Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS203.roa
File:                     AS203.roa (raw, json)
Hash identifier:          VwZ2NRNjhqdzv/03lO5iPZtI4LiN256R4cMFg/S4Uxs=
Subject key identifier:   41:50:C6:02:4C:53:88:E3:CC:71:AA:F5:0B:0A:93:73:A8:1E:31:80
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       74529FAA065810329CB3FBB6E4A8AB0F4A16B7B1
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS203.roa
Signing time:             Fri 10 Jul 2026 22:40:00 +0000
ROA not before:           Fri 10 Jul 2026 22:35:00 +0000
ROA not after:            Fri 09 Jul 2027 22:40:00 +0000
asID:                     203
IP address blocks:        190.216.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:52:9f:aa:06:58:10:32:9c:b3:fb:b6:e4:a8:ab:0f:4a:16:b7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jul 10 22:35:00 2026 GMT
            Not After : Jul  9 22:40:00 2027 GMT
        Subject: CN=4150C6024C5388E3CC71AAF50B0A9373A81E3180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:89:ca:6a:70:10:ac:58:00:54:d4:16:0c:
                    8a:97:f6:eb:a3:01:bc:4d:70:5f:b6:ee:a1:2e:f8:
                    ce:d2:02:47:37:d9:29:04:4e:11:70:20:24:99:59:
                    41:bd:01:90:49:18:89:bf:72:be:1e:c4:95:21:9e:
                    d6:68:55:2b:91:bb:3f:ee:c3:5c:b8:da:e9:e2:9d:
                    75:a0:95:0e:33:f0:e1:5b:15:7a:fe:47:01:2b:30:
                    fe:03:d7:ab:60:84:8b:d9:26:ad:4e:22:2b:33:3b:
                    8f:00:47:6d:48:09:85:22:ec:79:b8:b0:ee:43:8f:
                    48:74:b1:0a:a1:69:36:77:04:67:41:88:af:a2:39:
                    3b:a9:9d:13:f0:26:23:49:23:cf:93:b8:73:76:b7:
                    11:2d:20:41:90:e1:81:d2:d1:3a:a5:f5:28:0c:e0:
                    ee:20:3b:a5:06:89:fa:5c:d0:49:7b:78:e9:d5:2b:
                    c0:e9:86:a9:3d:a0:76:56:52:bc:f3:f3:64:92:69:
                    b5:02:4e:d5:6f:90:88:c2:fc:f0:df:6e:15:2d:8e:
                    8c:25:c1:13:17:ff:66:8a:1f:a7:1c:25:50:d6:f6:
                    fa:55:43:29:77:d6:57:f9:53:75:b2:0d:59:f2:5a:
                    10:3c:7f:b4:1d:c3:da:49:a7:d9:4c:7f:18:4c:00:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:50:C6:02:4C:53:88:E3:CC:71:AA:F5:0B:0A:93:73:A8:1E:31:80
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS203.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e9:f0:54:bf:c0:ab:c7:c4:92:79:16:ec:61:e1:67:16:66:
         77:95:cc:a1:89:8e:3f:19:8e:55:a9:3f:c1:9f:88:15:4b:64:
         d8:fd:13:a5:d9:a8:2e:e3:89:13:5b:54:1d:14:c4:97:aa:f8:
         30:04:07:18:26:23:60:df:d5:34:2a:e8:a6:88:c8:1d:dd:0a:
         1b:19:42:80:6f:4c:b5:fb:6a:16:72:a3:9e:00:11:47:4d:7a:
         e2:c3:0d:ec:2f:0b:d5:52:32:e0:e4:08:4f:b6:28:66:61:b3:
         df:b5:21:f7:1d:20:17:36:91:09:24:61:08:f0:4e:2d:77:a3:
         35:58:de:23:89:e7:c4:7d:6f:f5:0b:4d:0b:17:3f:14:2c:8f:
         38:a5:24:c7:03:c4:9a:55:33:37:8b:19:8c:49:c6:da:ea:cf:
         8b:bd:a6:32:11:0d:16:e1:db:9b:6c:1f:69:1f:05:a0:fd:d7:
         33:d1:9f:47:31:ac:de:16:3d:f2:33:09:68:36:7e:f6:c2:9e:
         2b:3a:4f:cb:f5:f5:a4:6a:b8:41:ca:91:57:e6:93:9b:18:2b:
         16:b8:fb:36:38:13:a5:74:40:88:c8:c2:cd:70:9d:6a:ff:39:
         53:19:6a:10:42:75:8d:13:90:4d:5f:93:68:8a:5e:60:0e:3b:
         cf:f7:a9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:00:20 2026 by rpki-client