Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231312e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3231312e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          01F0/W/+TDJ2JXwUQe+D6INXGY1zuwfR0zc2x5XXuRk=
Subject key identifier:   01:C5:8E:1A:82:CF:6F:2C:30:B1:2C:38:FB:5A:D6:C5:3F:40:0D:01
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       481BB70EDDC49C58A839FDD9BD7B87F57ACC6AB4
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231312e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:18 +0000
ROA not before:           Mon 07 Sep 2026 22:29:18 +0000
ROA not after:            Mon 06 Sep 2027 22:34:18 +0000
asID:                     41347
IP address blocks:        200.13.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1b:b7:0e:dd:c4:9c:58:a8:39:fd:d9:bd:7b:87:f5:7a:cc:6a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:18 2026 GMT
            Not After : Sep  6 22:34:18 2027 GMT
        Subject: CN=01C58E1A82CF6F2C30B12C38FB5AD6C53F400D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:dc:71:d5:fb:00:68:0e:a9:11:06:cf:be:8a:
                    d1:c0:c7:13:29:72:4d:cf:b9:13:f7:de:4b:a6:dd:
                    5e:b4:ef:72:14:2c:d8:e0:11:d1:9c:9d:dd:94:ae:
                    0f:29:1a:45:3f:d6:b8:23:59:52:da:f8:d4:53:a4:
                    b2:0e:3e:ce:f7:3a:d1:73:17:d9:1a:65:b5:08:d0:
                    29:89:65:4a:55:49:fe:bf:f8:6a:03:44:56:1e:c2:
                    04:9d:43:af:d0:a7:b0:46:0e:17:a7:55:df:3c:f8:
                    14:79:70:0a:d3:5b:64:98:06:43:af:37:3f:a1:c8:
                    4c:de:c7:cb:dd:ba:20:4b:b3:6b:6d:ee:d0:a7:41:
                    58:95:ea:a5:fa:ec:71:4a:99:d1:39:1f:26:93:b7:
                    74:5b:f7:f3:00:41:d2:5c:0b:8a:02:3e:5c:8d:94:
                    70:3d:2d:5e:ea:6c:ed:07:0e:59:49:11:16:24:77:
                    cc:4e:cb:0e:38:9b:9f:81:8b:e6:98:90:d9:97:37:
                    00:c1:0b:1d:b9:0a:87:26:22:f7:59:b5:cb:f3:7b:
                    bd:d5:d0:8a:42:5b:f1:88:e2:a0:42:af:eb:24:11:
                    62:94:b2:81:4d:8c:81:e3:41:45:29:4e:1a:0b:a5:
                    18:fd:90:97:39:ea:0e:f2:d8:c0:c1:8c:d1:24:b2:
                    48:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C5:8E:1A:82:CF:6F:2C:30:B1:2C:38:FB:5A:D6:C5:3F:40:0D:01
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231312e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:9c:f2:ce:d8:98:0a:8c:ca:ec:f0:e0:e8:01:0c:0e:a2:c1:
         c3:27:d2:55:b1:d6:94:a2:0c:8e:2c:e5:7b:91:76:24:fd:a9:
         a9:b0:eb:0b:87:5d:0c:9c:74:74:17:97:50:80:64:78:1b:b3:
         7c:0a:5b:68:22:59:47:ff:cd:42:d6:82:bc:61:06:68:f0:db:
         e5:8d:ef:21:9e:44:9a:c2:7b:1f:ce:d5:e8:08:a5:97:11:0a:
         e4:6b:bc:d4:d5:b4:53:bc:74:32:a6:9a:88:3c:ce:df:75:97:
         b7:1e:65:50:52:37:d7:a0:8a:81:0e:74:8b:e5:fb:59:b4:79:
         11:06:a4:56:90:dd:58:cd:d9:b2:d2:e3:c8:87:d2:74:01:99:
         85:dd:2b:2e:34:d3:bf:49:03:8c:64:3c:77:0f:37:c6:21:6f:
         85:41:7e:a9:62:56:5c:1b:e6:f3:66:57:f3:6c:63:f1:69:fc:
         d6:63:f8:90:72:4a:53:c2:52:23:fa:27:a1:d9:8c:17:8a:88:
         e3:4a:5c:50:1a:ee:cf:c6:33:2f:72:b2:f3:fa:76:83:e8:c6:
         55:c9:46:6d:c8:e6:2f:11:b7:b9:62:29:46:c4:12:9e:f3:1a:
         49:96:84:10:0f:34:a7:f5:0a:68:9f:7c:dd:43:de:b4:a9:66:
         a6:73:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:56:29 2026 by rpki-client