Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3135312e302f32342d3234203d3e20323632323439.roa
File:                     3230302e3130382e3135312e302f32342d3234203d3e20323632323439.roa (raw, json)
Hash identifier:          cuMsKxVflkxBm4Fg1hF2WaJOFEifcYKIQMwEy6Z/neM=
Subject key identifier:   41:65:01:43:F8:23:B4:DE:73:D8:2F:D9:BC:77:B3:C9:BC:2E:96:09
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       34E59FC2B8351F1CFB72D1CCFC9DCC4127160212
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3135312e302f32342d3234203d3e20323632323439.roa
Signing time:             Mon 19 Oct 2026 16:41:58 +0000
ROA not before:           Mon 19 Oct 2026 16:36:58 +0000
ROA not after:            Mon 18 Oct 2027 16:41:58 +0000
asID:                     262249
IP address blocks:        200.108.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 23:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e5:9f:c2:b8:35:1f:1c:fb:72:d1:cc:fc:9d:cc:41:27:16:02:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 19 16:36:58 2026 GMT
            Not After : Oct 18 16:41:58 2027 GMT
        Subject: CN=41650143F823B4DE73D82FD9BC77B3C9BC2E9609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:b2:84:d1:81:61:1a:72:b6:06:8f:e6:d9:
                    a0:86:62:e9:3e:d7:e0:14:7b:7d:fb:0f:46:90:3d:
                    a7:6f:4c:8b:d8:92:82:6e:84:4f:99:b7:fd:76:25:
                    2c:88:91:bc:d0:b4:24:74:96:ba:68:6e:94:6f:03:
                    9f:49:8f:72:02:1f:ca:c5:db:89:05:73:4c:b1:94:
                    fa:9f:a8:b5:db:b3:84:10:78:e5:fa:f4:2c:dd:4d:
                    1c:84:14:4e:ee:46:41:13:d9:77:7d:86:af:34:d0:
                    10:15:b0:12:a8:07:a5:f9:46:61:9b:7b:65:a6:f1:
                    db:d6:82:46:e1:f8:e1:92:17:f7:d3:ec:23:60:d8:
                    3a:94:1f:d1:60:a8:d3:1e:1c:d2:5a:6d:42:68:26:
                    bf:16:16:0d:f3:61:15:c6:5d:1b:7f:34:33:5e:6c:
                    87:e8:27:37:76:a5:e9:e2:d3:e5:a8:62:1a:18:e1:
                    03:78:15:84:f0:b6:a0:6a:88:2f:ab:9e:26:ba:31:
                    d7:dc:d4:61:42:62:4d:04:38:b2:56:39:83:cb:f1:
                    10:0d:a1:67:f6:38:b1:92:08:e0:07:21:10:bc:66:
                    7e:89:c8:46:d6:07:a9:53:42:a8:07:9e:09:9f:d5:
                    7c:9f:ca:87:95:57:a0:0c:4f:2f:bd:a3:10:82:41:
                    2b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:01:43:F8:23:B4:DE:73:D8:2F:D9:BC:77:B3:C9:BC:2E:96:09
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3135312e302f32342d3234203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:50:01:4b:3f:c4:75:3b:1f:16:70:5d:12:30:d8:02:79:6e:
         90:b5:65:5f:64:46:6b:88:f1:09:9b:a5:d8:44:39:2b:11:b3:
         93:78:c7:ea:d2:9e:66:77:fb:2a:12:79:c2:c2:2e:da:fd:8b:
         ad:78:38:f6:4b:63:35:ba:47:56:17:49:ad:1e:46:7b:ee:88:
         4b:48:a5:77:d7:04:a3:9a:7c:92:75:9d:4a:0e:48:7a:87:8d:
         5b:51:bc:d1:86:4a:f4:72:da:06:c5:7c:2f:ff:31:57:f5:95:
         32:b6:6f:50:cb:f3:f1:a6:7d:83:23:f7:a3:d3:94:46:5a:8a:
         55:38:94:f2:9c:c4:52:85:f2:d5:2c:c8:12:fd:a5:36:b8:72:
         92:86:14:1a:51:29:df:ca:e5:3e:b5:89:00:e3:65:ef:ea:5d:
         68:d9:8c:8e:ff:33:ad:ad:89:25:82:a5:7f:f5:b2:11:a5:de:
         03:44:97:5e:21:e3:3d:bc:0a:bb:9e:1e:dd:76:ee:36:70:65:
         e7:a8:19:e6:e1:47:9f:b9:c5:f2:b2:e9:24:d5:2d:ab:22:e5:
         10:67:93:0a:7a:3a:ea:b6:49:3f:c1:b3:90:79:58:89:e0:18:
         85:f4:75:0d:c3:4c:80:cc:a4:33:00:aa:22:f2:04:ee:a9:6f:
         2a:63:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:32:33 2026 by rpki-client