Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3232322e302f32342d3234203d3e203231373536.roa
File:                     3230302e38302e3232322e302f32342d3234203d3e203231373536.roa (raw, json)
Hash identifier:          Q2X//A5JXmDAhtA/+RMHHbZRao1bBIHvTYUJV3Ly+2w=
Subject key identifier:   BA:74:82:AA:00:EB:44:31:0E:0B:32:6E:A2:FA:9C:36:0C:A8:A0:8C
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       09529612ECB370EAC9A011A392FF8141754297A8
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3232322e302f32342d3234203d3e203231373536.roa
Signing time:             Wed 26 Aug 2026 12:50:00 +0000
ROA not before:           Wed 26 Aug 2026 12:45:00 +0000
ROA not after:            Wed 25 Aug 2027 12:50:00 +0000
asID:                     21756
IP address blocks:        200.80.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:52:96:12:ec:b3:70:ea:c9:a0:11:a3:92:ff:81:41:75:42:97:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Aug 26 12:45:00 2026 GMT
            Not After : Aug 25 12:50:00 2027 GMT
        Subject: CN=BA7482AA00EB44310E0B326EA2FA9C360CA8A08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:c6:3a:dc:38:74:4d:f1:e3:ea:a9:0f:b0:
                    f3:a7:a2:01:85:15:bb:44:a1:e3:ff:67:d5:ec:62:
                    3e:a6:61:0f:2f:33:07:ff:56:f5:58:6b:2f:31:be:
                    1e:3b:19:c2:cd:40:e6:1f:97:97:ba:49:40:e3:d0:
                    93:9a:81:49:5a:60:00:be:6a:8b:f3:7b:d6:83:1c:
                    05:6b:60:08:30:ef:60:b2:35:31:2f:f3:51:f1:bc:
                    a2:a4:db:05:1b:69:30:de:d2:e8:b4:6d:95:f0:6e:
                    83:bb:0c:3e:01:9c:cf:ea:44:63:f4:9a:b1:88:08:
                    1b:19:20:2d:d6:f2:39:5a:a3:4a:9c:f5:95:49:e7:
                    ba:33:fe:59:28:1a:d3:28:b0:5d:81:fd:57:ce:d6:
                    33:f9:ef:42:6d:56:f0:86:23:11:3c:f4:0b:04:96:
                    a4:5f:4b:d4:0c:f6:31:d6:f0:4f:cd:e0:08:4a:32:
                    4b:54:6d:80:35:25:bb:4b:3f:d8:6b:48:d5:35:3b:
                    12:15:8f:33:d7:ec:70:25:f9:ab:c8:e3:96:e7:80:
                    66:0a:49:45:ca:34:c2:e3:b9:bc:a0:1b:f4:2d:b8:
                    18:03:80:07:db:88:9e:70:17:8c:6b:a4:d2:f3:75:
                    e1:8e:e6:ca:41:9b:78:3a:20:15:35:81:f0:66:98:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:74:82:AA:00:EB:44:31:0E:0B:32:6E:A2:FA:9C:36:0C:A8:A0:8C
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3232322e302f32342d3234203d3e203231373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:86:e0:82:f7:b6:94:2d:73:c7:0b:90:9b:27:d3:5a:00:76:
         07:ce:df:0b:57:66:0b:ae:11:5c:7c:37:60:ab:6e:79:57:bd:
         0a:d5:74:f9:45:a3:cf:7f:04:d8:55:d4:a8:aa:18:4f:0f:c2:
         0b:bd:ec:eb:e2:a1:53:fb:16:c1:e3:67:81:93:c2:ac:b3:cc:
         6c:b0:a1:93:39:ec:0c:bf:6e:07:ae:ae:59:b3:57:a0:d3:3a:
         52:fe:e9:5c:06:96:c1:2a:af:cc:a1:f1:d5:b5:cb:2d:6b:5d:
         17:88:71:4f:60:22:dc:e2:d7:97:21:d9:c2:47:83:d3:f2:96:
         bb:5f:7c:51:71:51:69:48:c8:79:03:31:57:51:5a:48:1a:a6:
         15:ab:81:45:08:97:2c:89:15:25:69:0e:ab:0b:8d:55:85:29:
         e4:02:92:d3:e7:d8:ef:ad:c4:59:3e:41:9c:60:13:a1:50:bf:
         1a:87:c8:4a:c8:17:12:df:4f:f4:5a:b7:79:9d:b8:4b:4d:8d:
         73:50:0a:d0:06:c1:f6:57:ca:84:30:99:bc:a8:07:11:1d:67:
         34:3d:e9:5b:a3:0f:82:5d:10:1e:67:7a:8d:51:9c:6a:6d:bd:
         6b:3e:b2:bc:f0:0b:d8:3d:03:1c:c0:d3:b3:74:ea:0a:75:bb:
         c5:da:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:57:38 2026 by rpki-client