Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230372e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3230372e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          pGY+/kwd2elca1JJmbnY4PJWax5+GQFmBLuZ+l4fdi0=
Subject key identifier:   DA:AC:DF:CC:38:5C:DA:B3:F8:D7:99:18:C1:4B:1E:73:45:BA:2B:74
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       21C583AFCBE70C0269B85DF7F1A815E6FFE0CA49
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230372e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 06 Jan 2026 20:54:29 +0000
ROA not before:           Tue 06 Jan 2026 20:49:29 +0000
ROA not after:            Tue 05 Jan 2027 20:54:29 +0000
asID:                     4995
IP address blocks:        200.2.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c5:83:af:cb:e7:0c:02:69:b8:5d:f7:f1:a8:15:e6:ff:e0:ca:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:29 2026 GMT
            Not After : Jan  5 20:54:29 2027 GMT
        Subject: CN=DAACDFCC385CDAB3F8D79918C14B1E7345BA2B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:94:10:a2:eb:26:84:47:35:97:e1:45:cb:
                    d5:83:f4:1b:85:9d:40:92:95:64:5e:ce:9e:e3:d4:
                    fa:a5:c8:0b:59:54:4a:1e:a6:7f:4a:46:2b:f6:70:
                    f8:db:b7:3a:8a:dc:5a:e4:22:1e:2e:95:7b:7f:9e:
                    8a:7b:bc:d7:04:8a:40:1b:b2:a0:95:9c:61:46:ee:
                    fd:16:de:de:57:67:d5:0b:2c:11:a4:3f:6f:c6:64:
                    b8:d5:2e:38:31:5d:28:8d:e1:e4:fd:33:5b:d2:fd:
                    e7:b6:d3:22:4f:bb:d2:1e:18:e1:5d:de:da:cc:bf:
                    03:cd:fc:26:84:94:34:8e:c7:11:30:2b:16:88:3d:
                    71:17:82:7e:1f:ac:1a:27:bf:33:e4:79:3e:cb:6a:
                    2a:d8:a8:fb:8b:55:b7:df:e7:5a:ac:cc:94:e9:d9:
                    83:d2:cc:fa:e4:f2:3a:f6:14:17:90:4f:b3:1c:31:
                    ec:20:9c:f9:c9:89:4e:87:e2:89:95:3b:a0:b3:ed:
                    5a:2c:44:84:66:85:ea:fc:65:d1:da:ce:e5:80:8c:
                    71:b6:01:f7:aa:df:49:e9:9b:ce:5f:ae:2b:4c:22:
                    4d:ae:7b:83:63:f8:b5:22:cd:93:57:08:95:32:5b:
                    78:cd:49:2c:97:71:64:a0:f3:ea:37:6c:1b:0e:44:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AC:DF:CC:38:5C:DA:B3:F8:D7:99:18:C1:4B:1E:73:45:BA:2B:74
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3230372e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b0:44:d2:db:c7:07:db:3b:57:52:e4:b6:9a:41:71:5c:74:
         47:3a:93:65:c8:b5:d0:92:83:54:3c:f4:72:a5:8b:c9:ad:b7:
         0b:3a:c1:d2:25:30:b3:d3:db:b2:a5:f5:d2:a3:f5:bf:4d:0c:
         a8:68:ff:bb:98:45:54:13:45:11:b7:ca:5d:21:1e:2b:e9:60:
         ee:4e:32:17:e4:dd:90:d1:74:9e:08:51:29:e1:7e:0f:6f:5e:
         31:51:84:e5:96:d7:cb:f4:22:67:ed:6a:2e:90:c7:46:79:d5:
         9a:d5:a8:67:a2:1e:2c:c6:1f:35:40:3b:ee:e5:47:7a:6e:9b:
         d9:41:31:95:2b:be:43:45:a7:96:42:41:ec:7b:58:b1:24:1c:
         c4:44:75:25:7d:bd:ec:41:e8:05:e5:52:c0:29:8a:eb:06:f2:
         a1:be:6a:ff:f7:e8:f6:f7:51:01:13:96:42:fe:07:62:a2:3b:
         82:50:30:ae:a5:27:be:0a:05:5e:11:03:db:86:0e:92:3d:8a:
         72:7e:2d:ee:20:a1:12:65:7a:6d:d3:72:68:85:a1:ce:16:9c:
         fa:69:76:49:f4:3c:1a:4a:30:7f:ae:5d:af:e5:bb:31:fa:58:
         f3:c9:b5:0f:2d:52:8b:73:4e:e9:f5:40:0d:1a:f2:10:39:09:
         8d:8c:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:39:02 2026 by rpki-client