:b3:
                    de:cb:62:61:8c:41:c6:ee:27:bf:14:44:d6:fd:cd:
                    5d:cd:6d:69:f7:23:c1:a6:1d:83:31:cb:4b:06:11:
                    b4:2b:cf:6f:d8:bc:19:98:a9:2b:2b:bc:1b:c4:2f:
                    e0:db:fa:06:7f:14:cf:ee:60:58:0b:49:4a:c2:00:
                    71:3c:e5:f0:bd:62:d4:2e:c3:50:4a:f1:d9:d0:ab:
                    52:65:3a:68:99:b1:5f:12:15:f2:e2:b8:bd:46:ed:
                    15:43:fa:f2:1b:ce:17:14:9f:3d:22:6d:72:b9:55:
                    d5:34:4c:61:f3:54:3c:e7:39:73:ab:0a:31:ae:06:
                    7e:14:34:14:e2:4a:93:70:8f:4f:69:01:79:0a:55:
                    f0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:47:B0:25:1A:AE:CF:A6:EC:54:E1:DA:A7:D6:15:FF:F8:49:AE:70
            X509v3 Authority Key Identifier:
                keyid:41:80:6D:94:B9:45:05:92:5B:CA:08:B3:2F:C0:96:F1:C4:BE:D4:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/41806D94B94505925BCA08B32FC096F1C4BED461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233342e302f32332d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:72:de:3a:35:cb:31:c3:fe:a1:db:eb:cd:54:31:86:6d:f7:
         f9:a5:24:35:63:6b:16:9e:56:ba:8e:b1:2a:92:a7:09:be:b5:
         16:6d:14:cb:7f:a9:a9:3b:2f:30:67:fb:85:c7:0c:8f:4f:b2:
         9f:54:5f:fd:c0:38:e4:c8:43:b7:fc:04:da:d3:45:24:87:0f:
         ba:10:6a:7f:a0:58:d0:e7:09:2f:62:cc:af:f9:28:4e:3f:4e:
         6d:f5:72:99:ff:6b:b1:51:f4:b3:77:de:f9:5c:0f:53:ab:bf:
         29:90:17:58:fb:3b:76:e4:4f:d2:c5:d7:73:4d:be:f3:d6:6c:
         fd:4a:e7:3e:d9:1f:97:37:75:b8:86:7a:2b:57:88:67:31:75:
         cd:b6:d8:1a:c3:1b:a5:af:42:52:ed:14:1c:af:c8:6b:ae:14:
         d1:71:a5:17:c0:1a:d0:fe:6b:91:57:e1:ef:5e:e0:27:f3:74:
         18:f5:c5:02:4f:2b:a0:57:67:86:b5:a6:60:19:bf:9d:cd:9b:
         1b:47:cb:cb:fe:1c:b7:5c:4e:86:02:d9:6a:34:1d:8a:b2:44:
         c6:13:e9:54:87:a8:2c:f2:02:d6:21:40:89:55:dd:5c:e9:33:
         31:8a:ba:02:12:52:b6:14:27:7d:e8:60:bc:12:90:8f:3d:c9:
         72:d8:19:d9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUA+9RaDoodsMZRNEKPr2la9Pvd2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE4MDZEOTRCOTQ1MDU5MjVCQ0EwOEIzMkZDMDk2RjFD
NEJFRDQ2MTAeFw0yNjA3MTAyMzQ2NTdaFw0yNzA3MDkyMzUxNTdaMDMxMTAvBgNV
BAMTKDIyNDdCMDI1MUFBRUNGQTZFQzU0RTFEQUE3RDYxNUZGRjg0OUFFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLfC26om2sfIkL1az+ueCNHSL
TXYqwg311/9NaQSZ5oV3yyx4U8lipVMKQjvwOpvXXWe35NjSUqo8fMh3lHyF2HAY
t+jhha3CvR1oL8iXimxQpIKnaHeCcRGgNZv0OTIrP+dQxnGX7zPWQIgV/Oi/0OA/
0Nrqs97LYmGMQcbuJ78URNb9zV3NbWn3I8GmHYMxy0sGEbQrz2/YvBmYqSsrvBvE
L+Db+gZ/FM/uYFgLSUrCAHE85fC9YtQuw1BK8dnQq1JlOmiZsV8SFfLiuL1G7RVD
+vIbzhcUnz0ibXK5VdU0TGHzVDznOXOrCjGuBn4UNBTiSpNwj09pAXkKVfB9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIkewJRquz6bsVOHap9YV//hJrnAwHwYDVR0j
BBgwFoAUQYBtlLlFBZJbygizL8CW8cS+1GEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQUQ2MTlGQkRFMjQzOTE4Qjc2MUM1REY1NTU5ODlEQkIz
RDk5QzA5MzFFQTM0QjQxN0NDOEM0RTY3MzM0Q0U5LzAvNDE4MDZEOTRCOTQ1MDU5
MjVCQ0EwOEIzMkZDMDk2RjFDNEJFRDQ2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTgwNkQ5NEI5NDUwNTkyNUJD
QTA4QjMyRkMwOTZGMUM0QkVENDYxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUFENjE5RkJERTI0MzkxOEI3NjFDNURGNTU1OTg5REJCM0Q5OUMwOTMx
RUEzNEI0MTdDQzhDNEU2NzMzNENFOS8wLzMyMzAzMDJlMzUzMDJlMzIzMzM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMzMzIzMzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByDLq
MA0GCSqGSIb3DQEBCwUAA4IBAQBDct46Ncsxw/6h2+vNVDGGbff5pSQ1Y2sWnla6
jrEqkqcJvrUWbRTLf6mpOy8wZ/uFxwyPT7KfVF/9wDjkyEO3/ATa00Ukhw+6EGp/
oFjQ5wkvYsyv+ShOP05t9XKZ/2uxUfSzd975XA9Tq78pkBdY+zt25E/SxddzTb7z
1mz9Suc+2R+XN3W4hnorV4hnMXXNttgawxulr0JS7RQcr8hrrhTRcaUXwBrQ/muR
V+HvXuAn83QY9cUCTyugV2eGtaZgGb+dzZsbR8vL/hy3XE6GAtlqNB2KskTGE+lU
h6gs8gLWIUCJVd1c6TMxiroCElK2FCd96GC8EpCPPcly2BnZ
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:51:57 2026 by rpki-client