Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139302e302f32342d3234203d3e20383334.roa
File:                     3230302e32362e3139302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          KI8tYj5aoSKp4raoiiDGgs6JAXuRggdWqkUmohhAA9Y=
Subject key identifier:   CE:4A:9C:EE:40:71:C6:E1:2C:F9:50:EC:F2:E7:56:2A:2D:ED:01:42
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       3FC918AD31E05B2BEC1E1F94349D8FE0D4A4CDC9
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139302e302f32342d3234203d3e20383334.roa
Signing time:             Wed 01 Jul 2026 21:20:00 +0000
ROA not before:           Wed 01 Jul 2026 21:15:00 +0000
ROA not after:            Wed 30 Jun 2027 21:20:00 +0000
asID:                     834
IP address blocks:        200.26.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c9:18:ad:31:e0:5b:2b:ec:1e:1f:94:34:9d:8f:e0:d4:a4:cd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Jul  1 21:15:00 2026 GMT
            Not After : Jun 30 21:20:00 2027 GMT
        Subject: CN=CE4A9CEE4071C6E12CF950ECF2E7562A2DED0142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:01:0f:64:ca:e9:9d:53:a3:6a:10:32:c6:
                    c7:2f:7e:b1:7a:9c:85:93:fd:58:00:f6:93:6e:15:
                    1f:56:29:22:7c:aa:cc:ee:17:65:1a:9c:32:46:b9:
                    6e:6f:67:18:5b:8d:7c:54:3e:c8:04:19:cd:ee:5a:
                    9e:67:0e:00:7e:67:39:b5:fd:1b:12:f4:73:02:22:
                    1f:4a:64:2b:72:a8:1b:5d:7b:28:36:b1:f4:69:c1:
                    08:4a:0a:e0:a9:ab:9e:ce:d6:04:e2:2f:54:2b:f2:
                    0c:7a:bb:ee:2d:a9:aa:cc:55:8a:ec:2d:e9:47:77:
                    8f:4e:da:ec:d7:cc:65:15:78:d6:c0:ad:bc:33:a0:
                    44:36:5e:ac:ee:01:af:00:51:fd:59:fc:22:7c:36:
                    f1:12:c2:28:53:11:f0:71:23:67:d2:4b:77:7f:cb:
                    40:7a:70:b2:69:a1:dd:b9:5a:72:fe:1b:91:5a:52:
                    a5:de:59:0a:80:49:5e:a5:6b:98:db:28:49:bb:e9:
                    5c:d4:11:c7:a8:0a:1f:ac:57:92:94:0e:3a:01:41:
                    d6:c0:2d:da:cf:90:53:08:27:ed:c3:0a:cd:13:0d:
                    e5:1c:90:14:3b:9b:42:93:22:7b:71:b6:d3:5c:73:
                    f2:74:b6:b6:22:ca:04:56:4a:2b:8b:a4:2a:d0:15:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:9C:EE:40:71:C6:E1:2C:F9:50:EC:F2:E7:56:2A:2D:ED:01:42
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:21:c0:1d:6e:ee:51:67:ed:c6:eb:16:51:d1:df:1a:9c:73:
         2b:f9:16:d6:65:5b:93:a0:8f:84:fa:9c:d7:23:89:38:09:6d:
         6a:6a:03:e4:d6:ae:52:3b:b8:b5:a5:9f:36:d8:02:43:54:78:
         16:5a:af:b3:54:b3:31:e0:14:66:41:8f:d9:2e:30:a3:b5:24:
         26:d0:9a:17:53:43:13:44:11:69:13:f7:fa:46:11:0a:f7:f5:
         a7:0b:b1:77:82:c3:cb:3b:ee:49:19:a5:31:43:d9:07:3e:3b:
         6b:9d:e9:4b:62:3d:01:0a:4b:1a:2b:9b:87:2f:8e:ac:15:f3:
         a1:76:c2:5b:39:3c:46:a0:39:2a:fa:03:93:79:51:ea:25:16:
         9c:97:25:f2:36:92:bb:7c:ca:31:94:75:81:0b:da:0b:12:f2:
         7a:1b:5c:79:a5:b1:73:65:ca:24:03:c2:e0:da:59:ca:d5:61:
         a5:34:26:66:55:db:9b:84:4c:42:1f:f2:f0:d4:c1:38:f7:e9:
         4e:df:1f:fe:98:55:fc:d0:f8:65:3e:66:c5:e1:a0:c5:e4:53:
         35:a9:86:d2:78:20:60:bd:34:09:64:11:60:1d:0f:28:fa:eb:
         34:ee:83:f7:68:9c:e7:bc:12:49:72:db:a6:4e:2b:b0:29:e1:
         50:ca:89:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:59:09 2026 by rpki-client