Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231302e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3231302e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          9ZLPQWeqRhe2mFqx9g+pbmchmvcENL5fhBwRvTjIiJI=
Subject key identifier:   EF:20:FC:AE:69:A2:58:55:B5:C5:87:50:5D:8D:5C:B7:7E:50:90:8E
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       767036CBA951E148F1F42196E36ED331F57E39CD
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231302e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:20 +0000
ROA not before:           Mon 07 Sep 2026 22:29:20 +0000
ROA not after:            Mon 06 Sep 2027 22:34:20 +0000
asID:                     41347
IP address blocks:        200.13.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:70:36:cb:a9:51:e1:48:f1:f4:21:96:e3:6e:d3:31:f5:7e:39:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:20 2026 GMT
            Not After : Sep  6 22:34:20 2027 GMT
        Subject: CN=EF20FCAE69A25855B5C587505D8D5CB77E50908E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:c8:0f:de:2f:71:d5:06:14:e8:5c:9d:07:
                    fb:b6:ab:83:69:9a:9a:c8:c4:0c:a8:37:3e:e4:ad:
                    af:88:71:30:64:5c:d6:cb:ec:38:65:cd:5f:2c:a5:
                    31:9e:eb:81:68:6b:99:4b:17:98:af:94:fa:6a:eb:
                    f4:c9:01:db:4f:3d:72:c9:96:4d:43:b7:59:94:36:
                    dd:5a:bf:37:6a:7d:fb:f4:7a:05:8c:63:f3:a4:2f:
                    4e:37:7b:20:ca:a3:96:c5:de:a2:6f:73:fa:0a:03:
                    43:b2:77:5d:9a:07:26:fb:b5:23:df:26:8c:f6:28:
                    d3:a0:d1:40:94:85:d9:ce:9a:4b:39:93:ee:62:95:
                    70:70:4a:27:df:44:39:73:12:c3:fc:6f:5f:10:d8:
                    95:c4:63:b2:ed:49:16:eb:93:85:d3:63:04:6b:a3:
                    b1:9d:0c:62:2e:11:73:a0:10:ed:26:39:58:db:0b:
                    dc:e6:b8:72:60:26:06:fa:25:43:c5:46:b4:94:50:
                    5b:52:63:b9:38:08:1b:72:7a:5c:6d:d6:e7:70:80:
                    a4:54:1a:a6:87:e6:c1:38:9d:50:1b:93:07:f5:1b:
                    14:5b:54:91:78:b6:9d:62:79:27:e4:1b:38:47:c0:
                    e4:ff:24:0e:7d:2c:55:1d:e7:67:b4:74:8c:c7:99:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:20:FC:AE:69:A2:58:55:B5:C5:87:50:5D:8D:5C:B7:7E:50:90:8E
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231302e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:7b:a7:d7:29:55:98:a2:42:27:14:89:0e:23:54:2b:8a:52:
         b5:3c:59:4a:a0:b7:d4:8c:aa:6f:96:72:94:f6:33:ac:29:8c:
         e5:28:b5:93:6a:2d:eb:c1:38:d3:f0:0b:f7:a5:f7:2c:9d:21:
         f1:a1:40:4d:49:12:4e:5d:64:3b:2b:cc:c9:74:57:57:f0:96:
         ac:bd:7f:35:6c:35:75:b4:6e:ad:e0:2b:ba:3c:4d:6b:c5:31:
         1b:c7:29:6b:ff:67:7c:14:0f:f7:2c:3b:2d:19:7e:e1:f5:a7:
         f7:bf:fa:f2:59:f0:f9:cf:99:e2:62:e2:2f:0c:08:1b:9a:5c:
         9d:3a:59:a6:99:74:71:4c:4d:2f:80:ff:9d:13:b2:de:7f:61:
         e9:f7:d7:1e:f2:b9:b3:ac:27:51:0c:2e:f8:1d:e6:be:9e:83:
         9f:df:a5:3a:32:bc:ab:a1:7d:9e:fa:3b:fd:73:e7:3c:2a:68:
         82:fd:26:90:64:3a:43:aa:02:b0:42:7b:5a:0a:0c:e1:73:4f:
         47:5e:17:28:4d:ad:a1:4d:a2:6b:64:a1:7c:e6:e7:3c:9d:dd:
         d5:3f:00:c4:8a:2f:1a:07:8b:00:0b:18:4a:bd:39:31:fa:e7:
         5e:d3:04:fd:10:b0:24:07:eb:d5:81:0f:bd:62:3b:a8:40:f0:
         2a:c1:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:04:03 2026 by rpki-client