Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa
File:                     3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa (raw, json)
Hash identifier:          qf9Wic7KRgHWsX86ALafhwuK2fdmrMkTEaIq+7Wagbc=
Subject key identifier:   B1:3D:97:38:8B:CC:B1:7E:9F:74:9E:2A:4B:36:9C:58:B9:10:FA:E6
Certificate issuer:       /CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
Certificate serial:       775B6A4DF5A7BB52D9BF9C532CA0052FC9363DC3
Authority key identifier: C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa
Signing time:             Tue 06 Jan 2026 19:17:04 +0000
ROA not before:           Tue 06 Jan 2026 19:12:04 +0000
ROA not after:            Tue 05 Jan 2027 19:17:04 +0000
asID:                     265804
IP address blocks:        200.63.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5b:6a:4d:f5:a7:bb:52:d9:bf:9c:53:2c:a0:05:2f:c9:36:3d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C2BFCD31963331C71B49F490477E8264BA55D7
        Validity
            Not Before: Jan  6 19:12:04 2026 GMT
            Not After : Jan  5 19:17:04 2027 GMT
        Subject: CN=B13D97388BCCB17E9F749E2A4B369C58B910FAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:29:17:99:f8:29:f0:cc:f9:e4:80:1e:07:
                    de:47:bb:ee:d1:1e:e4:7d:75:9f:f8:c1:b6:13:6c:
                    21:0a:19:75:52:a1:88:05:6b:3e:0d:03:c4:02:c2:
                    5c:2a:56:d5:63:13:fb:50:e8:f7:1f:84:b5:dc:b5:
                    70:85:c3:64:42:17:35:d1:ed:36:b4:1c:78:f8:87:
                    fc:b3:10:3c:89:04:37:bc:0b:0f:fd:a9:78:15:3b:
                    de:41:7b:1e:05:99:43:fe:38:c7:3b:a2:b4:8a:e2:
                    ed:55:f0:f7:a6:3f:e0:fb:34:0e:a9:e4:96:20:58:
                    3f:2b:f6:e9:ec:75:9a:7d:3a:9c:40:ef:9f:91:7c:
                    39:70:03:cc:99:49:f7:05:d6:3c:57:1d:af:0b:69:
                    8e:d4:5c:9f:96:40:e0:1d:3b:1d:02:b5:66:67:a2:
                    9e:04:7b:bd:7a:2d:d0:62:31:c4:41:12:22:e4:db:
                    79:0d:30:ba:bd:72:58:a4:77:1a:50:b9:e2:21:8a:
                    f0:e1:69:8b:0d:e0:ea:2a:6f:59:35:24:2a:f1:6f:
                    84:64:ab:ab:c0:30:a3:18:5b:86:aa:24:be:b1:da:
                    ec:18:86:9e:26:26:77:f3:c7:7d:11:59:89:09:0c:
                    8b:3e:45:7b:d1:a0:8a:65:e5:ca:a3:ae:97:86:b7:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:97:38:8B:CC:B1:7E:9F:74:9E:2A:4B:36:9C:58:B9:10:FA:E6
            X509v3 Authority Key Identifier:
                keyid:C7:C2:BF:CD:31:96:33:31:C7:1B:49:F4:90:47:7E:82:64:BA:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7C2BFCD31963331C71B49F490477E8264BA55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC4B730DC40BBBA5F89078CDA0F2CA07F1CCF55DC8235EE0A118E7BA573A5A24/0/3230302e36332e3130382e302f32322d3234203d3e20323635383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:23:4d:fa:73:7c:93:da:12:f7:d3:f7:24:43:b2:e0:6b:0c:
         62:53:54:f1:5b:69:25:04:b4:d7:93:9d:29:5e:49:d7:0d:8b:
         b8:e9:e6:24:dd:e8:33:cb:a6:7a:dc:35:a4:31:31:39:9f:55:
         e0:f6:56:a4:4b:9a:7d:2f:5e:46:aa:4f:7f:0b:fd:04:15:e8:
         29:13:7c:17:a2:78:18:8c:bd:fc:0d:93:bd:3d:4f:c5:71:8a:
         de:5c:04:b1:3b:ae:c1:31:a6:ee:ca:70:4c:88:d1:97:6a:f3:
         0a:70:bd:26:30:38:e5:d8:54:ea:ca:b1:5e:18:c8:28:e3:a2:
         c8:4f:ab:9f:64:ff:6b:3e:18:39:c1:b7:10:0b:50:55:62:c7:
         93:27:82:41:9a:e1:de:7f:be:65:5d:19:e5:5c:b0:7b:34:61:
         36:51:32:b9:57:89:db:69:84:cc:f2:a1:0d:ec:3d:7c:94:0d:
         51:10:ed:a1:11:75:0e:73:1b:5c:34:94:cd:5c:66:3d:c5:a2:
         b8:96:d9:c6:1d:23:96:3e:e8:a9:94:10:88:9a:4b:a5:0b:46:
         3a:4e:f8:22:43:a5:7d:8c:cd:96:38:03:8e:b9:e9:92:ae:72:
         4d:f2:08:d5:65:de:c9:24:1c:e7:75:23:e7:e5:ac:ce:1b:87:
         99:d5:a8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:37 2026 by rpki-client