Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS202.roa
File:                     AS202.roa (raw, json)
Hash identifier:          LKzVJNHF6gQuDjCL3fCT3rn+7HjRThOS75NvUwbqnDY=
Subject key identifier:   F6:E4:5E:14:F3:60:18:FA:C4:BD:91:21:83:46:DF:01:C7:70:53:FA
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       24870C053ADFAA0DF010CC70071A68A10BB456B3
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS202.roa
Signing time:             Fri 10 Jul 2026 22:40:00 +0000
ROA not before:           Fri 10 Jul 2026 22:35:00 +0000
ROA not after:            Fri 09 Jul 2027 22:40:00 +0000
asID:                     202
IP address blocks:        190.216.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:87:0c:05:3a:df:aa:0d:f0:10:cc:70:07:1a:68:a1:0b:b4:56:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jul 10 22:35:00 2026 GMT
            Not After : Jul  9 22:40:00 2027 GMT
        Subject: CN=F6E45E14F36018FAC4BD91218346DF01C77053FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:75:36:18:22:78:d4:df:bc:05:3a:09:fc:40:
                    0f:86:87:db:e2:a5:27:ef:9f:cd:ff:dc:ff:a7:93:
                    40:86:8d:b2:83:63:ba:6a:be:28:30:e3:9c:a6:a4:
                    82:48:5f:a3:0c:93:f8:2b:ba:5b:9a:4b:c1:df:4f:
                    b8:6f:e5:44:68:80:7f:32:2b:52:3a:60:d5:c2:4c:
                    d7:01:fe:85:d8:a5:e6:cd:0a:f5:e8:32:09:30:48:
                    1b:cd:da:9c:9d:8c:61:ac:f4:50:41:d2:16:15:6c:
                    5c:a1:45:5c:b5:22:d7:65:36:da:13:63:e6:af:20:
                    f9:cd:55:86:56:82:30:83:9f:74:52:41:bd:f7:db:
                    61:b2:e6:f5:c0:66:26:4a:78:0a:87:48:27:93:3e:
                    56:f8:92:88:ad:f9:62:46:7b:b7:2a:0b:de:ab:bb:
                    7e:47:2f:c5:97:af:b6:a1:d5:61:32:cf:70:c5:85:
                    95:10:44:9a:62:eb:1a:80:66:98:d3:fb:33:8d:02:
                    ab:4c:9b:f6:a0:b7:73:d2:ea:63:ff:85:96:11:0b:
                    6a:01:08:ac:af:bd:46:cc:9a:38:43:09:34:b4:18:
                    93:f2:60:03:56:e0:9a:88:70:0d:a0:b3:ff:c6:40:
                    65:3c:01:57:fc:ff:c4:e8:b8:b3:e7:f4:68:a8:f0:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E4:5E:14:F3:60:18:FA:C4:BD:91:21:83:46:DF:01:C7:70:53:FA
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS202.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:e2:64:f2:12:23:ae:cf:01:7c:19:15:05:40:00:9b:01:20:
         9e:02:11:ce:62:9c:e1:9f:ce:e5:6c:f4:e6:f4:79:49:9e:9d:
         d7:16:90:34:c0:f9:e0:72:ca:95:c0:64:20:4e:e7:16:c3:cb:
         4d:88:5f:22:3a:e5:6d:66:1a:34:d4:74:d6:5d:16:45:d8:2b:
         c1:ba:ce:3b:21:23:d8:76:7a:85:64:0b:31:12:b1:34:2a:aa:
         9e:5f:a8:1f:df:87:3a:98:7d:e6:6b:cf:f6:0b:d9:a5:b0:d5:
         bd:c7:10:55:44:9a:04:88:c3:b8:45:ba:3a:26:ae:3e:85:84:
         e9:b6:e7:63:79:39:36:64:66:78:58:bf:41:cb:bf:cd:76:62:
         aa:8e:7a:06:82:c1:f2:2d:39:28:f6:4d:2a:25:88:21:e9:3d:
         9c:78:58:be:4e:9c:04:6f:ac:bd:17:1b:9b:56:a9:bd:da:97:
         25:36:e5:e3:4f:f7:e4:45:33:63:ef:3a:fd:ae:79:99:d3:53:
         6b:9f:0a:fd:50:8b:9a:f1:e6:83:b7:7d:08:59:58:ac:d8:57:
         96:2c:53:1d:ec:1f:50:4c:00:4f:2c:dc:fc:0d:92:dc:48:a1:
         8e:07:35:96:03:9a:cb:22:b1:95:fa:d6:56:b7:b2:3f:e4:9a:
         39:aa:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:00:14 2026 by rpki-client