Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/3230302e3130372e3230362e302f32342d3234203d3e20323732313439.roa
File:                     3230302e3130372e3230362e302f32342d3234203d3e20323732313439.roa (raw, json)
Hash identifier:          FxP6Foy+1ZpDM1V+T8B6jx8bzNYDqMQeaztaKc5OGeg=
Subject key identifier:   26:9A:D3:1E:DF:54:31:37:9A:AA:7F:89:0D:D0:95:F9:44:D1:EE:CC
Certificate issuer:       /CN=52B4D645DC0765F1C95C57B2456FE263540E5A6C
Certificate serial:       1E77206C2422D839D251853A846479422A2C6748
Authority key identifier: 52:B4:D6:45:DC:07:65:F1:C9:5C:57:B2:45:6F:E2:63:54:0E:5A:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/3230302e3130372e3230362e302f32342d3234203d3e20323732313439.roa
Signing time:             Tue 31 Mar 2026 01:50:00 +0000
ROA not before:           Tue 31 Mar 2026 01:45:00 +0000
ROA not after:            Tue 30 Mar 2027 01:50:00 +0000
asID:                     272149
IP address blocks:        200.107.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 05:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:77:20:6c:24:22:d8:39:d2:51:85:3a:84:64:79:42:2a:2c:67:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52B4D645DC0765F1C95C57B2456FE263540E5A6C
        Validity
            Not Before: Mar 31 01:45:00 2026 GMT
            Not After : Mar 30 01:50:00 2027 GMT
        Subject: CN=269AD31EDF5431379AAA7F890DD095F944D1EECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:76:b9:03:73:08:66:00:8e:21:6d:6b:bb:5f:
                    23:cc:38:4b:9d:74:96:d5:ac:91:23:c1:63:f3:ed:
                    d4:f3:78:81:65:ad:56:f0:2a:92:b0:e8:a9:f2:2b:
                    55:1d:13:7b:f7:d7:59:4d:ab:9a:ec:10:53:1b:66:
                    ae:5e:c0:8f:5d:58:c9:cc:db:a8:6c:be:88:38:44:
                    60:5c:80:8d:f2:b7:7c:34:81:2d:b4:6a:44:eb:a1:
                    d4:e4:4d:75:24:7e:00:57:05:ed:db:81:8a:6c:d8:
                    2f:43:d2:48:c9:c8:75:64:66:ce:5b:dd:29:4b:15:
                    0f:64:72:09:a7:59:a7:7d:d0:58:2d:7d:12:9e:3b:
                    6d:5d:32:93:66:d1:0b:26:8b:db:89:83:de:2d:1e:
                    60:10:ea:16:72:cf:85:93:8a:92:25:52:97:95:e8:
                    9b:ed:96:c7:2e:25:c8:8d:c6:22:6c:d7:76:d3:ec:
                    6b:d9:3d:8d:7f:74:46:f4:82:f3:10:a7:c9:fe:63:
                    da:d8:7e:03:f0:8f:58:05:79:bd:e4:ae:e3:d6:3d:
                    91:dd:91:c4:54:9a:30:c4:1e:89:7d:cc:c8:ff:3b:
                    dd:5f:fa:de:27:2d:63:16:e9:b6:84:cc:d8:86:e3:
                    f0:9c:41:cd:49:d0:96:d7:7f:f7:23:5a:f4:90:39:
                    83:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:D3:1E:DF:54:31:37:9A:AA:7F:89:0D:D0:95:F9:44:D1:EE:CC
            X509v3 Authority Key Identifier:
                keyid:52:B4:D6:45:DC:07:65:F1:C9:5C:57:B2:45:6F:E2:63:54:0E:5A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52B4D645DC0765F1C95C57B2456FE263540E5A6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAB8B915E250861191329831362BEBD66533008CDEA2123E78AC8392C8840790/0/3230302e3130372e3230362e302f32342d3234203d3e20323732313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:0b:ac:44:c2:a8:d7:98:7a:82:0a:e9:f5:bc:28:f9:08:
         33:f8:e6:57:eb:43:5c:4e:29:6e:e1:2a:12:3c:00:7f:5f:5e:
         87:92:1a:05:d8:85:fe:a1:b7:a9:dd:50:f2:64:0b:77:3b:cb:
         f2:56:b4:70:86:a1:49:08:09:ce:36:60:b7:97:2f:d9:cc:1d:
         d2:f6:40:83:9b:82:aa:c5:c2:9c:ea:a8:9f:ee:af:12:e4:b3:
         02:58:a1:3d:10:2a:b2:40:2c:58:fa:53:d5:f7:04:9b:25:19:
         99:17:ca:1e:ee:63:74:36:5d:61:ae:14:cc:5a:45:e6:a9:4d:
         dc:d1:4a:7a:49:e5:61:03:0c:f2:bc:c1:2c:ba:b5:46:d1:0e:
         83:f2:a2:33:83:6e:d6:b1:09:c3:da:0f:03:5b:48:c6:6e:6a:
         7e:6f:e5:66:16:3b:d6:e3:91:f1:e5:6c:61:f3:53:df:4d:1f:
         af:54:f3:94:ad:e8:44:46:82:1b:79:45:d9:36:58:2a:19:5a:
         01:bc:a3:27:a8:06:27:11:9d:8e:cb:a5:ae:05:ba:e7:a8:9c:
         4e:dd:4a:ed:56:06:6b:71:5f:78:bd:64:e9:a2:15:b9:6d:52:
         99:0b:8b:1c:34:45:e3:e5:ea:99:5c:42:c0:8f:36:97:ce:50:
         7a:16:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 21:22:11 2026 by rpki-client