Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36302e302f32342d3234203d3e203532323234.roa
File:                     3230302e31302e36302e302f32342d3234203d3e203532323234.roa (raw, json)
Hash identifier:          MzO2wzlROR5B/ZT6W7gKRGSsNFM85gXuPc3sGsxKg+g=
Subject key identifier:   E0:11:82:1D:97:94:96:D7:E4:8C:73:CF:3B:C0:C2:95:FA:69:57:F5
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       45F21AE8AC30971700154ADF8468631014EB85EC
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36302e302f32342d3234203d3e203532323234.roa
Signing time:             Tue 06 Jan 2026 19:15:30 +0000
ROA not before:           Tue 06 Jan 2026 19:10:30 +0000
ROA not after:            Tue 05 Jan 2027 19:15:30 +0000
asID:                     52224
IP address blocks:        200.10.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f2:1a:e8:ac:30:97:17:00:15:4a:df:84:68:63:10:14:eb:85:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:30 2026 GMT
            Not After : Jan  5 19:15:30 2027 GMT
        Subject: CN=E011821D979496D7E48C73CF3BC0C295FA6957F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:66:ef:e8:1a:cb:79:2e:45:64:79:58:87:
                    98:f4:30:80:f5:c2:eb:3a:36:65:cc:88:2f:07:a9:
                    8a:39:18:0a:4c:f9:7c:c1:3c:3a:ee:66:a5:95:33:
                    95:69:94:bb:cf:73:09:72:51:3b:4e:f1:03:84:4a:
                    4c:19:48:4a:5a:6b:be:7e:7e:2f:29:a3:9f:d5:3f:
                    ed:d8:de:61:a9:37:23:1f:b1:02:b0:d1:cb:a4:3c:
                    6e:2e:b3:28:59:a3:75:5e:09:68:95:c7:5b:60:7f:
                    de:3a:1b:4a:f8:6a:1f:17:2f:1b:69:04:f4:9d:4e:
                    7e:89:f5:4d:18:17:c6:3c:2d:6b:a3:77:cb:bb:c1:
                    5f:78:00:b3:47:aa:61:ee:63:1c:c4:3d:1d:d8:e8:
                    1d:ec:66:de:e4:c4:a8:5e:46:9b:6d:ac:2b:1b:ca:
                    08:97:ba:ef:d1:40:73:3f:da:18:cb:57:77:fc:61:
                    e1:3a:38:fb:7f:33:21:ac:68:87:a2:e8:23:c0:e6:
                    7c:aa:29:af:5a:de:45:96:2a:22:95:f0:ea:70:04:
                    7f:f5:b1:de:0c:de:55:eb:42:22:fe:e1:a8:62:9d:
                    5c:45:ff:bf:5b:b1:7b:2a:e6:b4:32:25:b8:6a:dd:
                    56:61:fb:c4:0a:38:a8:e1:66:fd:da:1b:b2:aa:64:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:11:82:1D:97:94:96:D7:E4:8C:73:CF:3B:C0:C2:95:FA:69:57:F5
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36302e302f32342d3234203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:b8:20:7f:6b:80:88:b4:93:18:8f:57:1b:89:8e:82:f4:
         38:2f:1f:13:3d:ea:42:af:80:9d:b4:1b:6b:64:03:15:21:b5:
         45:25:64:8a:23:29:51:70:d7:7d:d2:e6:42:f1:6a:7d:8a:a4:
         4c:40:e3:81:9a:bb:d7:94:e5:4b:a7:64:3a:fa:26:6a:26:5b:
         53:2a:3f:dd:91:f7:7f:bd:60:94:dc:de:8a:7f:ed:f9:40:0d:
         d8:f1:74:31:83:5a:fc:78:02:64:a0:29:25:ad:f0:1d:54:dc:
         fa:46:9c:17:5c:e1:91:06:7f:38:63:da:a3:69:42:56:e6:3b:
         ab:bf:39:29:88:e4:4b:49:63:23:9d:56:bc:6f:ae:c0:6a:73:
         ab:62:a7:fb:1c:42:04:d5:7c:08:61:31:3d:81:72:07:9d:1c:
         5e:b4:61:e1:2c:b7:55:d7:a5:3e:41:44:f6:7f:c7:94:dc:98:
         5c:17:b9:d9:1c:5c:b2:da:76:f7:37:24:a1:3b:4b:2c:56:0c:
         b0:72:3f:af:db:74:be:96:22:95:9b:bf:d0:28:ef:3d:60:56:
         de:c0:50:50:cb:a6:46:00:91:f4:62:04:e6:f1:d4:19:e5:47:
         63:b0:7c:e1:07:45:69:81:1f:29:5d:63:ba:6e:40:4c:9c:a7:
         e1:89:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:07:52 2026 by rpki-client