Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3230302e31302e3230322e302f32342d3234203d3e2033353937.roa
File:                     3230302e31302e3230322e302f32342d3234203d3e2033353937.roa (raw, json)
Hash identifier:          E7oNCea50w2l9jZZ4VyBzrWagcXcGumG/jz9zGY9H2I=
Subject key identifier:   4E:BA:65:69:84:2D:8E:66:CA:26:A0:9F:2B:6E:E2:D8:DC:8A:97:30
Certificate issuer:       /CN=F5141320452E9DA4404C594445360E531655082A
Certificate serial:       0F635945BCF0354DA37B28E38E00CC621A60765D
Authority key identifier: F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3230302e31302e3230322e302f32342d3234203d3e2033353937.roa
Signing time:             Tue 06 Jan 2026 19:33:19 +0000
ROA not before:           Tue 06 Jan 2026 19:28:19 +0000
ROA not after:            Tue 05 Jan 2027 19:33:19 +0000
asID:                     3597
IP address blocks:        200.10.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:63:59:45:bc:f0:35:4d:a3:7b:28:e3:8e:00:cc:62:1a:60:76:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5141320452E9DA4404C594445360E531655082A
        Validity
            Not Before: Jan  6 19:28:19 2026 GMT
            Not After : Jan  5 19:33:19 2027 GMT
        Subject: CN=4EBA6569842D8E66CA26A09F2B6EE2D8DC8A9730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:20:cc:db:64:a5:65:a0:70:0b:23:8d:d7:b7:
                    56:23:69:59:83:c6:20:e4:15:d0:f8:ec:11:4e:ae:
                    a9:40:ef:aa:ee:38:52:60:86:a3:88:ae:e1:10:13:
                    43:e2:5d:a8:40:7d:13:6d:6e:ed:59:ea:69:4d:32:
                    89:ba:db:c5:62:7b:0f:34:20:9e:3e:0d:14:73:5a:
                    40:4e:44:14:13:34:5d:25:97:40:97:d8:8f:e8:ff:
                    fe:39:b8:b3:b8:16:cb:7c:9f:d0:79:5e:dd:9d:5f:
                    99:6a:70:79:98:80:ad:ad:e8:ce:82:50:bd:ac:94:
                    2e:ce:b3:3b:be:b3:85:a2:e4:2a:e5:d4:22:1d:5a:
                    86:e9:b7:6b:83:0f:de:14:fa:b2:48:9b:de:bb:47:
                    3b:08:a1:78:54:2d:9c:4f:71:46:06:17:0e:33:6d:
                    ba:c7:0f:ae:b7:c0:4e:4b:5e:2f:39:fd:b0:2b:a8:
                    2c:27:09:55:46:1f:be:1c:91:69:de:34:4d:11:96:
                    31:ff:ac:6b:51:0d:53:cd:c8:81:b4:9a:bc:df:0f:
                    60:e7:1e:52:5a:c7:09:d4:53:0f:88:77:b7:0e:7f:
                    78:d9:f3:d4:17:10:d8:46:db:9d:99:56:48:29:92:
                    fb:31:f4:af:27:3b:03:25:12:7f:f8:93:af:2a:fa:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BA:65:69:84:2D:8E:66:CA:26:A0:9F:2B:6E:E2:D8:DC:8A:97:30
            X509v3 Authority Key Identifier:
                keyid:F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3230302e31302e3230322e302f32342d3234203d3e2033353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:a6:6d:e2:f7:16:17:b4:21:6a:a2:6a:0e:4c:08:d4:cc:
