Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231382e302f32342d3234203d3e2037303837.roa
File:                     3230302e31332e3231382e302f32342d3234203d3e2037303837.roa (raw, json)
Hash identifier:          jzlFdsl/Sz0W1tSrzobkA+Qs1S6EfpYrdozj2Lx6cic=
Subject key identifier:   23:E3:10:87:DD:DB:9F:55:1C:32:74:2D:3D:DD:79:83:C9:A9:6F:11
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       71EA1E10334A91A29ED2E0D0CAE1A0F1914A9A0A
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231382e302f32342d3234203d3e2037303837.roa
Signing time:             Thu 23 Apr 2026 13:55:00 +0000
ROA not before:           Thu 23 Apr 2026 13:50:00 +0000
ROA not after:            Thu 22 Apr 2027 13:55:00 +0000
asID:                     7087
IP address blocks:        200.13.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ea:1e:10:33:4a:91:a2:9e:d2:e0:d0:ca:e1:a0:f1:91:4a:9a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Apr 23 13:50:00 2026 GMT
            Not After : Apr 22 13:55:00 2027 GMT
        Subject: CN=23E31087DDDB9F551C32742D3DDD7983C9A96F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:f2:6f:00:12:4e:bc:8b:34:a2:5c:a5:79:
                    29:e7:f0:f9:9b:2c:aa:df:78:a5:cd:52:82:3c:68:
                    ad:0b:9a:a1:3b:64:96:29:e2:48:ec:4f:e2:d2:45:
                    7d:e7:fc:bf:d8:4b:83:41:c1:02:d9:ac:d8:4c:ed:
                    70:15:63:5a:fd:25:ea:37:4f:58:75:e1:51:d2:53:
                    03:83:07:9f:fc:2c:33:46:b5:fc:cd:1a:31:bb:c7:
                    e2:d8:71:e5:0d:4f:01:5c:66:b9:69:36:14:3b:6a:
                    56:af:3a:26:66:fb:76:74:d5:1a:c7:d3:b0:66:21:
                    37:04:e3:e0:ac:c5:09:00:8f:2a:c6:5e:84:9e:fd:
                    9b:ac:c0:12:f8:45:1e:a5:ff:ce:62:1b:7b:b1:57:
                    fc:b2:e4:01:cc:5f:3f:7c:a0:f9:30:8b:72:25:3a:
                    bc:8f:33:b1:4f:16:00:e8:3a:c8:74:38:44:31:1d:
                    a2:31:88:1b:e4:79:eb:3a:d4:0d:3c:f8:79:c3:06:
                    13:6a:13:c5:f2:3f:74:3a:52:4f:c9:1f:77:6a:81:
                    72:7c:0f:85:e3:2c:c7:aa:02:aa:bc:1d:5e:f9:7e:
                    e8:77:39:d8:de:ae:7d:0a:03:e9:2a:cd:9c:c4:89:
                    8a:46:71:b2:25:96:84:c3:77:9c:21:e3:1d:87:8a:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E3:10:87:DD:DB:9F:55:1C:32:74:2D:3D:DD:79:83:C9:A9:6F:11
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3231382e302f32342d3234203d3e2037303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:c5:f2:c1:16:49:10:9c:60:73:75:07:15:9d:31:35:2c:f9:
         25:a4:39:32:3b:62:fa:e4:75:8b:a2:9b:66:f3:76:a1:33:7b:
         f6:13:96:6b:9a:5e:9c:11:9e:47:09:37:fd:e4:82:d2:39:24:
         d5:87:9f:63:88:29:a5:61:ba:3d:d4:52:fc:06:20:d9:14:34:
         c7:87:bc:bf:c8:38:13:fe:ef:fb:6e:b4:10:6e:bc:77:cf:da:
         aa:ab:1e:05:12:7e:da:bd:ba:a4:25:79:ef:3c:1e:85:57:fb:
         87:de:f4:f3:f9:e3:d3:13:04:c5:cb:42:9e:04:23:7c:9d:57:
         47:cd:cd:73:93:74:df:30:c6:46:64:bd:aa:cf:35:56:41:9d:
         9c:58:c5:17:a4:f5:b6:ff:22:c4:8e:cf:9a:93:45:84:d8:8c:
         d8:0e:4b:37:99:05:16:18:a2:7e:e2:c5:8f:16:ba:88:80:a3:
         c4:b6:e9:5a:1f:c4:b6:59:be:f7:1d:c7:f5:43:cb:ab:97:08:
         27:cc:e0:f0:3d:1f:fc:4e:a9:01:0b:d5:1c:8c:39:95:23:7a:
         f4:ff:9e:2f:a0:11:3e:90:d2:8a:e0:df:cc:67:a0:1e:cd:c9:
         6a:2e:53:c7:84:02:df:fb:61:af:61:94:24:62:87:7d:cf:ce:
         87:0a:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:16:01 2026 by rpki-client