Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230342e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3230342e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          TtP3VCmTJ1YZRQVKokkuoG2Z2o/y7JeRo9ygCv5KUVE=
Subject key identifier:   F3:DA:EE:3E:05:34:9F:D8:1E:BE:48:DE:E4:02:90:22:40:4F:01:88
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       586FA10A9299DAC8C378BE8C487B6C236EF9C146
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230342e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:22 +0000
ROA not before:           Mon 07 Sep 2026 22:29:22 +0000
ROA not after:            Mon 06 Sep 2027 22:34:22 +0000
asID:                     41347
IP address blocks:        200.13.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 05:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6f:a1:0a:92:99:da:c8:c3:78:be:8c:48:7b:6c:23:6e:f9:c1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:22 2026 GMT
            Not After : Sep  6 22:34:22 2027 GMT
        Subject: CN=F3DAEE3E05349FD81EBE48DEE4029022404F0188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cb:52:93:4a:db:65:2c:e3:62:e6:24:5f:39:
                    5e:8b:98:a2:de:8f:df:75:23:94:aa:c7:a2:6d:d4:
                    a2:b8:9e:99:5a:49:de:93:a6:05:7e:88:f5:a6:3a:
                    52:0f:f6:c1:82:05:e0:e9:63:df:b7:3b:ba:0a:a1:
                    ce:43:72:04:4e:94:c2:7c:05:8d:fc:a4:88:03:2b:
                    81:11:71:80:7e:8d:0b:d9:fd:d1:1d:17:2a:49:74:
                    92:dd:1e:6d:17:71:05:e5:61:d1:ba:03:44:1e:11:
                    5d:82:18:f0:9f:58:02:0f:c7:07:92:fe:81:d6:e6:
                    6f:84:d7:0b:2b:5d:ce:2d:cd:89:5e:fa:71:9e:d1:
                    27:f8:85:3d:60:b2:41:56:d1:f9:7a:96:6b:0a:01:
                    49:a8:98:1c:da:33:ac:0f:12:10:c0:22:8a:28:0e:
                    bb:52:0a:9f:3b:8e:2a:ec:ce:86:7d:d2:bf:3b:d0:
                    c9:80:b5:b3:0d:88:08:20:ce:17:fb:f3:83:b2:d7:
                    c1:9b:0f:00:50:25:fc:45:4b:89:c9:33:3a:8c:b3:
                    c8:0c:2e:a6:4b:ca:c7:b4:51:ab:1b:9a:f2:06:77:
                    82:a0:47:14:a0:33:3d:dc:0a:72:41:8f:53:1e:5e:
                    57:af:1c:c9:48:94:95:db:11:f1:82:73:58:64:db:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DA:EE:3E:05:34:9F:D8:1E:BE:48:DE:E4:02:90:22:40:4F:01:88
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230342e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:4c:0b:a1:9d:c5:cf:7c:2b:ac:86:ee:0e:01:07:eb:b1:
         42:5b:0c:18:ff:4d:63:45:7b:01:60:99:c5:2f:00:c6:1e:83:
         19:89:c7:08:09:4f:c5:6f:66:78:dc:41:f1:36:11:f0:78:39:
         c7:27:ae:10:b6:d5:13:02:72:54:fe:df:26:16:ff:b2:c9:d8:
         7d:ae:db:2e:9e:2c:9b:60:78:0b:56:cf:94:b0:9a:ad:06:e1:
         86:fc:15:24:57:c2:72:25:be:a4:57:c0:32:cb:34:6b:c9:12:
         87:98:4f:6b:3e:3b:ad:17:9f:d0:63:a5:d4:6b:9d:b9:6c:97:
         00:a8:ca:2d:f3:a0:56:79:a1:b5:31:d3:ce:a7:9b:ec:e9:af:
         67:0d:f7:d0:f9:f3:1a:dc:12:b8:38:bf:ec:a7:89:31:4d:b9:
         97:22:bc:82:a7:fe:b8:93:74:7d:1b:52:6f:9c:d9:1a:51:b5:
         7e:64:d7:d4:35:5f:24:6e:01:8c:ec:a0:0a:eb:1c:ac:b9:31:
         e3:93:59:d2:fe:df:e9:4d:06:ef:32:8b:bd:42:b8:15:a3:41:
         d6:50:01:00:92:b6:3c:19:fa:ac:93:29:25:2e:8e:c5:44:cc:
         7f:c6:70:2e:fa:79:da:b3:6c:e8:01:66:7a:14:cb:31:00:7a:
         e8:eb:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:49:27 2026 by rpki-client