Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e203131313732.roa
File:                     3230302e37362e3132382e302f31382d3234203d3e203131313732.roa (raw, json)
Hash identifier:          a/zSxd44s7zx4Xz7S0XDkahg+awLh8O7JSQ7yUfAKTw=
Subject key identifier:   57:09:BF:24:57:95:17:E1:79:B5:09:EA:71:FA:B9:9F:AF:28:E2:41
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       1A4CEE0887A99A9E1CE57185E3AC6453E470562D
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e203131313732.roa
Signing time:             Tue 06 Jan 2026 19:45:03 +0000
ROA not before:           Tue 06 Jan 2026 19:40:03 +0000
ROA not after:            Tue 05 Jan 2027 19:45:03 +0000
asID:                     11172
IP address blocks:        200.76.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4c:ee:08:87:a9:9a:9e:1c:e5:71:85:e3:ac:64:53:e4:70:56:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:03 2026 GMT
            Not After : Jan  5 19:45:03 2027 GMT
        Subject: CN=5709BF24579517E179B509EA71FAB99FAF28E241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:c7:30:08:83:86:b8:51:d9:5c:ce:81:22:
                    8a:24:28:f4:7d:f8:df:41:6e:86:05:09:82:06:2b:
                    5b:b4:6e:56:3c:f9:4b:23:27:55:dd:12:b2:fa:4f:
                    25:8d:51:e9:48:cb:4e:f2:46:81:05:c0:a2:ea:52:
                    da:1f:0e:72:7d:ea:19:8d:2b:a7:d5:15:d9:47:a0:
                    72:7d:4f:78:e6:f9:0a:ff:26:35:78:a8:fb:0e:e9:
                    66:14:e0:02:9f:77:20:a2:c0:aa:3a:4c:f2:0f:54:
                    8f:b9:78:e3:23:34:a3:64:ed:d6:02:e0:ab:97:c7:
                    31:87:73:9e:2e:4e:99:39:f6:23:bb:cf:13:05:9d:
                    bb:a2:9a:14:a4:7b:17:15:fd:ac:14:d5:93:be:1c:
                    22:e8:0b:b0:db:ea:62:63:eb:3b:6e:b0:11:9c:82:
                    ed:19:36:f3:cc:bb:77:50:05:a5:92:3d:79:9d:a0:
                    91:99:dc:e4:72:1a:ec:fc:ad:ba:74:1a:0c:a9:38:
                    8d:41:71:c2:da:0e:4a:c9:e4:aa:70:39:2d:32:d4:
                    d7:0c:91:fe:04:6c:c9:36:45:90:63:a9:ee:4a:b2:
                    b7:2e:b9:08:cc:88:ec:90:50:6e:d3:65:40:b7:18:
                    e6:ac:71:ab:e7:d9:1b:dd:3d:cb:58:1c:89:4e:9b:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:09:BF:24:57:95:17:E1:79:B5:09:EA:71:FA:B9:9F:AF:28:E2:41
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:a4:47:ee:4f:2e:9b:5d:9c:ee:e2:33:88:ff:02:ed:33:3a:
         a6:d4:e0:77:98:ab:31:d6:e7:d2:ca:e5:2c:c2:6d:ec:34:c1:
         ff:7c:1e:69:55:70:ad:8b:b1:6a:4d:b8:26:6e:30:00:84:c0:
         37:3f:9e:00:2e:03:2d:bb:a6:08:fb:32:84:c0:50:d5:f4:bb:
         3c:54:52:1d:06:0f:2f:c7:da:72:99:3e:2a:37:30:c9:14:bf:
         34:57:24:93:5d:e3:e0:70:43:be:56:50:37:30:83:eb:77:5d:
         b8:ca:d1:cd:6c:ec:88:b3:78:0a:09:79:f4:f7:06:e1:2c:2a:
         18:94:dc:05:36:5b:bc:71:bd:2a:94:05:c1:33:cd:ce:56:9a:
         39:c5:14:af:9e:67:02:33:93:86:54:f9:b4:f0:71:92:0c:bf:
         bf:40:a0:96:f8:10:30:b5:b2:72:73:a3:bf:39:c3:a3:bf:61:
         42:d2:67:b2:35:d0:2e:96:71:2c:de:06:70:b5:b1:13:47:f0:
         c1:df:fa:66:3f:48:67:26:65:fa:eb:1d:79:5b:a3:2a:1b:c1:
         53:7a:bb:54:3e:1c:59:b5:57:d2:61:0d:17:2c:d4:2e:90:b5:
         50:ad:cd:91:7b:e1:6d:71:40:06:cf:d9:91:3f:dc:59:4b:16:
         f2:c8:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:23:41 2026 by rpki-client