Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230302e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3230302e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          sP288PMDtrCVOUwMptaEFM4a+AT1M9vhlbLt8lyd9G8=
Subject key identifier:   95:E5:87:CD:59:CD:32:A6:02:0A:74:F6:C7:7D:80:DD:AE:46:EE:FD
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       6E61209D49FD7E0F1B5C83652867F49D7C578C37
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230302e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:21 +0000
ROA not before:           Mon 07 Sep 2026 22:29:21 +0000
ROA not after:            Mon 06 Sep 2027 22:34:21 +0000
asID:                     41347
IP address blocks:        200.13.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 09:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:61:20:9d:49:fd:7e:0f:1b:5c:83:65:28:67:f4:9d:7c:57:8c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:21 2026 GMT
            Not After : Sep  6 22:34:21 2027 GMT
        Subject: CN=95E587CD59CD32A6020A74F6C77D80DDAE46EEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:f7:24:0a:66:af:f4:f4:2b:39:53:b2:45:
                    f4:15:06:84:fa:84:29:85:50:f9:7e:95:81:17:76:
                    29:4e:6f:d4:5e:43:ff:ce:9c:d9:0e:cc:b1:fa:ad:
                    66:98:fe:78:25:40:5b:6b:9d:ab:3f:4f:35:54:4e:
                    18:42:ea:7f:97:01:ae:06:0e:ec:99:31:20:52:9b:
                    a7:dd:8e:fe:ff:6d:79:39:d3:da:d0:09:a7:06:f0:
                    17:d6:f8:be:18:92:41:84:ce:4a:24:55:a5:a1:af:
                    36:24:37:22:db:2f:72:ca:3b:b2:c5:b8:d8:c0:f1:
                    e6:d6:bc:b4:39:1f:2f:89:97:42:8b:fa:54:38:d5:
                    91:57:4b:c6:c9:9d:9f:2f:fd:92:a3:30:bf:cf:8d:
                    8b:2c:3b:51:74:99:96:97:33:6a:c3:e3:66:fc:ca:
                    e2:e4:a9:b5:26:e7:fc:a8:d6:e1:e9:6e:9a:45:36:
                    14:7c:7b:d3:33:7c:ba:8a:c6:bb:fc:bc:74:75:c7:
                    57:e5:6b:aa:37:73:0b:8c:bf:5a:aa:8e:8c:43:f6:
                    80:57:80:16:e7:f2:1f:fe:98:f7:03:da:3c:40:aa:
                    14:a1:74:08:03:bb:cf:09:a3:73:70:86:5c:c3:d3:
                    45:6e:5e:1d:80:00:d4:f2:3a:80:db:d7:fe:8e:88:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E5:87:CD:59:CD:32:A6:02:0A:74:F6:C7:7D:80:DD:AE:46:EE:FD
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230302e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:19:50:12:e7:de:dd:25:dc:a3:75:a7:6a:a7:b4:7e:f9:
         b3:bb:44:83:ee:93:42:a7:05:c9:34:20:bd:da:b4:3e:94:10:
         62:af:fe:45:b2:0e:f9:78:24:b7:69:9f:ba:f7:0f:b7:7e:e6:
         f5:54:a8:c9:7a:ad:99:36:c1:be:05:5e:4a:d0:44:7c:d6:c1:
         56:1a:52:36:b6:05:f7:41:1a:38:ed:cb:4f:72:7c:e4:96:f6:
         57:bb:ba:f5:85:66:97:c9:5e:7d:22:a7:9d:88:e6:9f:6f:a8:
         89:48:b2:c5:c4:c6:b0:bd:54:2b:06:85:3d:c3:1f:2e:ab:6f:
         7f:54:65:47:b0:51:0e:94:95:69:9f:67:cc:de:6a:02:bb:2c:
         76:6d:30:6f:93:ea:bc:39:d3:90:78:42:19:e9:c6:c1:60:26:
         50:89:a9:01:2f:4a:03:c3:82:dd:05:b6:d0:e8:67:fa:86:83:
         7a:75:67:e5:bc:18:1a:59:f1:4f:6d:ee:4a:88:3a:e9:58:c6:
         bd:d5:26:74:78:e2:db:44:a6:b1:75:fd:8f:dc:d6:99:15:f1:
         5c:02:f6:a1:6b:b3:25:8c:a5:b9:98:bf:23:26:01:d0:5e:37:
         11:29:7c:3b:c9:98:4a:12:32:fa:8c:39:fd:25:19:e3:4f:6a:
         89:ac:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:24:25 2026 by rpki-client