Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa
File:                     3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa (raw, json)
Hash identifier:          12MbdS1C64Ud8PQuEiLk+HM/ZNezg9RLmfdKx3hOvbk=
Subject key identifier:   D3:7D:F4:31:A9:89:4B:93:71:C1:48:5B:9B:6D:66:29:3B:55:21:CC
Certificate issuer:       /CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
Certificate serial:       624AAEC358AAEEC7B3A723B2B078BBCC88078122
Authority key identifier: 40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa
Signing time:             Tue 06 Jan 2026 19:00:15 +0000
ROA not before:           Tue 06 Jan 2026 18:55:15 +0000
ROA not after:            Tue 05 Jan 2027 19:00:15 +0000
asID:                     14970
IP address blocks:        206.223.124.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 19:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4a:ae:c3:58:aa:ee:c7:b3:a7:23:b2:b0:78:bb:cc:88:07:81:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
        Validity
            Not Before: Jan  6 18:55:15 2026 GMT
            Not After : Jan  5 19:00:15 2027 GMT
        Subject: CN=D37DF431A9894B9371C1485B9B6D66293B5521CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:aa:93:f8:74:e5:df:67:60:59:6c:20:a2:
                    2f:08:f7:d2:ee:7a:5e:b4:e0:cd:df:0c:f5:74:05:
                    09:13:2d:f9:ce:4a:2f:5e:e5:b7:6d:60:99:c7:ce:
                    d3:dc:eb:cd:46:f2:4e:da:3a:35:be:28:63:ed:42:
                    88:63:cd:ab:44:9e:a2:1d:a8:a0:b4:a3:2f:d2:40:
                    ed:95:a5:d8:89:15:e8:f8:db:04:46:3b:df:50:89:
                    ad:31:6c:08:69:d5:76:14:b5:59:63:54:8a:de:f6:
                    00:0c:64:50:42:76:6c:31:04:4b:bb:02:61:8b:c9:
                    41:05:8b:ef:c8:fa:06:57:8f:f6:10:4d:11:40:02:
                    68:7e:a7:21:2d:04:a0:e9:9d:c4:cb:11:11:48:99:
                    c8:24:5c:50:45:b7:3b:a2:55:ea:8b:fc:c3:b1:a5:
                    2c:8a:c2:e9:a5:bd:4f:37:dd:4e:ce:23:e0:f6:ac:
                    74:19:83:c4:f9:97:c1:5c:d7:78:ea:74:91:0c:57:
                    44:af:9d:ea:a4:1d:0c:ec:d8:fa:87:e5:cf:e1:0a:
                    bf:f7:0a:0d:cd:90:91:12:d9:41:77:9c:a7:57:cd:
                    4e:4c:7e:31:7b:10:2d:fb:bf:0e:3c:f0:fd:3d:22:
                    70:f9:78:c1:cb:b9:7a:ba:b7:bf:2b:ba:12:ae:7b:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7D:F4:31:A9:89:4B:93:71:C1:48:5B:9B:6D:66:29:3B:55:21:CC
            X509v3 Authority Key Identifier:
                keyid:40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:8c:88:e3:71:52:5c:96:7a:4d:58:e0:76:14:fb:09:f2:19:
         a2:ab:36:90:e0:1b:61:4a:3f:f2:db:90:49:bc:20:c6:c3:9f:
