Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139332e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3139332e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          ULo/uO9QhKdS2ZKTXVNm6mKhuYnt8/oWyDI33PrJrTs=
Subject key identifier:   6A:48:A0:5D:C2:69:53:69:49:0B:D3:6D:82:15:B0:ED:52:F9:9E:9E
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       7EBC344EB9E63F4D1CFA86C1B3D9E31D08359026
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139332e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:15 +0000
ROA not before:           Mon 07 Sep 2026 22:29:15 +0000
ROA not after:            Mon 06 Sep 2027 22:34:15 +0000
asID:                     41347
IP address blocks:        200.13.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 05:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bc:34:4e:b9:e6:3f:4d:1c:fa:86:c1:b3:d9:e3:1d:08:35:90:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:15 2026 GMT
            Not After : Sep  6 22:34:15 2027 GMT
        Subject: CN=6A48A05DC2695369490BD36D8215B0ED52F99E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:8d:11:90:8d:bd:9d:66:b6:c4:85:b1:75:
                    e9:87:6c:ca:40:6f:b5:52:42:dd:52:ff:0a:de:21:
                    95:2a:b8:03:ac:6e:a6:64:22:b6:08:de:11:c4:b0:
                    67:55:03:dd:ae:59:ae:d1:44:3b:b4:5b:d9:23:fa:
                    22:a8:c9:5e:b9:27:c7:6e:5b:84:e6:16:b4:13:4d:
                    86:4f:5a:72:e6:34:c6:70:9d:60:9a:f0:1d:20:f4:
                    d5:d6:5d:27:17:c6:9f:02:94:fa:ed:d1:6d:c0:a8:
                    ee:1c:13:9a:d9:99:4c:a7:bb:97:ff:b6:a9:96:01:
                    81:b0:8c:06:88:c9:f6:b2:4a:a2:cf:63:88:db:9b:
                    51:3f:2b:52:14:0f:4b:e9:54:50:c6:73:40:2f:66:
                    9d:00:d0:66:18:23:5d:b4:10:86:07:df:d9:e8:33:
                    81:92:b0:d2:e0:41:e1:2e:1d:d0:46:44:e1:05:cc:
                    24:ca:a1:2a:77:55:7f:65:19:36:20:4b:a0:4a:99:
                    fb:8c:e6:d0:33:c7:02:8e:aa:4d:ba:dc:66:8f:a2:
                    c4:b3:05:b1:14:f0:ac:26:3f:53:68:72:67:a4:12:
                    34:ff:1d:b2:0b:39:79:79:05:90:a0:b3:be:ba:e5:
                    c2:f5:02:71:a6:f2:d8:24:13:97:10:77:19:00:bb:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:48:A0:5D:C2:69:53:69:49:0B:D3:6D:82:15:B0:ED:52:F9:9E:9E
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139332e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:26:53:3f:82:dc:32:12:d1:f3:f0:51:9a:34:f0:de:3b:42:
         5d:ce:09:9c:89:6c:6e:01:1c:b2:c3:83:90:53:5d:50:09:8e:
         d4:10:b0:94:93:3a:0d:8d:39:12:43:cc:3b:f9:10:e8:bb:37:
         42:04:b4:d6:b9:48:65:2a:92:61:c1:0e:d0:11:a7:fb:0b:5f:
         91:19:4b:92:44:99:b5:ce:1f:04:d2:c7:b9:d5:29:2f:a1:65:
         11:f8:a2:4c:c1:e8:85:7e:7f:7d:fb:38:c9:ff:b1:0b:3b:24:
         65:89:c6:aa:81:87:eb:67:40:b1:e8:de:da:1b:34:a8:09:89:
         b6:39:0c:6d:4c:b6:49:a3:04:84:a0:f1:bd:52:40:38:cb:32:
         05:bb:80:77:54:5c:ae:82:fc:94:c2:40:21:48:98:37:71:c1:
         50:e2:eb:97:64:36:89:43:0d:47:33:fb:3d:04:05:24:d6:d8:
         49:c2:df:f9:1f:57:76:7f:16:f0:f5:e6:8f:94:3c:57:48:f6:
         18:18:a8:9f:25:19:47:27:c7:81:f0:0f:14:a9:f8:08:7a:9a:
         3e:37:d1:02:03:07:6e:78:7a:12:07:f6:86:f8:a9:4a:39:88:
         47:6d:e0:01:a2:ba:af:1f:41:ef:5b:ca:dc:ae:9c:fc:4b:bc:
         03:6f:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:45:43 2026 by rpki-client