Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/3230302e33362e3135352e302f32342d3234203d3e20323733383337.roa
File:                     3230302e33362e3135352e302f32342d3234203d3e20323733383337.roa (raw, json)
Hash identifier:          1irxFtcR+HGhnK4fe35S98oSUNtBiSjS446eVFSRDB8=
Subject key identifier:   42:7A:AB:55:8D:3E:5C:5C:43:D0:48:56:55:D7:45:37:08:A7:0C:F2
Certificate issuer:       /CN=F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6
Certificate serial:       4EF330D72C18E6AEA25980C4C8A9398A29A13E2C
Authority key identifier: F0:EC:21:AA:8D:51:FB:97:5F:4D:2E:2F:DE:B0:5F:3E:D4:F5:D5:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/3230302e33362e3135352e302f32342d3234203d3e20323733383337.roa
Signing time:             Wed 17 Jun 2026 23:48:25 +0000
ROA not before:           Wed 17 Jun 2026 23:43:25 +0000
ROA not after:            Wed 16 Jun 2027 23:48:25 +0000
asID:                     273837
IP address blocks:        200.36.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f3:30:d7:2c:18:e6:ae:a2:59:80:c4:c8:a9:39:8a:29:a1:3e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6
        Validity
            Not Before: Jun 17 23:43:25 2026 GMT
            Not After : Jun 16 23:48:25 2027 GMT
        Subject: CN=427AAB558D3E5C5C43D0485655D7453708A70CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0d:23:4e:e5:8e:9b:0b:14:3e:d1:89:16:3a:
                    5b:11:f3:d9:1f:e6:95:1d:e2:6e:e5:af:5c:96:50:
                    5f:8b:34:70:3b:43:4a:f6:cc:4b:1d:84:6a:c5:a0:
                    4a:c9:7f:90:d8:83:fa:64:64:8e:7a:f8:e2:e3:2e:
                    92:a6:33:82:75:be:e7:76:d7:f5:b3:8a:61:e2:41:
                    44:f1:e3:38:a9:d8:d6:d4:72:3c:7e:af:f0:bd:c0:
                    9c:0f:6a:78:f3:65:25:c6:1b:80:1b:ad:59:49:24:
                    31:2a:c4:65:51:bf:f7:42:9c:7d:9d:7c:c7:96:45:
                    a9:64:6b:ad:df:f6:d8:8d:de:b8:65:bc:b5:1d:38:
                    6d:92:49:84:c5:78:7d:30:ad:df:86:91:06:65:f8:
                    78:fd:a8:92:7f:82:ee:91:16:69:f9:9c:3e:0d:c8:
                    84:e0:ee:18:5f:0e:a5:66:58:7e:0f:31:f4:b3:c6:
                    90:4c:be:9c:2b:34:d5:6d:5a:5c:40:01:ab:94:12:
                    7e:2e:0b:25:78:6a:54:29:aa:30:12:fe:85:9f:cc:
                    9e:ac:e8:85:53:04:13:04:91:f7:a6:c5:da:ad:63:
                    c2:64:54:7c:12:a6:16:7c:7b:b3:a5:2d:1a:39:ef:
                    8d:4c:f6:60:11:96:58:26:00:45:3b:94:82:93:4b:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7A:AB:55:8D:3E:5C:5C:43:D0:48:56:55:D7:45:37:08:A7:0C:F2
            X509v3 Authority Key Identifier:
                keyid:F0:EC:21:AA:8D:51:FB:97:5F:4D:2E:2F:DE:B0:5F:3E:D4:F5:D5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0EC21AA8D51FB975F4D2E2FDEB05F3ED4F5D5F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1E455A8856EBE988678C42ED507B7A512471267D2BC55323C8A63D00ECC1B5B/0/3230302e33362e3135352e302f32342d3234203d3e20323733383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:69:c8:16:08:2a:0c:0e:f8:14:a9:ab:fd:99:7d:3c:5c:
         8d:97:1e:06:da:71:8a:a0:43:f7:d0:41:64:c7:05:32:ef:83:
         b6:75:bf:3b:9f:b3:b4:42:7c:bf:54:5d:bc:99:23:4e:ab:45:
         30:77:49:48:fe:6a:4e:6d:fa:53:09:29:ad:56:1f:d1:89:4a:
         f1:26:c3:51:25:60:24:7b:ad:3f:07:79:a5:4c:a9:fd:40:96:
         e6:ca:a2:ff:4d:f2:bc:63:6f:c7:ea:7b:0c:66:f1:b7:6f:c3:
         70:8c:e5:cd:dc:45:b6:d5:36:68:af:d1:7b:43:c5:35:12:3e:
         eb:f4:8a:09:a3:78:31:5b:b2:95:97:99:26:80:e7:d0:98:3c:
         e6:da:97:05:11:38:e3:24:e6:b7:95:76:e1:33:7a:15:dc:b9:
         19:db:98:1c:d2:b4:be:47:65:23:7f:85:0c:49:d9:a0:a9:81:
         11:e2:7e:cf:4a:c5:0a:ea:2c:f4:72:fb:83:cf:17:5b:cb:3b:
         a4:4d:7f:71:30:1d:d4:a2:ea:8a:06:37:df:ba:5c:4e:c1:b7:
         4c:41:c5:22:c4:7d:18:ba:01:14:2e:e5:e2:6f:99:a2:3f:35:
         0e:88:74:98:e3:71:03:dc:a6:e0:24:9f:62:2d:0e:0e:7b:2a:
         0a:97:f3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:27 2026 by rpki-client