Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134392e302f32342d3234203d3e20323632323439.roa
File:                     3230302e3130382e3134392e302f32342d3234203d3e20323632323439.roa (raw, json)
Hash identifier:          1pQ1pTCEuv3501QG9SV/bo18zlxUCNpQqFqaowppRS8=
Subject key identifier:   AE:B1:C3:97:EB:8E:3D:9A:A0:2D:9E:64:61:19:E2:D7:58:47:BC:79
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       56DF1BD141AC5D87336950C14FC13D5F2DD85D5B
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134392e302f32342d3234203d3e20323632323439.roa
Signing time:             Mon 19 Oct 2026 16:41:58 +0000
ROA not before:           Mon 19 Oct 2026 16:36:58 +0000
ROA not after:            Mon 18 Oct 2027 16:41:58 +0000
asID:                     262249
IP address blocks:        200.108.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:df:1b:d1:41:ac:5d:87:33:69:50:c1:4f:c1:3d:5f:2d:d8:5d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 19 16:36:58 2026 GMT
            Not After : Oct 18 16:41:58 2027 GMT
        Subject: CN=AEB1C397EB8E3D9AA02D9E646119E2D75847BC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:b3:97:1a:22:28:12:05:ca:87:79:16:81:
                    58:4c:12:c8:6f:94:b1:0a:82:9e:f5:91:71:a8:89:
                    80:70:35:2b:bf:20:76:d2:65:bd:0d:3f:56:c3:89:
                    46:6f:03:79:5b:e3:46:96:ee:ef:e0:2b:b4:09:24:
                    e8:f6:ae:d0:db:fb:34:4c:38:83:cf:79:18:99:01:
                    bb:93:ad:8d:72:39:01:49:f1:b8:4b:a1:88:b4:5b:
                    57:26:42:e2:2b:c1:0f:81:70:71:14:bb:6f:eb:24:
                    ab:32:9b:25:6e:90:48:7a:e0:35:0d:47:70:ef:a9:
                    91:82:d0:ea:b3:dc:af:64:ce:79:5f:5b:f6:f4:8a:
                    ab:23:22:df:14:e5:f8:6d:e4:05:32:68:c4:84:ce:
                    ea:62:6a:62:a5:fe:b5:76:c6:01:ac:e8:3b:20:3d:
                    e5:82:85:6d:5b:c4:2a:6f:56:fd:2d:d5:94:db:b1:
                    8e:15:5b:4e:ed:0f:6b:84:0c:7d:72:a0:a9:1b:e3:
                    3c:f0:0f:37:5e:1b:4e:2b:9f:55:97:90:4b:c5:93:
                    3a:5c:19:0a:d4:f3:cc:58:b5:98:3f:50:91:4f:65:
                    d4:12:2b:8e:52:a4:10:9f:b1:ec:79:3f:0a:ea:c2:
                    13:f5:5b:f8:3b:4f:e9:c1:0a:00:cb:fb:7f:5f:72:
                    2f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B1:C3:97:EB:8E:3D:9A:A0:2D:9E:64:61:19:E2:D7:58:47:BC:79
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134392e302f32342d3234203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:a7:48:53:e2:d9:c9:d9:96:a4:6e:0e:e9:ab:79:55:13:
         8c:4f:9d:1c:a8:1d:7a:ad:6f:59:da:14:39:e5:ae:b5:4f:fa:
         19:ce:79:5e:f7:97:16:9a:1a:ba:52:52:34:37:ff:18:f1:3b:
         84:53:d4:80:6a:d2:fb:52:ab:ba:31:7f:13:2c:32:0e:5d:f1:
         85:f0:5f:c0:23:90:88:ca:b2:08:04:7f:8d:a7:4b:27:2e:1f:
         3a:49:0c:ff:f3:5d:95:05:4e:bf:b4:a9:4e:6d:5b:20:56:b7:
         02:f9:67:88:ec:fb:37:74:d2:da:69:51:dc:a0:73:26:d0:cd:
         dc:62:09:51:3b:85:e7:b4:a9:cd:67:f2:f2:ec:55:b6:ef:02:
         db:e5:91:b2:be:34:d7:9c:f9:8d:64:d8:85:4d:1a:b7:ed:d7:
         f4:81:e8:68:d7:cf:ed:10:8a:0c:ee:21:e3:25:56:ff:fe:be:
         62:4c:57:5a:10:da:b5:47:7b:7f:ad:e4:0b:3d:82:45:1c:a4:
         85:8a:44:85:f3:3c:68:02:4e:d9:e2:c5:b2:26:3f:65:9a:3e:
         0a:83:a9:7a:b2:2e:16:49:dc:8d:db:37:90:5e:46:5f:c4:43:
         da:20:71:ea:dc:d7:c2:6c:fb:22:12:71:d9:6a:aa:4e:3a:24:
         55:ff:f7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:24:54 2026 by rpki-client