Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/3230302e33352e3134382e302f32322d3234203d3e20323730303432.roa
File:                     3230302e33352e3134382e302f32322d3234203d3e20323730303432.roa (raw, json)
Hash identifier:          9acNmyYYyVYS9uLAJRwSyitd7NTEYqnycJbFk9RDBjU=
Subject key identifier:   EE:8F:B2:59:06:B9:47:D1:59:04:20:BD:B5:61:11:6D:28:D2:14:D9
Certificate issuer:       /CN=694A9B567DC84442DF416235D33074B005F7A672
Certificate serial:       33C8D0C1F44ED0B2A2788F86477EE53E5786F190
Authority key identifier: 69:4A:9B:56:7D:C8:44:42:DF:41:62:35:D3:30:74:B0:05:F7:A6:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/3230302e33352e3134382e302f32322d3234203d3e20323730303432.roa
Signing time:             Tue 06 Jan 2026 19:46:47 +0000
ROA not before:           Tue 06 Jan 2026 19:41:47 +0000
ROA not after:            Tue 05 Jan 2027 19:46:47 +0000
asID:                     270042
IP address blocks:        200.35.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c8:d0:c1:f4:4e:d0:b2:a2:78:8f:86:47:7e:e5:3e:57:86:f1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694A9B567DC84442DF416235D33074B005F7A672
        Validity
            Not Before: Jan  6 19:41:47 2026 GMT
            Not After : Jan  5 19:46:47 2027 GMT
        Subject: CN=EE8FB25906B947D1590420BDB561116D28D214D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c7:31:6c:19:fa:7f:b6:eb:b0:ee:a8:d2:68:
                    88:fc:17:50:25:97:c3:c0:12:81:3c:12:c1:3c:1e:
                    a9:a1:06:85:63:19:ab:ef:8e:54:0a:ab:ee:4a:bf:
                    fa:cc:ab:85:8b:9e:6a:5b:ec:9a:d6:b2:e2:4b:a0:
                    2b:af:a6:6d:c6:7c:57:14:d6:82:8d:a2:de:58:7b:
                    3f:a0:e4:4a:38:bb:8c:d6:d6:91:4c:af:ff:57:97:
                    0a:de:3e:b1:5e:b8:86:f9:54:d3:7f:a2:73:ad:96:
                    fe:c9:45:7c:cf:3a:ed:1f:8e:c8:56:f8:7e:61:d4:
                    a2:2b:6d:d6:a2:a4:11:ad:a1:e3:39:2e:63:04:37:
                    85:0c:c1:b4:80:a9:7e:4e:23:f1:04:95:2e:fd:cb:
                    c2:c3:11:c9:1d:fb:e6:d5:9b:66:59:a8:55:9f:a3:
                    f2:00:fc:b4:6c:21:59:c1:c1:40:9d:6e:e5:35:d9:
                    b5:64:bd:45:ed:f3:48:e8:e0:c0:c4:05:1f:52:bc:
                    41:49:79:39:a7:b5:72:22:02:8d:8a:05:88:64:69:
                    4f:e6:33:ce:e2:dd:ab:bf:37:e1:6c:b7:3f:07:60:
                    86:e4:3f:ac:bb:39:b4:c1:aa:25:70:19:26:e8:30:
                    54:50:e1:2e:d5:7a:5e:c2:0e:9d:8e:aa:fb:49:a7:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8F:B2:59:06:B9:47:D1:59:04:20:BD:B5:61:11:6D:28:D2:14:D9
            X509v3 Authority Key Identifier:
                keyid:69:4A:9B:56:7D:C8:44:42:DF:41:62:35:D3:30:74:B0:05:F7:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/3230302e33352e3134382e302f32322d3234203d3e20323730303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:97:67:a9:2c:14:06:bb:be:30:9c:75:2f:a2:1a:d6:91:10:
         3a:9c:17:69:03:b2:bc:a7:f6:67:fa:bc:f3:6b:ec:f4:38:0e:
         3d:dc:98:d0:94:30:d6:19:2f:c0:ed:a3:ee:cf:c0:35:de:5e:
         d3:d8:0f:23:44:44:4e:92:74:c8:02:0c:5b:a0:e7:e3:67:0f:
         79:5d:4e:48:b0:0d:43:1c:8b:fa:80:7f:a5:8a:4d:83:fb:3d:
         7f:35:6a:33:ff:45:4d:87:df:30:ef:ff:11:4d:db:5a:6f:76:
         b6:30:08:a2:7a:17:ff:53:d9:bb:45:1d:21:44:d8:32:ac:65:
         7d:62:8a:5b:26:f6:8f:81:cb:f7:b3:02:f3:8d:e0:0d:1e:2c:
         5a:19:c0:39:fe:1b:75:a5:d0:a7:8e:87:cf:1d:bb:d3:42:73:
         f1:31:ed:01:00:ce:b8:c5:13:7d:59:e0:7c:92:be:1e:0c:49:
         f3:bc:84:13:bd:a6:ff:99:d6:37:67:55:27:b7:fd:7b:40:b5:
         ae:0e:a5:eb:67:55:b8:78:58:d6:68:a4:26:7f:94:4e:7f:ca:
         29:05:d9:4d:3a:e7:92:12:b9:5b:a1:ad:3c:86:b8:01:08:32:
         bf:e2:a2:2b:1b:aa:da:bf:bf:a8:d4:d1:7c:a3:bb:0b:32:84:
         70:32:17:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:14 2026 by rpki-client