Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230322e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3230322e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          kOoKtDl/mWVoJvtkA5O9wVEBYVlLqRwIFpxelA5pIcE=
Subject key identifier:   CF:9B:55:15:A3:59:9E:E3:DB:C2:2D:52:05:3A:B3:25:E1:E9:A1:E6
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       0A015154973FAE99AC1F6C629012FC27221EC383
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230322e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:20 +0000
ROA not before:           Mon 07 Sep 2026 22:29:20 +0000
ROA not after:            Mon 06 Sep 2027 22:34:20 +0000
asID:                     41347
IP address blocks:        200.13.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:01:51:54:97:3f:ae:99:ac:1f:6c:62:90:12:fc:27:22:1e:c3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:20 2026 GMT
            Not After : Sep  6 22:34:20 2027 GMT
        Subject: CN=CF9B5515A3599EE3DBC22D52053AB325E1E9A1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:a8:0a:13:2f:ce:bd:99:ca:58:7f:4b:a1:
                    73:61:8f:1f:cb:29:d9:e2:f3:2f:7f:3b:4b:d9:56:
                    1a:aa:17:e0:7e:00:3b:d0:2f:34:7e:e6:63:82:4c:
                    ec:a8:d1:f6:61:6f:f1:fb:d4:cc:3d:d4:22:1f:25:
                    8c:57:6e:ce:ed:b4:b5:b0:b8:d9:27:f8:77:d1:10:
                    26:b5:8d:c1:76:dd:4c:52:ed:85:9d:ad:3d:e2:cb:
                    67:e7:d0:60:d0:cc:0e:45:51:57:62:10:04:dd:3a:
                    c3:9e:3c:a9:c5:79:50:d8:ab:8b:f8:e8:7d:e6:38:
                    da:81:b2:05:6b:b8:a8:be:0e:91:c3:88:bf:cb:e9:
                    b7:54:11:17:43:75:bf:85:75:34:c5:01:eb:a8:5b:
                    50:27:6c:87:26:73:65:55:3b:44:d6:46:3a:e7:00:
                    71:38:0e:31:78:1f:fd:e3:6a:cd:06:96:3c:66:6f:
                    43:1e:97:85:d7:58:be:3b:96:86:29:87:17:1a:bb:
                    39:c8:2b:e6:3c:eb:f6:46:2f:da:1d:ad:10:a2:68:
                    11:61:a6:b5:4a:4b:ba:7c:43:d3:80:69:60:9a:d7:
                    ba:8d:1b:7f:5b:64:00:06:87:d6:60:a1:85:08:b4:
                    78:18:14:de:98:e6:ab:92:64:24:de:12:98:62:d2:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9B:55:15:A3:59:9E:E3:DB:C2:2D:52:05:3A:B3:25:E1:E9:A1:E6
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230322e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:b2:ca:cd:1b:d5:e3:0d:7a:5f:dd:d1:af:38:24:59:ad:65:
         8c:8e:1a:0c:dd:db:9e:66:f9:ca:86:be:c4:2e:2f:fd:39:06:
         d9:58:a0:d1:2f:08:32:b2:64:29:1d:02:20:96:f1:75:27:00:
