Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130342e302f32322d3234203d3e2037343138.roa
File:                     3230302e35302e3130342e302f32322d3234203d3e2037343138.roa (raw, json)
Hash identifier:          2ihQT9ZuEBIMpGxrFgR+g5vOGSNq8Z0rr5uefURHi1g=
Subject key identifier:   3A:F8:0F:8A:E2:92:BC:14:CE:F6:7A:45:2A:03:55:06:CA:42:6A:58
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       65D6D77E5F486FF56F36FFA271E27C126FA5A133
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130342e302f32322d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 20:52:04 +0000
ROA not before:           Tue 06 Jan 2026 20:47:04 +0000
ROA not after:            Tue 05 Jan 2027 20:52:04 +0000
asID:                     7418
IP address blocks:        200.50.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d6:d7:7e:5f:48:6f:f5:6f:36:ff:a2:71:e2:7c:12:6f:a5:a1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:04 2026 GMT
            Not After : Jan  5 20:52:04 2027 GMT
        Subject: CN=3AF80F8AE292BC14CEF67A452A035506CA426A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:59:1f:6b:63:9f:b2:cb:4a:d2:ad:34:00:
                    66:fb:5b:49:c2:53:a1:bf:28:43:78:47:57:2b:f6:
                    ad:3c:41:58:96:be:0f:ee:20:4a:f5:bb:bc:4f:6f:
                    7b:9c:d7:f0:4c:b4:84:1e:56:83:1d:5f:e7:95:fa:
                    df:d9:4d:1d:79:af:48:7d:b3:13:3e:66:1a:b5:21:
                    12:bf:90:68:c2:e1:fd:17:20:22:21:c2:e4:a0:62:
                    08:e9:a2:cb:b0:01:a2:1b:9c:df:4a:b1:61:6b:f9:
                    fc:41:90:83:cb:ce:fb:6d:1b:6a:21:e4:9e:3e:4f:
                    0b:55:23:e5:69:21:33:e2:1a:ae:82:b5:70:66:3b:
                    f9:94:8c:0c:db:58:a4:75:5d:8b:5e:12:77:80:a4:
                    cf:3a:1c:ef:44:6f:24:e8:93:62:ca:52:19:a1:0b:
                    9b:d9:80:12:ff:30:c4:c5:47:eb:bf:f5:3e:34:37:
                    f2:ba:37:90:3f:12:7b:77:71:02:18:b7:dd:03:e6:
                    56:17:9e:da:ba:09:a6:5f:25:64:5c:34:66:df:08:
                    73:75:76:c8:b2:81:25:d1:1f:77:dd:a0:14:31:b5:
                    38:cb:1f:11:5e:03:30:a0:ab:5c:c3:95:56:ed:0e:
                    21:d7:ee:9a:63:63:1f:30:75:97:da:96:cf:d0:ed:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F8:0F:8A:E2:92:BC:14:CE:F6:7A:45:2A:03:55:06:CA:42:6A:58
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130342e302f32322d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:c1:ed:5a:20:ed:7a:09:f0:54:aa:70:ee:76:c7:66:f4:b7:
         7d:0d:aa:cc:46:d2:c6:f1:2f:f1:c8:4c:94:53:00:e4:b6:be:
         0f:49:bf:a1:6d:57:7f:1e:3b:8c:96:b7:e3:b3:d1:98:af:75:
         d3:b9:d4:f0:df:a7:e1:63:93:45:89:de:2c:c6:e9:b0:49:92:
         d4:5e:38:56:f2:9e:73:c7:88:f3:2b:7e:ba:ec:2a:3c:e1:07:
         b2:5b:01:a4:b2:77:46:bf:68:0c:57:7f:90:0e:3e:c2:fa:9c:
         9a:ee:20:57:c9:a2:19:f3:60:d2:86:a8:10:e8:30:e0:9c:aa:
         16:d2:cc:15:55:0d:2b:48:3d:88:96:a2:ed:aa:9d:9a:0c:02:
         0a:73:6b:7e:57:49:a7:c0:f1:e4:66:7f:39:c2:88:f5:a8:38:
         ef:f0:a8:3c:50:5c:f1:a0:f7:42:d9:aa:cc:a3:8a:e6:09:9e:
         e0:7c:5f:b9:22:b6:75:61:ae:af:9b:33:8e:19:20:12:a6:c9:
         1b:8c:df:da:00:ed:09:d1:6b:a0:3c:7a:aa:4a:94:91:03:3d:
         bb:cb:62:96:bc:a9:9f:38:5c:9c:04:42:38:2a:5d:b8:2a:bd:
         c1:ca:d3:8f:aa:e8:ed:9d:35:f3:c5:00:07:3e:5a:4e:15:2f:
         7e:f0:ac:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:38:53 2026 by rpki-client