Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20323733323137.roa
File:                     3230302e32362e3138372e302f32342d3234203d3e20323733323137.roa (raw, json)
Hash identifier:          zvwMOSBkJJzGFsOx2GjLdjV9v2tlwKxNVEbro+yHDGc=
Subject key identifier:   78:08:D2:D8:66:F0:F2:4D:9B:01:DB:E5:31:80:57:23:61:98:BF:7C
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       08B7DF566AC0EFEEB5E723900BD1E595EEA5151D
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20323733323137.roa
Signing time:             Tue 14 Apr 2026 23:15:00 +0000
ROA not before:           Tue 14 Apr 2026 23:10:00 +0000
ROA not after:            Tue 13 Apr 2027 23:15:00 +0000
asID:                     273217
IP address blocks:        200.26.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 02:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b7:df:56:6a:c0:ef:ee:b5:e7:23:90:0b:d1:e5:95:ee:a5:15:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Apr 14 23:10:00 2026 GMT
            Not After : Apr 13 23:15:00 2027 GMT
        Subject: CN=7808D2D866F0F24D9B01DBE5318057236198BF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:17:3f:f2:3c:57:30:df:9d:08:19:4b:82:
                    9c:32:59:1f:df:13:e3:36:c1:3b:67:f6:19:87:23:
                    b9:1b:e0:6a:9c:3f:67:b4:e6:65:13:d9:15:73:85:
                    f0:da:ca:78:33:01:47:00:d0:c7:67:6b:49:a9:1a:
                    10:f2:15:be:eb:bf:e9:37:e3:32:ed:79:0e:35:e5:
                    58:f2:6f:80:46:9a:5a:1f:f1:e7:96:7c:c8:12:a2:
                    39:8c:37:2d:2c:88:81:92:aa:26:18:1a:4c:6a:40:
                    cb:75:26:f8:7d:03:f3:9a:b5:3a:5f:81:85:27:f4:
                    18:2c:e4:6c:61:c8:9f:3c:a6:e6:65:95:dc:b9:94:
                    12:f6:30:91:8c:b2:b5:b1:27:1e:51:9f:90:38:9b:
                    c4:9f:93:71:2a:57:78:eb:76:bd:76:02:4d:24:57:
                    3e:68:a7:97:43:66:86:0e:bf:98:71:b4:21:3c:76:
                    04:06:01:ea:3f:3a:67:64:52:a3:4d:5a:a7:fb:a2:
                    e7:4e:14:20:83:12:75:02:ab:5b:71:0a:e3:0c:6a:
                    1b:69:0f:6e:8c:25:57:1d:a9:8e:6a:d9:ef:5c:77:
                    1d:6c:a6:ff:b7:95:97:e2:df:17:40:a2:91:c8:83:
                    3f:be:7d:d1:4b:9b:7a:08:3e:00:53:10:08:d7:c0:
                    82:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:08:D2:D8:66:F0:F2:4D:9B:01:DB:E5:31:80:57:23:61:98:BF:7C
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20323733323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f4:69:02:5d:bf:78:4e:0e:dc:3d:52:39:78:8d:c8:90:fc:
         32:ab:cf:b0:ce:32:3a:b6:84:d8:7b:48:f1:72:31:eb:50:1b:
         4d:6c:13:3a:f1:d2:71:d2:d1:bc:fb:ac:70:a1:c9:e5:28:10:
         ef:06:b0:34:13:74:ea:28:6b:d8:46:59:e7:41:47:53:f3:a6:
         d5:54:bc:ea:1b:af:d0:f6:a1:00:ea:e6:92:5b:67:15:68:55:
         41:71:80:ed:1e:33:06:dd:8d:e6:19:49:3a:5c:28:3e:69:77:
         df:5a:51:2c:f0:07:97:ce:48:52:45:11:6b:e2:87:74:7b:e1:
         15:7c:c6:26:53:0a:99:c1:d8:2d:d1:fb:d5:24:85:e2:ce:d4:
         cb:73:74:13:4b:15:25:11:ec:99:82:d7:ce:e2:fc:cb:ac:44:
         23:fe:b9:d5:e2:ef:31:ea:3e:7c:80:a3:66:34:ab:b9:33:ba:
         13:cf:b1:f4:76:bb:e2:6c:ae:f7:09:6a:6b:5e:8c:95:ae:a9:
         6c:4d:d1:a8:14:b8:25:1c:ca:b8:6d:38:84:67:3a:63:57:06:
         e1:7d:2b:4a:bc:f4:95:0e:3b:d7:fd:1e:75:e3:db:f2:d8:0e:
         f9:ec:4c:0e:ef:40:2b:12:be:8a:7e:37:04:b4:00:59:5a:e3:
         35:2e:db:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 08:41:11 2026 by rpki-client