Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230352e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3230352e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          Qz0HiEqZa79uAXd/lzZBQxRlc2Yh2Pto9MDDxLX+dN0=
Subject key identifier:   76:2B:EE:B4:86:75:3D:4D:ED:6D:EE:90:0F:86:6F:79:C5:43:90:5C
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       7CA1A626A1392A22EC17AE37925B3F08E5AE7474
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230352e302f32342d3234203d3e203232333133.roa
Signing time:             Sun 22 Mar 2026 13:40:03 +0000
ROA not before:           Sun 22 Mar 2026 13:35:03 +0000
ROA not after:            Sun 21 Mar 2027 13:40:03 +0000
asID:                     22313
IP address blocks:        200.35.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a1:a6:26:a1:39:2a:22:ec:17:ae:37:92:5b:3f:08:e5:ae:74:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 22 13:35:03 2026 GMT
            Not After : Mar 21 13:40:03 2027 GMT
        Subject: CN=762BEEB486753D4DED6DEE900F866F79C543905C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:80:dd:08:97:0f:ae:85:19:a6:d6:57:3b:
                    a3:67:bb:a3:af:25:c0:3f:32:0e:13:ea:71:56:51:
                    09:35:76:6d:9b:56:3b:ff:28:69:b2:8b:f5:e7:a7:
                    16:2d:00:45:35:2d:b0:63:3f:83:1d:c1:0b:6e:3b:
                    d8:b3:0f:f0:16:1a:ca:90:d5:cd:5e:56:f8:b0:01:
                    7e:a6:5a:1a:0a:18:65:aa:79:77:54:9a:09:81:dc:
                    f5:6d:5e:70:81:d1:1e:07:07:ed:e2:27:12:cf:59:
                    b2:9c:45:a8:c7:95:51:0d:5d:38:1c:7d:8e:1a:8b:
                    c4:15:ff:bf:ff:46:17:a4:3e:ae:09:20:d4:96:6a:
                    0d:af:b5:e5:9f:0f:86:09:8e:df:1a:6c:f6:48:d9:
                    e8:ac:e7:7c:de:e1:f4:95:f0:8e:10:f0:90:d6:10:
                    b6:d4:8d:7a:97:28:91:a1:7b:38:97:29:38:0c:c8:
                    3f:3e:dc:c1:06:b2:63:10:12:45:c3:a3:55:51:e1:
                    24:8c:04:da:15:4b:b6:81:f4:b1:54:58:2a:ef:79:
                    45:64:b4:a8:96:a5:99:db:ad:60:e6:3a:63:0d:13:
                    d2:2b:b5:10:1a:75:85:47:ee:73:17:88:42:55:37:
                    81:82:8c:13:d2:c2:26:03:f9:e3:45:03:ba:91:6c:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2B:EE:B4:86:75:3D:4D:ED:6D:EE:90:0F:86:6F:79:C5:43:90:5C
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230352e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:0f:ad:ac:08:b4:02:41:b9:68:86:df:6b:06:26:61:8c:a8:
         4a:7e:31:06:2e:e0:f0:e5:98:1c:dd:31:08:68:d9:1e:6c:48:
         e7:e9:21:e3:d0:22:b6:12:4a:6b:c7:bb:e2:4f:c7:18:01:d2:
         79:ac:1a:2d:d8:ad:11:3e:e0:9f:c8:c5:4f:d1:5f:6d:40:7d:
         6c:c7:0b:f2:1c:32:db:7b:14:1c:6a:53:ff:3c:43:25:40:4b:
         18:8f:3c:7b:b6:8d:c6:58:9a:c1:1f:ae:d8:21:0a:c4:f4:46:
         38:41:1d:f0:11:58:16:f8:15:26:e3:29:fa:59:83:a2:fb:5b:
         09:09:f2:5f:3c:24:bf:72:16:18:0a:e1:c8:3a:c5:03:1d:47:
         69:2a:15:55:55:90:66:77:91:f6:b7:57:fa:44:8a:32:26:f4:
         0c:aa:98:a2:fe:e7:99:be:48:2f:90:dc:5f:45:38:21:43:31:
         ab:65:97:b3:5e:77:ea:da:21:f3:fc:95:97:c6:73:c5:84:16:
         f6:fa:94:45:77:b6:a5:8d:f7:72:27:8b:80:7f:f9:54:72:0a:
         6e:c6:82:d6:59:5b:18:4e:17:53:d2:fa:16:a3:3d:47:1a:78:
         c5:82:57:41:7c:9c:d0:c6:6a:bf:0a:75:bf:45:ec:53:54:29:
         79:33:62:8f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfKGmJqE5KiLsF643kls/COWudHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NjI5QTY5NEVGNzIxN0VGM0RFNUUxMjgxMDRDMUUx
NEI0QkVCMzAeFw0yNjAzMjIxMzM1MDNaFw0yNzAzMjExMzQwMDNaMDMxMTAvBgNV
BAMTKDc2MkJFRUI0ODY3NTNENERFRDZERUU5MDBGODY2Rjc5QzU0MzkwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiioDdCJcProUZptZXO6Nnu6Ov
JcA/Mg4T6nFWUQk1dm2bVjv/KGmyi/XnpxYtAEU1LbBjP4MdwQtuO9izD/AWGsqQ
1c1eVviwAX6mWhoKGGWqeXdUmgmB3PVtXnCB0R4HB+3iJxLPWbKcRajHlVENXTgc
fY4ai8QV/7//RhekPq4JINSWag2vteWfD4YJjt8abPZI2eis53ze4fSV8I4Q8JDW
ELbUjXqXKJGheziXKTgMyD8+3MEGsmMQEkXDo1VR4SSMBNoVS7aB9LFUWCrveUVk
tKiWpZnbrWDmOmMNE9IrtRAadYVH7nMXiEJVN4GCjBPSwiYD+eNFA7qRbKq9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdivutIZ1PU3tbe6QD4ZvecVDkFwwHwYDVR0j
BBgwFoAUs2YpppTvchfvPeXhKBBMHhS0vrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDc2ODMxMjlDQTNFODAwRDY5QUY1RjVCMjcxQjE3NkYw
OEE3MjkyQzZDRUFGQzExMDU4REY3RUU5MTMzMTRDLzAvQjM2NjI5QTY5NEVGNzIx
N0VGM0RFNUUxMjgxMDRDMUUxNEI0QkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzY2MjlBNjk0RUY3MjE3RUYz
REU1RTEyODEwNEMxRTE0QjRCRUIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA3NjgzMTI5Q0EzRTgwMEQ2OUFGNUY1QjI3MUIxNzZGMDhBNzI5MkM2
Q0VBRkMxMTA1OERGN0VFOTEzMzE0Qy8wLzMyMzAzMDJlMzMzNTJlMzIzMDM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjMzMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgjzTAN
BgkqhkiG9w0BAQsFAAOCAQEAmg+trAi0AkG5aIbfawYmYYyoSn4xBi7g8OWYHN0x
CGjZHmxI5+kh49AithJKa8e74k/HGAHSeawaLditET7gn8jFT9FfbUB9bMcL8hwy
23sUHGpT/zxDJUBLGI88e7aNxliawR+u2CEKxPRGOEEd8BFYFvgVJuMp+lmDovtb
CQnyXzwkv3IWGArhyDrFAx1HaSoVVVWQZneR9rdX+kSKMib0DKqYov7nmb5IL5Dc
X0U4IUMxq2WXs1536toh8/yVl8ZzxYQW9vqURXe2pY33cieLgH/5VHIKbsaC1llb
GE4XU9L6FqM9Rxp4xYJXQXyc0MZqvwp1v0XsU1QpeTNijw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:21:38 2026 by rpki-client