Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230352e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3230352e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          j08zVzbKpLt1Dr15GiuEEibpw6KUlw66V9/LJTt/lSQ=
Subject key identifier:   4D:D3:EE:5D:CD:D1:6B:DF:7F:E0:FA:C5:BC:46:49:35:AD:FD:6C:1B
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       6761146A3E6672B0DF48AE368430828CDE22B231
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230352e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:24 +0000
ROA not before:           Mon 07 Sep 2026 22:29:24 +0000
ROA not after:            Mon 06 Sep 2027 22:34:24 +0000
asID:                     41347
IP address blocks:        200.13.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 09:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:61:14:6a:3e:66:72:b0:df:48:ae:36:84:30:82:8c:de:22:b2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:24 2026 GMT
            Not After : Sep  6 22:34:24 2027 GMT
        Subject: CN=4DD3EE5DCDD16BDF7FE0FAC5BC464935ADFD6C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:36:43:eb:47:b5:61:87:d2:2f:5f:bc:82:
                    92:d7:27:dc:4a:c1:18:a4:7c:cd:21:c6:cd:06:5c:
                    9e:10:7f:75:cd:11:9a:e0:d6:63:3b:a8:4a:26:65:
                    8a:87:65:8d:79:99:df:8a:81:47:14:e4:0d:e6:72:
                    ed:7f:fa:44:06:bd:12:42:4d:66:1b:01:4b:39:a7:
                    f3:19:9d:56:48:60:53:73:e6:f4:4f:4b:2a:e1:ec:
                    87:33:d9:d9:79:c1:8e:20:f0:3f:40:ed:bc:e9:00:
                    ed:c1:a2:8a:c5:a8:45:5e:1d:1b:aa:c2:b3:4c:58:
                    c3:3c:e9:03:e4:08:69:8c:cf:b5:80:f3:ef:5a:d5:
                    26:37:a4:cf:10:96:c0:8c:f5:1d:1c:65:c3:e4:9d:
                    8b:da:2a:07:4f:1d:66:4d:09:d1:62:3f:7a:98:be:
                    e0:16:14:b7:b8:6d:33:38:e8:2a:d0:e4:5c:cb:57:
                    ef:31:c6:0d:04:17:66:82:04:54:1c:b3:ca:87:80:
                    99:6b:f7:82:af:94:63:73:55:f2:0f:73:de:5c:65:
                    9e:78:d4:d8:41:20:6b:06:93:ce:ab:d5:8d:1e:5b:
                    ad:46:af:60:cf:ee:ca:9d:3a:2c:e0:db:08:c5:2c:
                    c8:a1:c7:d2:c8:af:28:5e:9d:19:b0:b6:09:e7:fd:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D3:EE:5D:CD:D1:6B:DF:7F:E0:FA:C5:BC:46:49:35:AD:FD:6C:1B
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230352e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:72:d3:ba:bf:90:b2:92:fd:dd:01:46:fa:ff:c5:dc:92:ce:
         80:4d:1d:f4:86:a4:51:ed:89:80:31:d1:70:d4:61:88:c0:9b:
         e0:de:0b:1d:a3:2f:2c:df:52:8c:49:21:84:65:d5:f2:86:56:
         91:fa:4d:1c:50:d1:da:8c:98:35:c6:9e:0d:e6:91:e7:88:96:
         92:9d:60:ce:d0:95:a2:fe:4a:89:10:32:d5:0a:35:c7:a6:54:
         c7:20:71:d8:a8:c9:81:9f:fd:96:0b:51:3c:0f:d3:3f:75:28:
         c6:c3:0e:a8:ea:0b:de:3e:0c:ac:fc:3d:d4:e7:15:61:67:cd:
         c4:bc:44:2e:2e:a7:c0:4f:9e:a0:41:dd:b4:89:ac:bc:b4:cb:
         3c:02:e2:4b:74:ff:b4:ec:cd:e1:9c:d5:da:04:87:09:40:32:
         e1:75:ad:bc:3d:56:c7:b9:d3:8a:2b:29:a2:fe:81:a0:30:1e:
         03:c5:e7:26:12:a9:10:9c:a8:06:5f:29:5d:d6:bc:25:1f:6b:
         02:fd:94:ca:bd:27:8e:ba:93:d5:cb:71:e6:d2:2c:5a:71:2d:
         97:18:4c:1e:3b:db:c8:8e:8e:98:01:0a:02:ce:c5:b6:07:91:
         e0:40:85:5c:9c:5e:64:ef:c7:1c:7b:e6:e0:ea:e2:ac:f6:1d:
         9f:b6:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:23:17 2026 by rpki-client