Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137342e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3137342e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          LLVBpLu2pwCKGoIpzJ7J9U/Rd+rEOg0vU3fu24t9AAw=
Subject key identifier:   CB:D9:50:81:4E:55:A0:21:1B:71:98:CC:93:02:56:08:2C:BE:DE:B8
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       20B75268F00A6B29B3A02068C0FBAE6E85A1A08B
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137342e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 06 Jan 2026 20:50:47 +0000
ROA not before:           Tue 06 Jan 2026 20:45:47 +0000
ROA not after:            Tue 05 Jan 2027 20:50:47 +0000
asID:                     22541
IP address blocks:        200.75.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b7:52:68:f0:0a:6b:29:b3:a0:20:68:c0:fb:ae:6e:85:a1:a0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jan  6 20:45:47 2026 GMT
            Not After : Jan  5 20:50:47 2027 GMT
        Subject: CN=CBD950814E55A0211B7198CC930256082CBEDEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:2b:3c:e2:0b:10:fd:78:2b:69:ba:8e:1c:
                    8a:33:e9:ad:9b:24:3d:af:49:55:cd:7d:b9:7f:8f:
                    cb:35:05:d3:ca:21:fe:f5:a3:db:97:86:b8:58:9d:
                    a8:55:0a:ce:b7:de:90:24:21:e9:b3:b2:73:c7:28:
                    ee:95:7e:8f:04:d8:77:31:17:b9:6a:48:0e:f2:a1:
                    c1:0d:65:a2:ba:c9:ea:fb:3f:2a:ec:c8:0b:07:fd:
                    c1:45:60:7d:46:e2:48:c9:89:f8:00:e8:54:89:a6:
                    05:6e:14:22:36:56:a5:3b:42:20:ed:da:4f:db:cf:
                    ff:c7:86:0e:b9:c6:90:9a:2d:c2:04:46:9e:2d:73:
                    92:12:70:2e:0a:12:30:53:e2:72:6f:13:c9:40:9f:
                    ce:7b:60:8b:d7:f5:f6:59:fc:28:36:a6:9c:cb:0c:
                    96:63:bf:25:d8:0a:df:c2:e2:02:79:72:79:91:da:
                    53:fc:cb:fc:90:a4:3a:68:bd:05:e0:9b:bd:b7:51:
                    74:96:e1:e4:08:95:14:ab:86:31:d0:c0:15:9e:aa:
                    3f:03:32:e9:af:06:db:7d:fe:20:5a:3a:da:12:58:
                    87:fb:6a:12:16:ea:31:b7:61:8f:c5:1c:43:29:f6:
                    7a:df:09:fe:88:18:c5:04:5c:cc:21:9c:54:6c:75:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:50:81:4E:55:A0:21:1B:71:98:CC:93:02:56:08:2C:BE:DE:B8
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137342e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5d:cf:60:5b:9e:57:e8:24:d2:a5:65:f1:06:56:38:9d:fc:
         13:ad:d8:26:96:4f:5e:d8:9a:fe:1b:64:06:68:51:b6:c5:c7:
         69:24:3c:9b:06:d1:e7:dd:36:bd:95:e1:6c:7d:6b:fb:a6:3c:
         88:26:e4:72:3d:b5:b9:0d:fd:a4:a6:7b:b0:04:0e:4a:06:27:
         03:36:31:56:88:1e:7b:ab:7e:56:76:f7:65:1a:c6:14:10:3d:
         bc:5f:f6:40:00:f9:c3:f5:2c:16:d5:31:9a:7a:e1:f2:80:9a:
         ce:3b:df:3f:16:9d:20:f6:04:57:66:64:33:88:f2:11:9e:45:
         6f:91:dd:86:75:84:14:e7:02:c6:4a:ef:e1:be:a8:43:38:b9:
         5a:0b:64:8c:4b:06:e5:9a:9f:32:f5:97:b0:90:3e:78:29:47:
         9a:69:76:f4:70:f1:48:31:3c:88:a1:38:32:04:c6:16:e8:a5:
         fd:53:6a:12:08:e9:ae:d3:68:55:90:d2:00:73:e1:26:26:12:
         5f:b0:18:e3:fb:7d:49:fa:96:ee:55:dc:25:e8:3e:e5:11:eb:
         69:11:13:2c:a7:24:0d:97:2f:45:a1:d6:58:18:53:05:89:d2:
         d4:07:81:f7:88:00:b6:b3:5f:fb:66:9d:57:36:2e:d4:12:43:
         72:ed:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:44:13 2026 by rpki-client