         03:b5:b7:39:72:ce:3e:bb:f8:12:3c:e3:ec:90:d6:50:63:85:
         8a:87:ce:77:58:55:36:36:44:65:cd:04:94:8f:0f:e7:db:b2:
         9b:a6:22:39:c5:d9:c3:f1:be:01:80:20:17:06:32:9a:3c:f7:
         8f:e8:b3:b1:aa:d7:d3:da:0e:74:69:af:61:b0:7e:7c:2f:fc:
         18:1e:03:58:ba:41:20:ec:14:19:c1:f4:8c:9c:36:20:33:b5:
         43:4d:48:90:ca:ac:1d:98:58:53:da:17:91:a3:d8:37:d1:fc:
         59:84:17:96:33:af:b0:6d:20:f3:f1:45:0c:0e:f8:6f:c9:80:
         4e:7a:cc:12:95:d7:8a:10:88:c0:46:e2:3c:74:d5:b4:90:0a:
         85:14:ba:d0:42:0b:e4:a3:41:4b:9a:67:d9:2d:ea:64:7d:c0:
         c1:28:89:b0:27:21:27:9c:aa:4e:8e:1c:8f:7d:b0:cc:72:ab:
         24:b2:f1:c5:4a:8d:88:b0:05:a4:ba:86:f0:a5:73:f5:3a:11:
         f8:93:6c:c1:f3:46:a1:8a:71:ef:55:83:63:44:75:84:6e:76:
         24:11:24:84
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYkquw1iq7sezpyOysHi7zIgHgSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDQTZCOUZFRDRCNDM2RTYwMzIxQUNGRUQ2RjlBMzg0
NUZFOTNBMzAeFw0yNjAxMDYxODU1MTVaFw0yNzAxMDUxOTAwMTVaMDMxMTAvBgNV
BAMTKEQzN0RGNDMxQTk4OTRCOTM3MUMxNDg1QjlCNkQ2NjI5M0I1NTIxQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfUaqT+HTl32dgWWwgoi8I99Lu
el604M3fDPV0BQkTLfnOSi9e5bdtYJnHztPc681G8k7aOjW+KGPtQohjzatEnqId
qKC0oy/SQO2VpdiJFej42wRGO99Qia0xbAhp1XYUtVljVIre9gAMZFBCdmwxBEu7
AmGLyUEFi+/I+gZXj/YQTRFAAmh+pyEtBKDpncTLERFImcgkXFBFtzuiVeqL/MOx
pSyKwumlvU833U7OI+D2rHQZg8T5l8Fc13jqdJEMV0SvneqkHQzs2PqH5c/hCr/3
Cg3NkJES2UF3nKdXzU5MfjF7EC37vw488P09InD5eMHLuXq6t78ruhKuexsRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0330MamJS5NxwUhbm21mKTtVIcwwHwYDVR0j
BBgwFoAUQMprn+1LQ25gMhrP7W+aOEX+k6MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQUMzMTA0RkFGOUFEQkI3QkVCMDE4QjI0MUNDNTExODkz
MEVBQzEzQjU0MDY1REM0RkE3NzUwOTBFRjVFMjQ0LzAvNDBDQTZCOUZFRDRCNDM2
RTYwMzIxQUNGRUQ2RjlBMzg0NUZFOTNBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MENBNkI5RkVENEI0MzZFNjAz
MjFBQ0ZFRDZGOUEzODQ1RkU5M0EzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkFDMzEwNEZBRjlBREJCN0JFQjAxOEIyNDFDQzUxMTg5MzBFQUMxM0I1
NDA2NURDNEZBNzc1MDkwRUY1RTI0NC8wLzMyMzAzNjJlMzIzMjMzMmUzMTMyMzQy
ZTMwMmYzMjM0MmQzMjM1MjAzZDNlMjAzMTM0MzkzNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzt98
MA0GCSqGSIb3DQEBCwUAA4IBAQC9jIjjcVJclnpNWOB2FPsJ8hmiqzaQ4BthSj/y
25BJvCDGw58Dtbc5cs4+u/gSPOPskNZQY4WKh853WFU2NkRlzQSUjw/n27KbpiI5
xdnD8b4BgCAXBjKaPPeP6LOxqtfT2g50aa9hsH58L/wYHgNYukEg7BQZwfSMnDYg
M7VDTUiQyqwdmFhT2heRo9g30fxZhBeWM6+wbSDz8UUMDvhvyYBOeswSldeKEIjA
RuI8dNW0kAqFFLrQQgvko0FLmmfZLepkfcDBKImwJyEnnKpOjhyPfbDMcqsksvHF
So2IsAWkuobwpXP1OhH4k2zB80ahinHvVYNjRHWEbnYkESSE
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:21:22 2026 by rpki-client