Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e20323039323432.roa
File:                     3230302e37332e36372e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier:          HBc+aHYq+uHzLsnX5D93U62kkLg1voTuaWfL2k8RJrY=
Subject key identifier:   B2:CC:F7:3F:34:3A:6F:AC:39:8C:71:84:57:2A:CB:DB:36:8E:F5:EA
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       2D493E931966E27A4773C813126F41B6BB2B43E6
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e20323039323432.roa
Signing time:             Wed 26 Aug 2026 20:26:40 +0000
ROA not before:           Wed 26 Aug 2026 20:21:40 +0000
ROA not after:            Wed 25 Aug 2027 20:26:40 +0000
asID:                     209242
IP address blocks:        200.73.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 05:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:49:3e:93:19:66:e2:7a:47:73:c8:13:12:6f:41:b6:bb:2b:43:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Aug 26 20:21:40 2026 GMT
            Not After : Aug 25 20:26:40 2027 GMT
        Subject: CN=B2CCF73F343A6FAC398C7184572ACBDB368EF5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:f0:0f:b6:9e:62:d8:5b:3e:be:a7:33:4c:
                    fb:75:cc:9b:bc:66:47:1b:23:a1:30:12:78:0b:63:
                    65:8c:c7:7c:c6:31:8a:37:9f:a5:ae:6a:5e:e5:15:
                    9f:28:51:da:b6:66:2f:4b:16:b6:8b:56:27:7f:32:
                    c3:28:e7:68:24:b5:2d:5e:5b:11:37:c6:0d:20:69:
                    51:7d:8b:af:6e:f2:3d:05:42:d3:55:09:60:08:7c:
                    08:d0:67:30:33:a9:c2:d3:0c:37:c7:cc:18:3f:fe:
                    ec:1a:65:65:4d:48:7c:42:ad:8f:46:eb:fd:48:62:
                    14:ce:21:50:70:b7:f5:c9:fc:e6:8d:d5:21:b6:ae:
                    4c:4d:9f:70:d4:0b:ce:ea:6c:1c:0a:4a:b6:d0:78:
                    78:4c:c1:46:0b:13:0d:c7:19:5e:31:e4:e6:3f:e3:
                    0f:a9:12:8f:9b:7b:0b:b1:45:35:f3:d3:38:73:73:
                    ad:d3:3c:c2:bc:0b:e8:be:b4:ed:50:2a:fc:0a:57:
                    6a:1c:00:4f:8c:0e:33:b9:ba:59:9d:9b:3f:f3:18:
                    21:0a:57:ae:e8:41:c3:bd:fd:3e:55:39:28:e0:e0:
                    f6:45:49:a9:e6:f5:6f:1a:86:b7:a2:7c:e0:d1:3e:
                    1b:74:bb:4a:13:93:15:97:c7:7f:fa:92:fa:53:71:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CC:F7:3F:34:3A:6F:AC:39:8C:71:84:57:2A:CB:DB:36:8E:F5:EA
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:97:5f:0a:d2:35:1b:13:7b:e2:94:7d:dc:f9:41:41:70:69:
         c5:4b:59:0d:47:13:3a:77:02:87:2a:02:6b:f0:99:98:ba:54:
         23:d0:a0:ef:0c:41:b4:05:45:17:28:cf:fd:52:2e:b8:eb:b2:
         59:8a:df:c8:ed:b7:50:67:6e:05:29:1b:2b:b6:29:05:ab:69:
         95:8d:3d:c9:5f:13:12:31:72:18:18:d0:12:ff:ce:ad:78:56:
         62:1f:92:19:ce:14:7c:96:31:e6:b4:f8:3a:8e:05:be:18:4a:
         cb:43:94:43:37:30:84:1d:01:3e:37:2b:ee:b1:b4:25:1c:70:
         8d:2d:0d:af:c8:7f:f4:df:31:f0:3f:a8:99:66:1e:30:36:dd:
         81:5a:15:7f:3c:af:16:f8:08:a6:c0:18:a2:14:a3:0b:7c:fe:
         52:8c:c2:86:1f:77:08:bc:c9:76:52:36:67:e2:b5:5e:db:23:
         8f:31:08:12:db:4b:32:48:b0:40:ae:d2:f1:c7:d8:30:c0:49:
         90:a9:70:11:6e:7d:1e:1e:a3:5c:f9:a0:1a:7d:e5:e4:51:f4:
         bd:07:e8:e7:b0:f0:fb:a4:1c:67:18:25:8a:09:e2:f5:7b:20:
         f2:59:31:1e:9b:44:80:8a:86:28:96:be:34:6e:20:7a:2d:c3:
         d7:f1:7d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:48:52 2026 by rpki-client