Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3231342e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3231342e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          nrO3VY8vha2xi1ZQARydsb4TkXndMqJ06XnSlupdiUw=
Subject key identifier:   6A:D9:94:40:08:B0:14:AB:8F:8C:50:0C:AC:85:0B:CE:AD:79:68:3F
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       10EBC958E25D53AF7812A1DE5997461100B7D780
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3231342e302f32342d3234203d3e203232333133.roa
Signing time:             Sun 22 Mar 2026 13:40:03 +0000
ROA not before:           Sun 22 Mar 2026 13:35:03 +0000
ROA not after:            Sun 21 Mar 2027 13:40:03 +0000
asID:                     22313
IP address blocks:        200.35.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:eb:c9:58:e2:5d:53:af:78:12:a1:de:59:97:46:11:00:b7:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Mar 22 13:35:03 2026 GMT
            Not After : Mar 21 13:40:03 2027 GMT
        Subject: CN=6AD9944008B014AB8F8C500CAC850BCEAD79683F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:e5:61:c7:66:7b:dc:5d:12:04:62:0f:9c:
                    8a:03:70:6f:97:17:33:5b:23:c9:b8:b3:ea:5d:96:
                    a8:d5:eb:b2:83:21:c9:1e:f4:07:94:49:1f:35:0e:
                    bf:83:8a:0b:d1:b1:77:06:a5:41:2e:f9:e6:7e:27:
                    b9:cd:cb:4c:62:8b:ad:50:c7:d8:d0:f7:4b:37:3e:
                    3c:dc:b3:14:b7:98:78:ea:be:fb:f0:c9:21:df:74:
                    03:d9:dc:f1:56:7f:f2:22:3f:18:8a:7b:89:97:5e:
                    d0:d3:83:fa:22:83:32:a4:b8:16:b3:da:3c:4b:61:
                    e8:4b:de:11:9c:bc:a2:0a:ea:50:e1:0e:a5:b6:ea:
                    b9:6d:84:83:6c:e7:20:31:61:62:7c:7c:31:58:3f:
                    e9:12:7e:64:ba:3b:52:76:e2:5d:33:e8:83:fc:5f:
                    6d:eb:c7:f3:7c:46:49:3f:96:22:e5:8e:52:7f:6d:
                    32:cc:72:c9:8c:ae:df:4a:0c:17:0c:81:c0:f9:3f:
                    2a:be:26:5a:3d:5b:44:ed:1e:65:04:21:3c:c4:3c:
                    5e:0e:82:42:e4:35:00:a3:f0:9c:b9:d3:0d:8a:04:
                    d9:d9:f6:80:c7:b5:ff:7e:35:43:9a:40:6b:cd:aa:
                    27:cd:3c:6f:91:21:3e:e5:2e:76:69:b6:a9:96:a3:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D9:94:40:08:B0:14:AB:8F:8C:50:0C:AC:85:0B:CE:AD:79:68:3F
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3231342e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2b:2e:03:aa:bf:c1:c9:87:6a:73:9b:66:a0:d2:03:e7:eb:
         cc:d9:3a:99:ab:fe:e0:6a:a4:4f:27:98:80:bf:1c:af:19:4e:
         2c:02:14:30:21:9d:ca:c1:ef:9b:1e:fa:1f:ce:7a:27:0d:eb:
         21:c5:cb:97:14:5d:7b:3f:c1:de:c3:80:e1:a7:04:43:0d:b1:
         7e:f5:d3:96:75:18:ee:09:16:dd:b7:1b:62:de:82:01:fa:4b:
         4b:86:7b:54:d2:8f:79:73:8e:34:e0:4e:58:11:08:b5:d0:4d:
         62:7f:6d:e5:27:d3:13:a3:e3:4f:1c:f0:a1:12:ad:9c:e9:d6:
         03:5a:d1:f3:62:56:2a:fe:42:c9:6d:4a:1c:32:32:3e:eb:fe:
         ea:41:3b:13:5e:5d:4b:1d:f8:98:f8:58:f9:11:fc:c1:9b:4d:
         b3:a1:74:13:69:a9:07:2c:9c:78:ee:ce:08:07:28:8a:97:7b:
         ff:61:5e:67:35:0a:98:4c:ef:a4:06:8b:ee:33:de:30:b1:7f:
         24:0c:c7:6d:16:64:09:0e:b2:df:d8:e6:29:67:26:db:67:08:
         55:ef:67:11:47:d2:34:a1:5a:44:16:29:33:99:36:ab:eb:2f:
         8d:05:d5:cc:65:92:93:44:88:78:94:24:bb:0a:7c:f4:8d:63:
         fd:90:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:18:59 2026 by rpki-client