Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230372e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3230372e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          Dd7KCyjCEmUnH+90sx1/ExoEVL5g7KQIyiKHBvMp8fY=
Subject key identifier:   6D:5A:57:F1:29:F4:A9:9F:D5:5D:DD:6A:B5:BA:53:B9:12:C1:55:7D
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       3F2DD7FCCE4707CEDBFAC242117C38F7B280E011
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230372e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:16 +0000
ROA not before:           Mon 07 Sep 2026 22:29:16 +0000
ROA not after:            Mon 06 Sep 2027 22:34:16 +0000
asID:                     41347
IP address blocks:        200.13.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 05:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2d:d7:fc:ce:47:07:ce:db:fa:c2:42:11:7c:38:f7:b2:80:e0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:16 2026 GMT
            Not After : Sep  6 22:34:16 2027 GMT
        Subject: CN=6D5A57F129F4A99FD55DDD6AB5BA53B912C1557D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:f2:02:df:8f:2e:97:ab:89:da:72:6c:f8:
                    ef:57:0b:10:28:97:3c:c1:32:86:fb:e0:3c:e2:17:
                    86:fe:21:35:2c:ce:fc:be:38:a4:ac:98:b7:13:34:
                    cc:02:d2:c8:43:6e:e6:ae:fc:3f:a4:5e:8a:2c:b4:
                    2f:c8:39:e6:99:ef:8e:02:97:db:82:9b:73:7f:89:
                    aa:95:48:64:ec:9d:d2:a8:d5:0f:e0:82:28:17:6a:
                    f9:c3:a9:ac:54:16:97:7c:de:c7:4e:53:e1:76:15:
                    68:f0:5e:88:c0:aa:37:83:25:f2:b5:0b:d8:ea:81:
                    3d:57:0c:90:f9:37:4a:b9:88:b5:94:9c:ab:50:43:
                    68:1c:96:e8:1c:ff:ec:ac:b5:80:0a:08:ff:a6:19:
                    37:d8:14:9b:30:c3:21:6c:1d:35:d5:37:23:f8:b0:
                    3d:39:74:72:3a:f3:7a:e7:d0:71:db:d7:f5:2f:fa:
                    53:68:2b:44:7a:bd:6c:ac:9d:7c:25:c3:46:3f:f2:
                    ca:86:69:ea:b2:42:86:11:ef:ea:d8:8d:2f:11:9e:
                    49:0b:ab:0f:73:1d:0d:29:63:ef:5c:96:67:32:d4:
                    07:b9:4a:d0:a9:90:d5:09:e3:4f:08:a8:54:90:8b:
                    9d:a6:67:48:43:da:10:b9:15:51:78:4d:bb:42:61:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5A:57:F1:29:F4:A9:9F:D5:5D:DD:6A:B5:BA:53:B9:12:C1:55:7D
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230372e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:1d:93:b3:50:18:0d:85:fd:cc:1b:30:7c:b6:c9:56:c2:d6:
         5f:cb:5a:2b:90:16:0d:33:95:4b:ee:68:8f:a8:73:14:20:ce:
         55:99:fa:ad:69:ce:a6:bc:20:ef:d0:d7:4f:42:64:9a:56:b9:
         da:1a:f1:8a:2e:30:cd:11:90:34:1b:6b:82:3d:a4:a7:2d:38:
         61:6c:9f:eb:8c:33:fb:8e:1c:45:d5:d4:6a:5d:cc:94:c7:f9:
         e2:a9:56:10:27:a9:c8:69:27:6d:e8:90:31:0a:fc:d8:df:de:
         a6:ad:96:45:e8:23:cb:25:4f:a7:33:6d:71:2d:7c:f1:05:5d:
         1a:c4:33:9b:c9:6f:11:61:ae:98:3b:c2:9f:a6:b9:18:aa:12:
         59:68:77:61:60:f5:dc:5a:04:c1:22:d9:55:64:9f:2d:78:40:
         5c:01:b8:e4:07:e6:da:eb:8f:69:fb:6b:af:b2:7f:6f:77:4c:
         92:6e:a3:1b:a1:8d:c1:00:7e:07:84:7d:8d:bc:94:f2:15:66:
         34:a3:8d:97:09:2e:d1:23:4e:06:90:80:bb:43:c6:cb:c8:5b:
         ed:d3:01:00:0e:15:9b:a5:1d:b7:9e:8b:83:76:e1:af:0b:a5:
         47:89:16:45:f4:a8:00:b2:32:d2:eb:18:c1:51:8c:d8:3d:cf:
         c0:b8:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:45:21 2026 by rpki-client