         09:aa:77:e1:36:d7:d3:ae:33:3e:4a:95:07:ef:9a:8d:56:05:
         c9:b0:f0:f1:05:7f:0c:bc:bd:c8:6a:ad:45:1c:00:8c:f3:a0:
         7a:ef:82:bd:82:c3:65:00:42:7b:5f:d8:5d:ce:39:65:fd:22:
         1c:26:db:c9:3e:5a:f5:ef:21:7c:2b:92:a9:03:2a:c7:97:aa:
         a4:3a:b1:ba:54:d6:9e:6c:9d:48:fd:fc:fc:5c:36:d4:b5:3d:
         99:f4:7a:41:70:1b:ba:70:87:4b:20:7f:58:f7:a0:7c:fc:15:
         82:1c:d1:13:bd:e1:4a:c8:1f:35:e5:2e:ae:37:42:9b:a6:50:
         68:39:65:0c:32:15:cd:05:c5:e6:8a:41:db:6f:90:9b:f4:60:
         81:fa:45:6b:66:ac:85:55:9b:b7:60:a6:25:e7:52:20:84:8c:
         26:40:c0:8d:13:43:bc:1d:d3:31:e8:af:bf:77:21:95:83:ec:
         86:cf:3d:56:b3:a7:38:01:76:54:2c:9f:f1:9d:4c:a7:ca:b7:
         3e:8a:1e:07:54:1b:7b:ec:94:73:1f:6e:ab:6a:4e:bf:b5:76:
         8d:bf:ad:25:27:90:ea:20:86:86:07:f0:48:ed:a9:e2:03:c4:
         4a:bf:c7:42
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUD2NZRbzwNU2jeyjjjgDMYhpgdl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxNDEzMjA0NTJFOURBNDQwNEM1OTQ0NDUzNjBFNTMx
NjU1MDgyQTAeFw0yNjAxMDYxOTI4MTlaFw0yNzAxMDUxOTMzMTlaMDMxMTAvBgNV
BAMTKDRFQkE2NTY5ODQyRDhFNjZDQTI2QTA5RjJCNkVFMkQ4REM4QTk3MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpIMzbZKVloHALI43Xt1YjaVmD
xiDkFdD47BFOrqlA76ruOFJghqOIruEQE0PiXahAfRNtbu1Z6mlNMom628View80
IJ4+DRRzWkBORBQTNF0ll0CX2I/o//45uLO4Fst8n9B5Xt2dX5lqcHmYgK2t6M6C
UL2slC7Oszu+s4Wi5Crl1CIdWobpt2uDD94U+rJIm967RzsIoXhULZxPcUYGFw4z
bbrHD663wE5LXi85/bArqCwnCVVGH74ckWneNE0RljH/rGtRDVPNyIG0mrzfD2Dn
HlJaxwnUUw+Id7cOf3jZ89QXENhG252ZVkgpkvsx9K8nOwMlEn/4k68q+v09AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUTrplaYQtjmbKJqCfK27i2NyKlzAwHwYDVR0j
BBgwFoAU9RQTIEUunaRATFlERTYOUxZVCCowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzdGODEzQ0QxMDY2QkU3RjdDNDlCNjA2NTJFRDJDN0FD
RkVDODYzMjQ0M0E2MTlCOUE0N0JCRjI5NkU1NEU5LzAvRjUxNDEzMjA0NTJFOURB
NDQwNEM1OTQ0NDUzNjBFNTMxNjU1MDgyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTE0MTMyMDQ1MkU5REE0NDA0
QzU5NDQ0NTM2MEU1MzE2NTUwODJBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc3RjgxM0NEMTA2NkJFN0Y3QzQ5QjYwNjUyRUQyQzdBQ0ZFQzg2MzI0
NDNBNjE5QjlBNDdCQkYyOTZFNTRFOS8wLzMyMzAzMDJlMzEzMDJlMzIzMDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNTM5Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADICsowDQYJ
KoZIhvcNAQELBQADggEBAG2Qpm3i9xYXtCFqomoOTAjUzAmqd+E219OuMz5KlQfv
mo1WBcmw8PEFfwy8vchqrUUcAIzzoHrvgr2Cw2UAQntf2F3OOWX9Ihwm28k+WvXv
IXwrkqkDKseXqqQ6sbpU1p5snUj9/PxcNtS1PZn0ekFwG7pwh0sgf1j3oHz8FYIc
0RO94UrIHzXlLq43QpumUGg5ZQwyFc0FxeaKQdtvkJv0YIH6RWtmrIVVm7dgpiXn
UiCEjCZAwI0TQ7wd0zHor793IZWD7IbPPVazpzgBdlQsn/GdTKfKtz6KHgdUG3vs
lHMfbqtqTr+1do2/rSUnkOoghoYH8EjtqeIDxEq/x0I=
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:13:11 2026 by rpki-client