Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231382e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3231382e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          +TRl/mWJ4N5BiCQFVc29nrNhbeE7MVKA2ngWv9Sukyk=
Subject key identifier:   43:72:1E:14:97:80:D6:D6:B6:B9:CF:EC:18:8D:43:D5:77:0D:67:2A
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       A1BC39CED8E22665C096C9B51524D268AA2940
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231382e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 07 Sep 2026 22:34:21 +0000
ROA not before:           Mon 07 Sep 2026 22:29:21 +0000
ROA not after:            Mon 06 Sep 2027 22:34:21 +0000
asID:                     41347
IP address blocks:        200.13.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a1:bc:39:ce:d8:e2:26:65:c0:96:c9:b5:15:24:d2:68:aa:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Sep  7 22:29:21 2026 GMT
            Not After : Sep  6 22:34:21 2027 GMT
        Subject: CN=43721E149780D6D6B6B9CFEC188D43D5770D672A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:84:d9:35:ca:98:db:5e:27:24:06:e7:2c:46:
                    38:b1:8a:92:0d:29:b5:48:be:09:f5:71:24:2c:89:
                    74:48:c8:b9:fd:ff:26:3e:c1:42:bc:4e:fb:62:8e:
                    ab:49:81:05:be:72:26:e7:31:e4:7b:a6:19:59:9b:
                    ab:25:0d:86:65:9d:cf:8f:13:7a:db:c7:20:3a:6e:
                    09:f8:48:29:ce:9f:7c:7c:1f:02:3c:f4:77:d7:9b:
                    29:1a:09:f1:e3:77:99:ca:3a:cd:26:84:17:fa:6a:
                    eb:f0:06:6d:94:47:18:9d:47:af:02:bd:64:42:e8:
                    ae:3d:9a:f1:a1:de:7c:7c:b0:b2:fa:25:a3:28:53:
                    a0:98:ba:fd:8a:ad:85:df:16:97:ca:b4:7b:99:bb:
                    09:31:72:26:bd:fb:dc:8f:e4:0e:d5:60:be:91:16:
                    c2:7f:28:5a:35:51:38:a4:84:bc:c5:c3:26:20:db:
                    9c:d1:75:c3:a0:ae:28:26:e2:c6:1a:10:07:20:96:
                    fb:94:ec:6d:3d:d9:26:10:97:dc:20:a3:87:28:48:
                    52:9a:9c:b9:03:81:e8:ae:24:42:8a:74:95:a6:8e:
                    02:ca:0c:51:27:aa:81:9e:83:38:d3:da:cf:f9:98:
                    0e:4d:01:23:fd:e1:3a:af:b3:9a:14:0d:9a:88:f0:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:72:1E:14:97:80:D6:D6:B6:B9:CF:EC:18:8D:43:D5:77:0D:67:2A
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231382e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:43:84:53:1e:86:89:68:ed:44:9d:57:2a:72:e9:8d:97:58:
         a0:4f:01:6c:12:7d:25:60:98:a9:e8:65:66:8f:5f:47:90:35:
         39:31:14:5a:e9:30:3f:49:45:5e:f4:1c:fd:f8:18:0d:65:1e:
