Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231342e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3231342e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          3+yPNdn/LAoeL2BIitUjG5wgK9XlqL15pouXtVA5O0A=
Subject key identifier:   6F:EE:87:B7:98:7E:5B:37:C6:6E:97:9C:D6:B6:C7:2B:2B:A4:44:CB
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       4C7899366278DC4846157B19185AB63C8DDA98FA
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231342e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:22 +0000
ROA not before:           Mon 07 Sep 2026 22:29:22 +0000
ROA not after:            Mon 06 Sep 2027 22:34:22 +0000
asID:                     41347
IP address blocks:        200.13.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:78:99:36:62:78:dc:48:46:15:7b:19:18:5a:b6:3c:8d:da:98:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:22 2026 GMT
            Not After : Sep  6 22:34:22 2027 GMT
        Subject: CN=6FEE87B7987E5B37C66E979CD6B6C72B2BA444CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:a8:09:8c:d8:ec:79:48:52:00:5c:6c:a1:
                    d6:cb:51:fd:c0:f5:59:c9:4f:78:2c:cf:ea:6d:2a:
                    71:be:c7:86:48:4d:66:aa:d7:16:3b:74:81:88:de:
                    16:14:8c:2c:29:73:17:a5:41:6a:7f:ba:26:14:32:
                    c1:b1:e3:61:6c:1f:24:c4:c3:f3:cd:13:6b:dd:ed:
                    5b:e2:fb:e4:5b:47:1c:d5:0f:44:e4:76:6c:b9:1d:
                    02:30:35:9b:72:6f:68:c3:a4:bb:64:3c:db:e6:bb:
                    5b:dd:cd:c3:07:1a:c8:ae:8d:06:c3:49:e0:e1:be:
                    bc:7a:27:dc:d7:0b:39:3e:58:33:6a:f5:14:be:14:
                    19:6d:3e:a0:4c:e6:61:54:a0:bc:42:a9:a3:97:6c:
                    e8:2a:e5:2a:ab:ee:a9:3f:68:9e:45:b6:69:ca:c6:
                    c9:3e:69:62:f4:c6:49:b1:f6:95:d0:5c:3b:6d:be:
                    28:72:d0:b6:1b:14:e2:4e:17:fb:b8:14:54:eb:62:
                    51:3d:f7:a7:5a:4c:39:bb:51:38:03:d3:e2:3a:be:
                    82:28:21:24:94:e3:72:92:39:69:d3:32:77:b2:10:
                    d2:6d:9e:80:a0:fb:3f:bd:8b:d4:5e:12:96:66:32:
                    41:3a:5e:9b:83:5a:ad:f6:69:df:ba:46:ff:2a:bd:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EE:87:B7:98:7E:5B:37:C6:6E:97:9C:D6:B6:C7:2B:2B:A4:44:CB
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231342e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:b1:e1:ff:c6:55:c6:ae:19:09:69:23:fd:2d:57:18:86:
         85:57:c3:f2:09:8f:a4:05:01:bf:ee:aa:94:65:c5:37:af:61:
         98:54:e4:91:6d:d0:62:5e:73:79:58:dc:81:8a:89:44:a4:3e:
         3f:b8:44:36:d2:0c:f0:f0:e7:67:da:04:10:6f:46:2d:6d:1a:
         4e:c3:ed:e6:56:3e:d2:cc:07:c1:8c:ed:ea:1a:9a:93:e3:00:
         e3:ba:b9:1d:fa:45:fc:1c:0c:bd:e2:aa:9e:f7:7c:40:97:f7:
         65:f5:02:d9:4e:dd:13:e1:71:2c:2c:2e:c8:0c:25:cf:46:3e:
         9c:39:1f:2f:d7:df:39:68:d2:58:c7:95:41:b3:8f:9d:73:52:
         46:7a:5a:5c:e6:c9:72:86:79:7b:d2:22:04:10:6d:29:cb:6b:
         78:7e:c6:e6:79:59:52:e8:a5:39:67:aa:67:7a:bd:b2:eb:d8:
         88:b1:9d:58:7e:7e:f4:fa:f8:8d:dd:cb:a2:24:e1:16:ef:f9:
         0f:8a:0b:b4:b1:db:0c:fd:e4:26:1b:46:07:83:6f:d6:f0:84:
         df:1a:cf:58:71:ee:1f:23:f8:6d:9b:cb:8c:b2:fa:d4:b9:d4:
         5a:5f:6b:99:c9:8f:3d:03:46:3c:e5:c6:14:10:73:2e:c5:f2:
         0c:54:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:46:53 2026 by rpki-client