         55:0c:8a:f8:f0:30:42:2e:d3:c0:54:e1:8a:95:e6:50:ff:b6:
         87:f1:f1:ee:c3:f2:2a:70:8c:14:dd:96:13:38:6f:06:51:e9:
         a6:a8:9f:30:36:eb:a4:75:1c:46:a0:ef:d5:6b:ce:c0:24:e5:
         64:7d:75:5d:9b:75:04:9b:f7:8b:bc:74:1d:82:a5:35:88:82:
         40:67:1c:5f:14:70:91:81:b4:a2:03:2c:16:2b:f0:73:b6:89:
         80:4d:6b:1c:d5:15:7b:ac:a1:31:f5:bd:91:27:8d:72:86:7b:
         01:9c:ca:06:60:a0:73:d5:c1:f3:95:7b:a1:b6:f9:60:9f:81:
         e6:02:39:3b:cd:cb:61:13:05:79:b9:30:17:92:d8:51:ce:81:
         28:a6:be:84:d4:61:6b:32:80:0d:b7:a8:b8:f1:a7:5d:34:89:
         73:3a:d6:70:3e:4d:fe:84:ff:90:b4:7a:7c:fe:87:8a:37:3b:
         42:12:50:5b:f0:a8:a0:6e:94:80:d3:0d:31:27:c4:6f:ab:1a:
         a6:d5:fc:53
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCgFRVJc/rpmsH2xikBL8JyIew4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFMTlFMkQ0RUU4RjNFQUQwQzE0NjYwQjJBODY0NkFD
OUYyMEFGNTAeFw0yNjA5MDcyMjI5MjBaFw0yNzA5MDYyMjM0MjBaMDMxMTAvBgNV
BAMTKENGOUI1NTE1QTM1OTlFRTNEQkMyMkQ1MjA1M0FCMzI1RTFFOUExRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWXKgKEy/OvZnKWH9LoXNhjx/L
Kdni8y9/O0vZVhqqF+B+ADvQLzR+5mOCTOyo0fZhb/H71Mw91CIfJYxXbs7ttLWw
uNkn+HfRECa1jcF23UxS7YWdrT3iy2fn0GDQzA5FUVdiEATdOsOePKnFeVDYq4v4
6H3mONqBsgVruKi+DpHDiL/L6bdUERdDdb+FdTTFAeuoW1AnbIcmc2VVO0TWRjrn
AHE4DjF4H/3jas0Gljxmb0Mel4XXWL47loYphxcauznIK+Y86/ZGL9odrRCiaBFh
prVKS7p8Q9OAaWCa17qNG39bZAAGh9ZgoYUItHgYFN6Y5quSZCTeEphi0i7hAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUz5tVFaNZnuPbwi1SBTqzJeHpoeYwHwYDVR0j
BBgwFoAUNuGeLU7o8+rQwUZgsqhkasnyCvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRjdCQTc1MDU1Rjc5OTc1OEYzRjRDRTgxMUJBREJBMjQ5
MUJGMUUzMjM4NEZCQjNBRjhBMzlFN0ZCNTA2QzJCLzAvMzZFMTlFMkQ0RUU4RjNF
QUQwQzE0NjYwQjJBODY0NkFDOUYyMEFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNkUxOUUyRDRFRThGM0VBRDBD
MTQ2NjBCMkE4NjQ2QUM5RjIwQUY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkY3QkE3NTA1NUY3OTk3NThGM0Y0Q0U4MTFCQURCQTI0OTFCRjFFMzIz
ODRGQkIzQUY4QTM5RTdGQjUwNkMyQi8wLzMyMzAzMDJlMzEzMzJlMzIzMDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMTMzMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgNyjAN
BgkqhkiG9w0BAQsFAAOCAQEAXbLKzRvV4w16X93RrzgkWa1ljI4aDN3bnmb5yoa+
xC4v/TkG2Vig0S8IMrJkKR0CIJbxdScAVQyK+PAwQi7TwFThipXmUP+2h/Hx7sPy
KnCMFN2WEzhvBlHppqifMDbrpHUcRqDv1WvOwCTlZH11XZt1BJv3i7x0HYKlNYiC
QGccXxRwkYG0ogMsFivwc7aJgE1rHNUVe6yhMfW9kSeNcoZ7AZzKBmCgc9XB85V7
obb5YJ+B5gI5O83LYRMFebkwF5LYUc6BKKa+hNRhazKADbeouPGnXTSJczrWcD5N
/oT/kLR6fP6Hijc7QhJQW/CooG6UgNMNMSfEb6saptX8Uw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:09:39 2026 by rpki-client