Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3231322e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3231322e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          NtRkNQuuSCqEw6tAc0WZ/akTimy10C2nq4iOQaSvqNo=
Subject key identifier:   59:4A:0F:3F:F6:AA:29:11:F4:3B:DD:A4:AF:C9:29:F1:CB:FF:CF:3F
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       17B9F38E270A82A82AD5A867B66EFE1F12ADFD86
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3231322e302f32342d3234203d3e203232333133.roa
Signing time:             Sun 22 Mar 2026 13:40:00 +0000
ROA not before:           Sun 22 Mar 2026 13:35:00 +0000
ROA not after:            Sun 21 Mar 2027 13:40:00 +0000
asID:                     22313
IP address blocks:        200.35.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b9:f3:8e:27:0a:82:a8:2a:d5:a8:67:b6:6e:fe:1f:12:ad:fd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 22 13:35:00 2026 GMT
            Not After : Mar 21 13:40:00 2027 GMT
        Subject: CN=594A0F3FF6AA2911F43BDDA4AFC929F1CBFFCF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:b6:50:67:66:39:dd:f1:58:83:fe:46:1d:
                    4d:6d:74:40:4c:cb:e3:b2:24:5e:45:1a:9f:a5:0e:
                    dc:cc:df:2c:55:24:e9:af:44:ec:be:5c:2a:09:8d:
                    35:c8:38:cf:72:dc:b5:bb:35:bd:48:3b:80:1c:86:
                    a0:82:a4:8f:71:ac:b5:ec:ee:69:a2:b8:0a:ee:c4:
                    d3:39:eb:c2:bc:b4:3c:b0:74:2c:99:84:6d:33:cc:
                    b3:f2:19:80:20:eb:06:a9:c0:70:02:54:e2:dc:4f:
                    dd:a4:73:3b:b6:c8:8b:69:7b:04:83:30:96:be:56:
                    67:f3:c8:37:34:ae:c6:7d:0c:86:97:43:f1:1e:c8:
                    b5:dc:12:80:68:59:c1:cb:3a:b3:78:a4:1c:5b:e0:
                    64:12:3f:63:b7:e6:77:0e:aa:2f:1f:14:b8:3a:70:
                    71:a4:4f:6d:48:60:a4:5d:bc:e6:e0:48:29:ff:cd:
                    ce:43:57:1f:98:f5:30:c4:22:99:70:be:05:89:6e:
                    1a:cf:04:97:c3:b2:43:33:5a:c2:df:b2:20:00:a8:
                    e5:c4:10:0e:9a:4d:93:4d:4e:73:74:77:be:3e:c1:
                    5c:33:43:62:c9:fb:d5:b6:e8:8d:a6:c7:7f:ac:c3:
                    bf:da:75:a9:44:61:13:40:d3:72:47:52:52:66:38:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4A:0F:3F:F6:AA:29:11:F4:3B:DD:A4:AF:C9:29:F1:CB:FF:CF:3F
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3231322e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:4b:b2:b0:76:50:a9:4b:27:b9:6b:a3:95:7c:bd:65:4a:
         6f:99:91:94:1c:42:e0:74:68:4f:e7:05:cb:a2:7c:ed:81:36:
         6e:b8:c2:a7:93:50:ec:16:97:e4:45:ca:89:e9:5a:5a:5e:0f:
         71:9f:b8:30:45:b5:ca:b1:43:73:1e:a1:3a:15:f9:b2:3f:2e:
         38:af:64:94:91:8c:97:4e:5d:a8:49:4b:f9:84:96:a2:c8:b1:
         ea:2b:5e:c7:09:2c:19:c0:02:cf:f1:60:dc:4b:23:93:ba:4e:
         bf:08:e0:4a:2b:b1:cd:17:90:3a:bd:b7:79:f5:90:78:d8:26:
         54:2f:45:69:b4:35:8e:ff:b2:56:c8:d5:2f:00:1a:23:40:41:
         b1:00:c8:7a:7c:2c:96:e6:27:9b:f1:9b:fd:29:0d:53:a3:83:
         d2:fa:2a:ae:9b:0f:86:fa:5c:85:75:35:8c:d3:6c:ae:93:4f:
         dd:b0:71:f7:2c:c6:23:d5:27:60:34:5b:8b:06:60:ee:1f:21:
         31:8f:74:37:6d:bb:93:d9:57:ec:92:cf:80:14:37:7c:fc:15:
         51:5b:2d:d1:8b:aa:2c:f0:7d:56:a8:66:ee:ad:31:cf:0c:69:
         49:6f:a8:64:e4:0c:f9:cc:c3:92:12:05:7f:e6:6c:be:f4:bd:
         71:dc:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:55 2026 by rpki-client