Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa
File:                     3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa (raw, json)
Hash identifier:          x4SPQsBu6MKpgnLCdfIBoYMBfedvpLxXFO4iPIrkWAg=
Subject key identifier:   25:A8:90:A0:EF:30:9E:4C:63:26:5B:87:49:4D:54:98:06:92:C8:FB
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       616921A3DB02B2CB2539C8F04A7EC852C3F7F8F4
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa
Signing time:             Tue 06 Jan 2026 19:33:51 +0000
ROA not before:           Tue 06 Jan 2026 19:28:51 +0000
ROA not after:            Tue 05 Jan 2027 19:33:51 +0000
asID:                     272913
IP address blocks:        200.85.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 11:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:69:21:a3:db:02:b2:cb:25:39:c8:f0:4a:7e:c8:52:c3:f7:f8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Jan  6 19:28:51 2026 GMT
            Not After : Jan  5 19:33:51 2027 GMT
        Subject: CN=25A890A0EF309E4C63265B87494D54980692C8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:f9:96:67:c4:9c:47:1a:ee:7d:27:99:fc:
                    36:a6:5a:73:72:1b:2b:2d:cc:4b:ee:7d:8a:e4:e6:
                    fa:5a:f3:9e:bd:5d:fb:be:37:7a:33:2a:20:54:c5:
                    ca:91:79:9a:ad:23:ab:ee:85:13:73:f4:e7:30:28:
                    4a:39:01:94:05:bd:fe:8b:aa:2e:3b:91:64:a1:3c:
                    5d:54:c3:5b:d1:26:8f:c4:bf:c3:6b:7a:d4:e4:a6:
                    fc:16:44:ea:f9:14:75:91:36:12:f3:d2:68:27:3b:
                    ec:b9:eb:b6:73:ce:28:2a:30:0b:50:65:21:8a:be:
                    69:5c:a7:e8:03:93:15:17:8b:22:45:13:16:8e:4e:
                    57:a6:4a:b1:f2:de:a6:87:fb:7b:04:db:8b:78:49:
                    96:4e:0e:8c:6e:64:90:b7:6a:40:0c:14:85:15:f2:
                    e7:3b:51:ba:0b:9b:67:3f:14:a7:7c:52:34:50:08:
                    ca:44:07:e3:a3:f1:cb:57:7b:4d:8c:c2:93:9a:87:
                    1e:3e:8e:71:bf:c6:39:fd:a2:00:0e:fe:c1:e0:8b:
                    c0:a5:bf:53:3c:2f:42:45:60:d5:29:6c:5c:9b:d8:
                    a1:68:05:32:b9:de:fe:54:93:d7:95:7a:db:9a:d0:
                    dd:a8:34:a0:84:bb:b4:46:8e:00:4d:84:47:2a:e7:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A8:90:A0:EF:30:9E:4C:63:26:5B:87:49:4D:54:98:06:92:C8:FB
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3134302e302f32342d3234203d3e20323732393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9f:28:6e:19:8e:3f:1d:d0:c5:19:1c:cf:8b:a1:95:d6:cf:
         19:f1:a3:0e:46:1c:69:1b:8d:92:b1:d3:17:1c:b1:b8:8e:12:
         7b:f6:26:fb:d2:9c:39:3e:1b:55:ad:37:71:93:c1:bc:a1:dc:
         06:71:0b:ed:29:09:d7:a7:19:43:37:b7:71:bd:2e:15:e0:10:
         f0:44:02:e6:e1:71:43:03:0f:6f:da:76:06:01:73:5a:53:49:
         d3:e0:18:64:6a:47:bb:d9:86:9b:e7:97:06:8d:6c:3e:89:c4:
         f7:24:dd:3b:a4:49:dc:98:25:df:6c:dd:59:bc:99:66:7c:80:
         46:74:d9:69:24:bd:08:aa:00:79:15:12:0b:2f:98:75:8b:b5:
         f3:ba:4b:87:34:ab:3b:69:1e:3c:83:9d:78:d3:40:7f:72:5d:
         c2:42:75:e5:e1:42:90:68:3c:fe:23:20:d6:86:c3:12:41:f3:
         a1:d8:22:f7:97:14:ec:8e:af:be:c6:84:bd:ca:95:23:94:48:
         b4:e1:e9:5e:a7:82:85:66:3e:c1:1e:99:a0:0f:29:ce:18:51:
         5d:17:ad:54:0a:07:78:aa:d8:ef:b1:18:41:dd:84:7e:21:32:
         bd:28:7f:96:ac:a7:96:25:22:27:5a:e4:dd:e9:9e:39:8d:21:
         18:cc:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:07:59 2026 by rpki-client