Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230382e302f32342d3234203d3e2037303837.roa
File:                     3230302e31332e3230382e302f32342d3234203d3e2037303837.roa (raw, json)
Hash identifier:          NBXsi0rcT3hyKo25DMBYRrRC4pITSjBs/irmqYA7EuQ=
Subject key identifier:   EA:2C:38:4A:3F:2B:32:5C:CA:A6:81:BB:95:EB:31:A8:E4:8D:3B:A5
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       2349F7A85DA256DF0437C09D237D0ED7E15095D8
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230382e302f32342d3234203d3e2037303837.roa
Signing time:             Thu 29 Jan 2026 14:10:00 +0000
ROA not before:           Thu 29 Jan 2026 14:05:00 +0000
ROA not after:            Thu 28 Jan 2027 14:10:00 +0000
asID:                     7087
IP address blocks:        200.13.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 01:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:49:f7:a8:5d:a2:56:df:04:37:c0:9d:23:7d:0e:d7:e1:50:95:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Jan 29 14:05:00 2026 GMT
            Not After : Jan 28 14:10:00 2027 GMT
        Subject: CN=EA2C384A3F2B325CCAA681BB95EB31A8E48D3BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:9a:d3:c8:94:d8:03:50:8a:fd:da:c5:fd:
                    45:13:dd:76:7f:c3:8a:97:d5:c8:af:58:73:e3:bb:
                    77:43:31:4d:27:fa:4f:f0:29:fe:04:b8:bf:d2:5b:
                    0c:ce:81:a0:8c:a6:d9:bc:59:7f:c9:21:ea:61:ba:
                    ee:ed:96:da:ff:4f:b7:bb:7f:3e:ac:df:86:34:3d:
                    57:e3:ac:c8:80:1a:9a:c8:c2:50:a6:9c:9a:b6:6f:
                    6d:0f:46:84:d3:14:d8:fe:37:23:39:d5:cd:da:2b:
                    08:db:22:c6:15:4f:b1:6c:ca:09:c2:c6:8e:25:6c:
                    51:2e:fa:85:dd:01:f2:f0:c0:54:78:d0:25:b4:6f:
                    d9:71:33:cf:b0:21:02:c7:4b:ce:65:a2:6f:18:2b:
                    44:c2:df:d8:d4:f2:3e:99:59:27:d5:47:59:a6:0c:
                    a1:a1:f6:85:3a:11:ae:4e:f2:48:d1:69:15:96:b1:
                    b1:bb:12:36:f7:6b:4e:6e:93:c7:7d:47:53:10:23:
                    d4:90:f1:7a:9e:46:5e:af:a7:e1:f1:07:d9:0f:0a:
                    bb:29:1e:15:5b:89:17:11:d7:05:66:43:39:07:88:
                    b9:aa:d3:1f:26:e5:25:52:f8:1c:05:b1:4d:b6:95:
                    98:3a:96:c0:86:45:dc:6e:b9:b3:ed:02:b7:88:1a:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2C:38:4A:3F:2B:32:5C:CA:A6:81:BB:95:EB:31:A8:E4:8D:3B:A5
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230382e302f32342d3234203d3e2037303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:41:ab:e2:e1:ce:58:b6:62:93:36:83:04:8e:0f:cb:2e:0b:
         03:ab:8c:07:14:81:58:db:85:a7:5c:69:67:a1:8b:46:44:34:
         f0:92:e6:55:5c:14:1c:1c:17:ff:6a:76:b4:7f:dd:ed:86:ea:
         0f:f1:48:4e:21:5c:43:14:6f:f5:9f:23:1c:e6:a9:4f:79:22:
         c9:05:77:77:d6:45:3d:38:ce:bd:bf:ae:a9:25:78:75:c7:7b:
         99:6b:f7:dc:ad:cd:09:5e:32:a1:d1:76:d2:dc:c5:1a:6b:43:
         b0:c8:49:c4:38:5a:db:b2:07:a3:f7:5a:20:e6:c1:f0:04:50:
         0d:7b:46:7d:e5:a3:57:52:ee:20:c2:87:ca:2b:73:df:44:96:
         89:ff:59:e7:8d:de:21:34:23:6e:39:1e:1b:b5:55:61:cd:e7:
         40:e1:74:cf:8b:8d:5a:94:b7:e9:da:97:04:5b:87:1e:07:5d:
         3f:bd:9b:b8:b2:f9:7c:78:ed:88:83:87:57:8c:99:14:8a:cf:
         54:8b:ef:bc:ab:dc:06:3f:6a:e5:cf:c7:5b:f6:f4:ab:f9:c1:
         4c:89:31:94:dd:d3:bd:28:07:28:94:a4:96:5f:cb:37:2b:d0:
         ff:90:60:3d:2a:c6:42:ae:a4:95:81:e0:f0:0a:7f:ca:f5:1c:
         57:63:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:10:21 2026 by rpki-client