Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20383334.roa
File:                     3230302e32362e3138352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          HrnpI89agjhZLqFkhBHIIUmgVadXh9XVP/cl49tMNhk=
Subject key identifier:   4E:FC:CB:43:DA:CA:F6:31:C3:B8:39:C5:F1:D1:D5:BF:4B:DC:10:A4
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       50F70566D956345FC293D0B61DC59AAF436E03ED
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20383334.roa
Signing time:             Tue 16 Jun 2026 15:40:00 +0000
ROA not before:           Tue 16 Jun 2026 15:35:00 +0000
ROA not after:            Tue 15 Jun 2027 15:40:00 +0000
asID:                     834
IP address blocks:        200.26.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 02 Jul 2026 11:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f7:05:66:d9:56:34:5f:c2:93:d0:b6:1d:c5:9a:af:43:6e:03:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Jun 16 15:35:00 2026 GMT
            Not After : Jun 15 15:40:00 2027 GMT
        Subject: CN=4EFCCB43DACAF631C3B839C5F1D1D5BF4BDC10A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:f7:4a:ca:4d:6e:af:49:1a:5d:a7:34:62:
                    b1:40:cf:5a:2b:97:81:9b:80:2f:4e:93:a1:5f:e4:
                    81:c1:cc:d2:8d:e5:4e:15:6a:d3:2c:da:43:59:c5:
                    09:1b:9e:0d:7e:72:34:35:6f:68:71:9a:ac:2d:2b:
                    5b:6e:93:04:6b:37:7b:b7:d2:06:5e:4a:5a:8d:76:
                    28:c8:c7:c5:3d:c4:82:88:f6:eb:ba:90:74:ec:3d:
                    be:d1:5d:2b:54:14:0e:b9:d3:55:e9:69:9e:94:f0:
                    42:99:58:b7:8c:38:88:ff:14:51:66:43:c1:17:6e:
                    3a:7f:61:8b:56:0d:0b:28:42:37:a6:10:e8:9d:71:
                    4d:61:ee:a5:fe:ce:b6:7e:99:ad:bf:fa:78:e4:84:
                    da:58:95:cb:23:bd:9c:d3:70:db:27:fb:ee:46:f7:
                    41:7a:26:cd:ff:27:2b:d7:a0:3a:0a:7b:7a:41:0b:
                    23:87:ee:de:35:22:c1:d7:94:92:14:7b:54:0e:a5:
                    f8:58:5a:0f:98:96:ad:8f:b8:c0:12:38:2c:d6:ab:
                    81:b2:3a:ad:ac:75:18:14:72:85:00:8a:b7:f2:cb:
                    97:40:a6:b2:e7:37:ee:82:29:b9:f4:94:f5:24:7f:
                    38:1f:c6:ba:f7:1e:3b:a7:02:5d:4e:7a:c8:20:66:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FC:CB:43:DA:CA:F6:31:C3:B8:39:C5:F1:D1:D5:BF:4B:DC:10:A4
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:df:da:23:bf:04:16:b4:46:3d:a9:d5:9d:2c:83:4d:ca:47:
         b1:ce:ca:45:be:5c:2f:e5:29:3b:b7:c3:3d:b8:df:df:be:be:
         1d:07:4a:e2:48:46:bc:3e:81:98:6e:48:e8:3b:68:52:a8:0f:
