Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232342e302f31392d3234203d3e203134313837.roa
File:                     3230302e38352e3232342e302f31392d3234203d3e203134313837.roa (raw, json)
Hash identifier:          uzoj1x7HZoNlivrGEq9jfEClPyTd66g04g9mBH4CZ/M=
Subject key identifier:   66:B6:90:1C:20:45:74:40:55:2E:32:2B:FC:13:8A:43:E8:97:A3:EA
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       53D575A899B71F1ECD6467A56E16676BBEB4C328
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232342e302f31392d3234203d3e203134313837.roa
Signing time:             Tue 27 Jan 2026 20:27:53 +0000
ROA not before:           Tue 27 Jan 2026 20:22:53 +0000
ROA not after:            Tue 26 Jan 2027 20:27:53 +0000
asID:                     14187
IP address blocks:        200.85.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d5:75:a8:99:b7:1f:1e:cd:64:67:a5:6e:16:67:6b:be:b4:c3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Jan 27 20:22:53 2026 GMT
            Not After : Jan 26 20:27:53 2027 GMT
        Subject: CN=66B6901C20457440552E322BFC138A43E897A3EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:76:25:ad:51:d7:12:53:11:8e:08:0e:d2:
                    a6:77:64:fe:bd:f1:11:1a:6a:1f:1f:00:dd:47:0b:
                    d4:d0:31:b3:82:04:14:a6:59:12:f5:9a:a5:ba:6d:
                    95:10:ea:78:2b:58:e7:93:aa:9b:94:70:3c:48:c5:
                    62:b5:86:16:8e:5e:b2:83:d5:3c:3f:c6:a9:42:e8:
                    05:71:b7:33:d3:60:e9:99:c2:9d:87:f7:34:2c:6a:
                    2d:af:a1:de:b0:1d:fc:96:41:41:1a:92:b9:e9:cb:
                    4b:06:21:26:a3:28:36:bc:2c:e9:9c:1b:d4:55:5d:
                    ed:7d:0c:87:0e:38:7e:99:53:c6:be:ca:15:ea:58:
                    62:c3:12:c7:64:c0:86:7d:31:75:ce:7f:16:33:74:
                    d8:fd:7f:ab:cf:c2:6b:e6:68:71:44:f4:6d:d4:56:
                    94:3b:79:a2:8a:de:79:de:6a:b0:ac:79:86:fc:40:
                    49:3a:d9:72:0b:c9:80:77:3c:47:93:ea:cd:69:12:
                    8d:a2:de:a6:77:13:50:9e:c1:a1:bd:f0:90:4a:b1:
                    29:12:7a:26:9b:fe:4b:dc:08:6b:33:af:bf:14:b6:
                    7e:48:cb:2f:08:78:b4:dd:0b:85:b6:47:3d:c6:f1:
                    b8:00:65:9f:93:47:7f:a6:fa:ce:fd:76:08:8c:a8:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B6:90:1C:20:45:74:40:55:2E:32:2B:FC:13:8A:43:E8:97:A3:EA
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232342e302f31392d3234203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:7b:68:14:ba:ee:69:e7:9e:3d:96:dc:7c:90:4d:6c:cc:78:
         f6:a3:ed:d7:24:c1:77:7a:e9:2e:0d:6a:51:5d:79:1d:38:b2:
         0f:f6:9e:92:28:c2:99:71:d9:b0:37:ec:f3:0f:2c:91:81:99:
         08:25:04:be:c8:41:f9:24:5d:95:76:43:44:95:9e:d6:c7:35:
         d2:be:bf:b4:52:2f:67:11:db:25:e3:fe:9e:94:ae:e9:d3:7c:
         07:b4:af:7b:90:3b:33:8d:4a:fa:83:03:99:9b:06:7a:9d:1b:
         4b:47:f3:a2:6b:92:48:37:51:e2:68:3a:eb:09:b3:27:c0:e0:
         fe:ff:4e:22:51:54:41:20:b0:65:77:f0:e4:95:66:68:32:b0:
         56:66:fe:0d:4c:74:04:11:62:cb:2c:e3:4d:e7:69:5a:a9:25:
         06:94:d0:a8:64:4d:cc:ec:3c:e0:bf:1f:97:0d:c7:7d:4d:51:
         da:d6:ca:83:aa:7c:bf:56:a7:35:90:69:fd:4a:1b:d2:f8:ee:
         95:1f:b9:82:43:ea:24:a1:7a:cf:77:d4:eb:f5:72:ae:d5:67:
         bf:30:7c:96:5d:08:83:29:ff:72:35:fd:d2:7e:04:75:55:11:
         c7:aa:de:08:51:85:b6:5b:d5:64:da:24:b3:d9:80:c8:4d:46:
         61:6e:54:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:51:00 2026 by rpki-client