Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EE07388D71523B96A0F5905566AB82B578DF91A22F752C3DFEAE9ADA4BEAE2FE/0/3230302e32342e3130342e302f32322d3234203d3e20323733303239.roa
File:                     3230302e32342e3130342e302f32322d3234203d3e20323733303239.roa (raw, json)
Hash identifier:          rV0Ttrj7kWpt6gN//W9eOD0H3XtWavBEKp6AyZFddsU=
Subject key identifier:   04:E4:D7:0C:C9:C4:EE:4A:7C:40:7A:6C:CB:C2:87:38:46:49:B0:31
Certificate issuer:       /CN=7CB88E5F497CD357EF6162F26D773596551B0885
Certificate serial:       33CDDFBCDA1511B5F530CDA904E85A5B5DEFEF8F
Authority key identifier: 7C:B8:8E:5F:49:7C:D3:57:EF:61:62:F2:6D:77:35:96:55:1B:08:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CB88E5F497CD357EF6162F26D773596551B0885.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE07388D71523B96A0F5905566AB82B578DF91A22F752C3DFEAE9ADA4BEAE2FE/0/3230302e32342e3130342e302f32322d3234203d3e20323733303239.roa
Signing time:             Tue 22 Sep 2026 19:15:00 +0000
ROA not before:           Tue 22 Sep 2026 19:10:00 +0000
ROA not after:            Tue 21 Sep 2027 19:15:00 +0000
asID:                     273029
IP address blocks:        200.24.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE07388D71523B96A0F5905566AB82B578DF91A22F752C3DFEAE9ADA4BEAE2FE/0/7CB88E5F497CD357EF6162F26D773596551B0885.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE07388D71523B96A0F5905566AB82B578DF91A22F752C3DFEAE9ADA4BEAE2FE/0/7CB88E5F497CD357EF6162F26D773596551B0885.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CB88E5F497CD357EF6162F26D773596551B0885.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cd:df:bc:da:15:11:b5:f5:30:cd:a9:04:e8:5a:5b:5d:ef:ef:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB88E5F497CD357EF6162F26D773596551B0885
        Validity
            Not Before: Sep 22 19:10:00 2026 GMT
            Not After : Sep 21 19:15:00 2027 GMT
        Subject: CN=04E4D70CC9C4EE4A7C407A6CCBC287384649B031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:5c:42:71:34:ed:08:8e:f3:ba:2e:4f:fd:
                    e9:38:df:14:d2:83:ab:c5:7c:b1:07:a0:c3:33:57:
                    b0:ca:94:ba:b1:cf:26:70:89:1e:3e:64:4e:c5:ea:
                    eb:b8:68:1f:42:88:b5:4a:5b:cf:2b:e1:05:88:58:
                    da:4b:52:10:17:e5:68:80:07:c0:24:37:0e:83:79:
                    54:c5:c1:a1:be:91:cc:58:1e:3b:c8:1c:f5:f7:b4:
                    70:a0:74:d4:a7:f7:ba:94:16:24:6b:ed:e7:7d:06:
                    07:f9:23:a6:c0:8f:0c:16:cb:05:41:85:ae:7c:0b:
                    9f:17:85:c1:0a:dc:89:10:11:40:e2:9b:4b:16:f0:
                    ff:61:e2:bb:c3:b9:48:26:87:e3:50:41:63:3f:80:
                    4a:b4:bd:7a:1e:4e:98:f8:8b:31:d1:c4:2e:06:a8:
                    c6:7f:2b:6b:22:75:b5:02:c3:8e:1b:17:c0:10:74:
                    0c:e5:ac:78:e8:c2:0e:56:1c:54:d2:68:de:2d:15:
                    88:14:61:d8:fb:55:9f:73:98:f1:eb:ac:85:7f:24:
                    c8:c4:99:f9:a1:b8:9a:10:df:ca:c5:0a:74:42:33:
                    bd:be:e9:33:1b:4a:98:a7:7a:f6:31:db:94:42:fd:
                    33:66:c4:cd:37:19:ef:33:7d:a1:9a:30:0e:df:65:
                    a3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E4:D7:0C:C9:C4:EE:4A:7C:40:7A:6C:CB:C2:87:38:46:49:B0:31
            X509v3 Authority Key Identifier:
                keyid:7C:B8:8E:5F:49:7C:D3:57:EF:61:62:F2:6D:77:35:96:55:1B:08:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE07388D71523B96A0F5905566AB82B578DF91A22F752C3DFEAE9ADA4BEAE2FE/0/7CB88E5F497CD357EF6162F26D773596551B0885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CB88E5F497CD357EF6162F26D773596551B0885.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE07388D71523B96A0F5905566AB82B578DF91A22F752C3DFEAE9ADA4BEAE2FE/0/3230302e32342e3130342e302f32322d3234203d3e20323733303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:50:c4:fa:11:54:42:f0:91:35:94:37:f6:72:0f:ce:7d:91:
         86:65:09:97:36:2b:93:50:e8:90:98:2e:7e:59:5d:87:ce:d1:
         6d:b5:9e:b3:2b:c1:bd:22:d0:c2:db:c9:f0:05:08:6c:ea:83:
         91:c1:8f:c9:71:41:91:82:45:73:3e:1f:81:83:da:e9:51:7b:
         43:52:42:d6:92:b8:93:d3:3a:f0:9e:f1:da:06:fc:85:be:23:
         58:5e:ad:b3:2e:bb:21:1b:dc:08:92:19:9c:a4:6a:3a:11:41:
         2f:3a:59:39:81:17:f7:27:06:4c:d1:5c:82:24:87:b0:6e:cb:
         1e:32:ff:b1:d7:20:f3:d5:7c:bf:0d:4c:3b:a8:61:08:a5:b7:
         a0:b9:b3:ec:72:7d:75:84:17:37:cb:9f:11:5d:41:a0:5b:c5:
         41:df:ac:94:28:04:33:a9:07:94:92:15:20:99:23:3b:36:91:
         51:a8:01:46:77:7e:4c:95:7d:61:22:26:a7:d5:da:b8:92:01:
         27:a5:f4:29:6c:b9:24:f8:41:a3:dd:42:92:5c:d2:63:be:91:
         86:bb:65:5d:93:26:38:3d:f4:28:a6:01:80:35:18:dd:6c:37:
         0a:54:52:44:20:01:cd:f8:d0:86:e3:97:69:dd:4b:be:3c:d3:
         0a:6f:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:42:33 2026 by rpki-client