         c9:fa:eb:82:57:00:fd:4f:a0:b0:2f:ab:de:3f:97:25:34:c2:
         e9:8f:b7:87:93:09:b3:1c:72:aa:33:40:bd:0d:d5:4d:a4:35:
         7f:72:88:f2:75:c8:e5:a4:29:83:8d:7c:9a:61:f1:a8:4a:d1:
         da:00:d5:91:39:9d:fb:7d:2c:f1:52:44:b1:16:7a:70:82:57:
         de:6b:6a:01:64:5a:70:6b:5a:98:cb:02:a7:29:d5:1d:84:94:
         a9:45:85:58:da:4d:cf:ea:6e:32:d7:4f:cd:17:26:2f:16:83:
         b9:eb:93:e3:f0:1a:e0:d5:9c:4e:d7:d6:fa:8c:f3:a1:87:1c:
         a0:49:f8:d0:27:54:89:9f:42:f7:79:d0:b0:bb:64:b2:0f:66:
         a8:f0:98:82:2d:83:cd:44:1e:ff:7d:cc:f5:57:c3:5c:6c:6a:
         5c:5a:d3:b5:ee:2b:e9:cb:55:0c:a9:46:11:64:59:f9:61:ee:
         7d:ae:ce:09:4b:1b:ee:33:73:09:fe:ea:d7:e2:82:3d:f7:65:
         02:0c:bb:a4
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUUPcFZtlWNF/Ck9C2HcWar0NuA+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDNzlCRDNENEFDRTc4OTU4MzZCNUU0MkU2RTVCNUY2
Q0E1NTk5NDAeFw0yNjA2MTYxNTM1MDBaFw0yNzA2MTUxNTQwMDBaMDMxMTAvBgNV
BAMTKDRFRkNDQjQzREFDQUY2MzFDM0I4MzlDNUYxRDFENUJGNEJEQzEwQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgivdKyk1ur0kaXac0YrFAz1or
l4GbgC9Ok6Ff5IHBzNKN5U4VatMs2kNZxQkbng1+cjQ1b2hxmqwtK1tukwRrN3u3
0gZeSlqNdijIx8U9xIKI9uu6kHTsPb7RXStUFA6501XpaZ6U8EKZWLeMOIj/FFFm
Q8EXbjp/YYtWDQsoQjemEOidcU1h7qX+zrZ+ma2/+njkhNpYlcsjvZzTcNsn++5G
90F6Js3/JyvXoDoKe3pBCyOH7t41IsHXlJIUe1QOpfhYWg+Ylq2PuMASOCzWq4Gy
Oq2sdRgUcoUAirfyy5dAprLnN+6CKbn0lPUkfzgfxrr3HjunAl1OesggZr07AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUTvzLQ9rK9jHDuDnF8dHVv0vcEKQwHwYDVR0j
BBgwFoAUzseb09Ss54lYNrXkLm5bX2ylWZQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQTNDMjI3RTE5QUEzNzE2Qzc3N0Q0OTVDNTlFNTc1MjU2
MEFEMUQyNEVEOUQyQjY3NDVDNkRBNUZCN0ZDMzExLzAvQ0VDNzlCRDNENEFDRTc4
OTU4MzZCNUU0MkU2RTVCNUY2Q0E1NTk5NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUM3OUJEM0Q0QUNFNzg5NTgz
NkI1RTQyRTZFNUI1RjZDQTU1OTk0LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUEzQzIyN0UxOUFBMzcxNkM3NzdENDk1QzU5RTU3NTI1NjBBRDFEMjRF
RDlEMkI2NzQ1QzZEQTVGQjdGQzMxMS8wLzMyMzAzMDJlMzIzNjJlMzEzODM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyBq5MA0GCSqG
SIb3DQEBCwUAA4IBAQBA39ojvwQWtEY9qdWdLINNykexzspFvlwv5Sk7t8M9uN/f
vr4dB0riSEa8PoGYbkjoO2hSqA/J+uuCVwD9T6CwL6veP5clNMLpj7eHkwmzHHKq
M0C9DdVNpDV/cojydcjlpCmDjXyaYfGoStHaANWROZ37fSzxUkSxFnpwglfea2oB
ZFpwa1qYywKnKdUdhJSpRYVY2k3P6m4y10/NFyYvFoO565Pj8Brg1ZxO19b6jPOh
hxygSfjQJ1SJn0L3edCwu2SyD2ao8JiCLYPNRB7/fcz1V8NcbGpcWtO17ivpy1UM
qUYRZFn5Ye59rs4JSxvuM3MJ/urX4oI992UCDLuk
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:05:02 2026 by rpki-client