Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/3230302e33362e3135342e302f32342d3234203d3e20323733383337.roa
File:                     3230302e33362e3135342e302f32342d3234203d3e20323733383337.roa (raw, json)
Hash identifier:          Cih914T14pC7vLnCxQk6OVwaSKKtUDIwO20ZjdqV20g=
Subject key identifier:   1E:F2:BC:C1:F3:A5:EA:42:E3:71:F0:EC:70:E8:32:16:B2:29:2A:68
Certificate issuer:       /CN=F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6
Certificate serial:       34CE304520CF89C90D4DFEEF02F8D89E2554FAA1
Authority key identifier: F0:EC:21:AA:8D:51:FB:97:5F:4D:2E:2F:DE:B0:5F:3E:D4:F5:D5:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/3230302e33362e3135342e302f32342d3234203d3e20323733383337.roa
Signing time:             Mon 22 Jun 2026 22:48:54 +0000
ROA not before:           Mon 22 Jun 2026 22:43:54 +0000
ROA not after:            Mon 21 Jun 2027 22:48:54 +0000
asID:                     273837
IP address blocks:        200.36.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ce:30:45:20:cf:89:c9:0d:4d:fe:ef:02:f8:d8:9e:25:54:fa:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6
        Validity
            Not Before: Jun 22 22:43:54 2026 GMT
            Not After : Jun 21 22:48:54 2027 GMT
        Subject: CN=1EF2BCC1F3A5EA42E371F0EC70E83216B2292A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:a1:1e:d4:2c:22:6d:47:44:eb:31:63:01:
                    c8:eb:90:0d:2e:d6:6b:97:c0:9c:b0:1a:86:f3:1f:
                    ea:68:ef:5b:50:4e:90:6f:82:e2:43:e2:aa:a5:94:
                    11:23:f3:9c:fb:44:bd:22:ae:17:96:c9:bc:40:12:
                    e0:e4:92:79:d5:01:ef:21:3a:4c:58:53:06:c7:62:
                    0a:f7:c5:96:9d:2d:87:48:00:ca:de:26:ca:03:68:
                    a2:7f:63:22:2a:6f:5d:b0:37:ba:66:56:45:d7:c6:
                    f4:6d:21:39:3b:1a:15:27:8b:c2:98:28:31:4d:46:
                    a4:cf:6d:bd:5a:99:a8:26:d6:93:87:37:5d:6f:15:
                    1c:a8:78:de:ae:20:ee:f4:27:61:63:6e:1c:93:d0:
                    98:a8:2b:a2:1a:26:d7:01:77:98:76:9d:8e:b6:07:
                    42:4c:5b:56:9c:1c:03:17:2c:12:8d:8f:9e:b2:df:
                    ce:92:54:53:8d:b1:df:0d:d5:cc:69:e8:ed:28:c4:
                    19:9e:60:a4:35:8e:6b:5c:dd:c8:0a:6d:c8:57:80:
                    51:e0:73:2d:f2:d1:3a:69:77:14:cf:1a:85:a5:07:
                    ed:e6:37:54:b9:c7:7d:0d:de:aa:7a:2e:e9:72:7b:
                    f0:d5:f8:ae:37:e0:11:2d:cf:14:23:11:9e:f7:b0:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F2:BC:C1:F3:A5:EA:42:E3:71:F0:EC:70:E8:32:16:B2:29:2A:68
            X509v3 Authority Key Identifier:
                keyid:F0:EC:21:AA:8D:51:FB:97:5F:4D:2E:2F:DE:B0:5F:3E:D4:F5:D5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/3230302e33362e3135342e302f32342d3234203d3e20323733383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:0f:d5:6b:c5:7b:30:70:27:db:f2:ec:33:be:2b:1b:a4:
         65:94:cd:7b:5d:89:4f:de:49:85:c5:7a:f7:93:54:99:08:b0:
         87:0f:81:89:eb:46:5d:29:f3:e6:d3:7c:70:48:ed:d0:bd:a4:
         ba:aa:b3:82:08:26:ea:d6:b7:b2:c0:19:33:1f:a2:c0:a0:62:
         ef:c3:d1:dc:87:79:ab:d1:72:cd:46:42:46:2c:e1:d5:fd:dd:
         ed:a1:95:a1:af:af:b6:e6:c3:72:ff:3b:8a:c4:ed:a9:d5:35:
         85:eb:0d:92:d3:c4:f8:cf:fb:7d:51:7d:cc:c3:9d:78:af:a8:
         21:a0:ba:86:7d:10:54:61:a3:00:1b:b7:6e:07:a4:db:3f:3e:
         e6:fe:1f:12:21:0b:b0:6d:31:80:2a:31:83:34:b4:18:0e:f0:
         53:04:e4:57:4f:4b:9e:e7:10:0d:99:ff:68:17:5d:cd:c8:1b:
         ab:3f:11:46:13:e0:6c:06:6d:5b:f5:82:e7:88:b0:72:b7:af:
         bb:5e:2e:a8:9e:26:e1:ca:4a:7f:de:66:82:50:25:5a:9a:f2:
         ce:8c:8a:cf:2c:9c:61:19:39:a5:ec:13:a6:d7:3e:bc:cb:32:
         51:64:d6:e4:52:d6:fb:33:63:5c:1d:84:3d:76:66:0b:32:8a:
         14:a5:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:26 2026 by rpki-client