Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139362e302f32342d3234203d3e203134363138.roa
File:                     3230302e31322e3139362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          dMc3gSBXWCOSOILDh+w8JbNzRfImslgtDuUur0U6rio=
Subject key identifier:   B7:D8:DA:0F:25:D4:AA:34:54:8F:00:75:FD:8F:CB:54:BE:99:7A:F3
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       12FBC4CCBAE50FC22EA45551E30EE838A749B9C4
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139362e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 06 Jan 2026 19:03:21 +0000
ROA not before:           Tue 06 Jan 2026 18:58:21 +0000
ROA not after:            Tue 05 Jan 2027 19:03:21 +0000
asID:                     14618
IP address blocks:        200.12.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fb:c4:cc:ba:e5:0f:c2:2e:a4:55:51:e3:0e:e8:38:a7:49:b9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Jan  6 18:58:21 2026 GMT
            Not After : Jan  5 19:03:21 2027 GMT
        Subject: CN=B7D8DA0F25D4AA34548F0075FD8FCB54BE997AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:4a:80:77:df:a4:d3:03:6e:55:c8:ab:d4:
                    29:47:f1:70:4b:5b:0a:24:2b:80:7d:ac:e2:21:94:
                    e5:4e:5d:3b:b2:48:1c:d0:a1:2e:59:28:12:55:59:
                    61:c8:1b:ea:cc:e4:a8:9d:e4:2c:23:1d:76:ca:cc:
                    a0:d9:77:89:31:0c:cb:44:c2:6d:c6:9f:8a:c8:b9:
                    ad:a0:02:7b:c6:a8:5f:32:21:e5:11:eb:65:32:7f:
                    39:c4:37:e7:b8:e2:61:0a:9e:a8:52:94:94:2d:d0:
                    96:03:0d:b0:ff:91:e1:66:3d:2b:07:16:75:2c:3a:
                    06:11:72:db:75:9c:24:00:9f:36:9e:fa:7f:4f:f3:
                    34:e6:62:fe:ab:29:e2:37:e9:a6:b8:40:ce:e7:25:
                    ff:8b:e7:ad:cc:4a:b6:11:8f:ed:1e:3a:71:9c:74:
                    6d:0a:51:78:bc:f0:41:b1:5c:cc:4e:d9:df:96:f3:
                    6e:c6:54:62:02:65:58:6a:aa:a7:7f:a8:ca:25:ba:
                    7d:4a:ec:1a:a7:9d:ad:bb:45:ee:1d:f4:f0:37:e2:
                    75:56:e2:c8:72:58:b9:84:de:a5:07:5a:f3:b1:29:
                    b5:89:a5:2d:e3:d1:78:ff:6d:5c:b6:ec:4c:87:37:
                    66:30:12:aa:3e:bf:8f:29:af:ae:a2:0b:4e:de:70:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D8:DA:0F:25:D4:AA:34:54:8F:00:75:FD:8F:CB:54:BE:99:7A:F3
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139362e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a1:87:24:1d:ea:da:25:08:ad:59:d0:d2:50:bc:fe:a3:4e:
         b6:c2:0d:95:86:38:85:59:9a:df:1b:2f:f0:ce:b7:ad:d0:50:
         11:b9:cb:8a:9a:75:9a:7f:28:a2:39:66:48:2a:ff:54:04:c8:
         32:16:e8:f4:36:7b:d3:6a:6b:ce:46:ca:04:e1:2c:73:71:f9:
         57:84:ec:a6:32:e3:ac:dd:2d:b2:29:55:40:4f:4c:71:47:6f:
         62:d7:4e:21:64:fd:95:3a:05:ba:2c:17:a3:cc:8c:ce:51:9f:
         5a:52:a9:2a:bd:02:e2:74:4a:39:2d:31:57:9c:00:1c:eb:cf:
         cc:9c:b8:94:73:88:f9:45:d0:d8:52:b4:ed:6b:19:b5:ce:10:
         59:85:f8:11:a8:84:4a:fd:e3:4c:a1:3f:60:32:1a:b3:78:dd:
         44:3e:4c:a9:92:90:1c:08:bc:a3:ce:4d:ed:77:e4:ce:fc:23:
         f7:08:61:eb:37:e3:a7:7f:8e:8e:56:dc:5c:ed:1a:8e:5e:49:
         60:0c:d1:fd:85:b4:03:5c:45:26:2d:e9:79:b7:00:e9:23:a6:
         3f:5e:56:cf:9e:8e:04:58:da:cb:77:ff:54:a1:49:7e:9e:8d:
         32:30:42:a1:3d:97:6b:3f:e4:5e:2f:fd:d9:6e:4a:70:e0:5e:
         11:c9:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:41:36 2026 by rpki-client