         3c:58:b3:a4:71:3d:91:6c:9b:a7:2b:00:fd:61:2d:81:b6:85:
         3f:83:c6:39:b0:3a:01:cd:43:69:f8:90:10:ea:bf:4a:c3:5f:
         95:4c:74:29:09:a0:5c:3f:5e:ab:a7:8d:aa:0c:2c:82:36:fb:
         f0:f2:99:df:69:9d:f5:3c:74:e2:2b:5b:45:e4:dd:dc:60:94:
         28:ec:43:ad:e9:36:ee:a6:09:4d:97:36:3c:3e:1c:b8:c4:a3:
         ec:d1:5f:21:cd:ca:f2:ee:e1:ef:f5:7c:7b:8c:e0:55:3b:f4:
         5d:5c:43:5d:71:e1:00:55:e5:76:f9:9f:6c:ed:79:09:3d:eb:
         e6:23:58:49:8a:8f:b5:4c:42:60:fe:1f:c5:02:e1:29:fd:9c:
         1e:eb:18:47:70:1b:d4:9c:1b:6c:a5:86:14:97:93:e8:ef:1d:
         e1:4e:6d:0a:57:11:bf:62:8f:22:35:21:19:5e:46:c8:7c:9b:
         ad:fd:d8:21:27:02:35:4e:8e:ab:67:43:ee:18:c8:46:2b:1f:
         a3:1e:ce:3b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAKG8Oc7Y4iZlwJbJtRUk0miqKUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFMTlFMkQ0RUU4RjNFQUQwQzE0NjYwQjJBODY0NkFD
OUYyMEFGNTAeFw0yNjA5MDcyMjI5MjFaFw0yNzA5MDYyMjM0MjFaMDMxMTAvBgNV
BAMTKDQzNzIxRTE0OTc4MEQ2RDZCNkI5Q0ZFQzE4OEQ0M0Q1NzcwRDY3MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDshNk1ypjbXickBucsRjixipIN
KbVIvgn1cSQsiXRIyLn9/yY+wUK8TvtijqtJgQW+cibnMeR7phlZm6slDYZlnc+P
E3rbxyA6bgn4SCnOn3x8HwI89HfXmykaCfHjd5nKOs0mhBf6auvwBm2URxidR68C
vWRC6K49mvGh3nx8sLL6JaMoU6CYuv2KrYXfFpfKtHuZuwkxcia9+9yP5A7VYL6R
FsJ/KFo1UTikhLzFwyYg25zRdcOgrigm4sYaEAcglvuU7G092SYQl9wgo4coSFKa
nLkDgeiuJEKKdJWmjgLKDFEnqoGegzjT2s/5mA5NASP94Tqvs5oUDZqI8MAnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQ3IeFJeA1ta2uc/sGI1D1XcNZyowHwYDVR0j
BBgwFoAUNuGeLU7o8+rQwUZgsqhkasnyCvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRjdCQTc1MDU1Rjc5OTc1OEYzRjRDRTgxMUJBREJBMjQ5
MUJGMUUzMjM4NEZCQjNBRjhBMzlFN0ZCNTA2QzJCLzAvMzZFMTlFMkQ0RUU4RjNF
QUQwQzE0NjYwQjJBODY0NkFDOUYyMEFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNkUxOUUyRDRFRThGM0VBRDBD
MTQ2NjBCMkE4NjQ2QUM5RjIwQUY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkY3QkE3NTA1NUY3OTk3NThGM0Y0Q0U4MTFCQURCQTI0OTFCRjFFMzIz
ODRGQkIzQUY4QTM5RTdGQjUwNkMyQi8wLzMyMzAzMDJlMzEzMzJlMzIzMTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMTMzMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgN2jAN
BgkqhkiG9w0BAQsFAAOCAQEACEOEUx6GiWjtRJ1XKnLpjZdYoE8BbBJ9JWCYqehl
Zo9fR5A1OTEUWukwP0lFXvQc/fgYDWUePFizpHE9kWybpysA/WEtgbaFP4PGObA6
Ac1DafiQEOq/SsNflUx0KQmgXD9eq6eNqgwsgjb78PKZ32md9Tx04itbReTd3GCU
KOxDrek27qYJTZc2PD4cuMSj7NFfIc3K8u7h7/V8e4zgVTv0XVxDXXHhAFXldvmf
bO15CT3r5iNYSYqPtUxCYP4fxQLhKf2cHusYR3Ab1JwbbKWGFJeT6O8d4U5tClcR
v2KPIjUhGV5GyHybrf3YIScCNU6Oq2dD7hjIRisfox7OOw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:48:59 2026 by rpki-client