Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3134342e37362f33302d3330203d3e2033333536.roa
File:                     3230312e3233342e3134342e37362f33302d3330203d3e2033333536.roa (raw, json)
Hash identifier:          owYo8ljkmz571lFdhtpgeSemI3pMO+8fEM9WOCixm8E=
Subject key identifier:   76:D0:A7:EC:9E:38:8C:76:84:22:8F:E8:EC:05:F0:D5:94:6E:49:C8
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       1B9C82FB7648EC8CEE0ECD62512B2B43246E9F4A
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3134342e37362f33302d3330203d3e2033333536.roa
Signing time:             Tue 17 Feb 2026 21:00:00 +0000
ROA not before:           Tue 17 Feb 2026 20:55:00 +0000
ROA not after:            Tue 16 Feb 2027 21:00:00 +0000
asID:                     3356
IP address blocks:        201.234.144.76/30 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 19:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9c:82:fb:76:48:ec:8c:ee:0e:cd:62:51:2b:2b:43:24:6e:9f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb 17 20:55:00 2026 GMT
            Not After : Feb 16 21:00:00 2027 GMT
        Subject: CN=76D0A7EC9E388C7684228FE8EC05F0D5946E49C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e9:03:8a:2b:63:4a:16:a5:df:c4:6c:84:f8:
                    b2:c7:6d:9d:1d:fa:61:d9:e0:89:cb:47:d7:a6:74:
                    6f:cf:1f:d8:73:ee:bd:e0:32:95:ce:c5:82:aa:43:
                    e6:b1:bd:e6:74:fc:e4:90:91:b7:ab:56:fc:f1:3f:
                    16:b5:13:94:3b:02:1e:93:f4:ff:18:46:2f:5d:3b:
                    72:38:df:d3:7c:7a:a5:13:c3:fc:05:b5:da:8f:7d:
                    15:3a:32:ff:f9:0f:bb:6e:2c:d4:94:a9:e0:4d:97:
                    a2:4d:0b:84:51:ea:a4:d7:1d:e2:f4:82:7a:70:59:
                    c5:07:9f:5f:35:55:dc:aa:95:66:09:c7:9e:b8:03:
                    72:dc:ec:cb:0a:53:0f:dc:76:8d:af:82:d2:91:69:
                    df:19:06:7e:4b:6f:52:83:73:c7:72:71:e4:d4:92:
                    a6:61:ff:63:28:bc:67:f5:1f:4e:2b:00:77:80:97:
                    c7:3b:d3:28:c6:08:6c:59:f1:02:5e:9b:2c:a0:41:
                    04:ac:2f:47:63:22:cf:f6:86:f9:4e:4d:9f:28:85:
                    a6:68:46:52:b1:79:c6:5c:11:d6:36:25:22:80:2f:
                    ff:48:9c:53:b9:09:e4:2f:61:72:7d:4a:6e:97:fd:
                    e0:1e:44:99:bf:be:8d:01:a0:18:6f:54:25:e9:1d:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D0:A7:EC:9E:38:8C:76:84:22:8F:E8:EC:05:F0:D5:94:6E:49:C8
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3134342e37362f33302d3330203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.144.76/30

    Signature Algorithm: sha256WithRSAEncryption
         90:bf:72:31:9f:9d:73:aa:a8:67:44:fd:dd:e8:88:bd:96:db:
         22:f7:e7:36:69:07:b8:16:e7:cb:cf:dd:63:01:d5:28:17:91:
         7f:01:f6:e5:1d:60:a7:2a:e7:a5:92:70:2a:2e:2e:2f:8f:a0:
         5d:6b:11:eb:e4:2c:c6:8e:d3:13:1b:a6:40:87:0a:5e:88:71:
         62:c5:53:d0:6d:07:d3:47:52:29:e0:37:14:63:a5:97:8a:4e:
         cc:1f:8d:13:ad:77:16:0e:64:d4:02:47:b1:a9:8d:75:97:75:
         36:70:f5:ba:2a:f7:92:1c:57:3e:e4:c1:61:32:12:51:c1:29:
         45:0b:9b:61:20:97:30:6a:b7:04:07:b8:58:8e:18:cd:b9:46:
         c5:d6:c8:8f:fa:a2:de:61:c8:63:da:23:51:38:8f:29:d6:f5:
         86:0e:fe:06:ad:c5:ae:66:be:7a:4c:ab:c8:3d:7f:9b:d5:30:
         78:ca:83:38:d4:68:aa:3e:ca:d2:97:6d:f8:cc:fe:3b:1a:76:
         90:14:88:7d:65:bf:7d:32:0e:0a:e1:dd:08:10:4f:9d:ba:80:
         e0:f1:65:15:24:7e:08:7a:82:d6:96:af:8c:37:3f:7e:1e:da:
         6f:73:33:2e:4c:42:bb:05:4f:ff:84:ae:d9:50:f4:31:52:d3:
         41:d3:8f:7f
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUG5yC+3ZI7IzuDs1iUSsrQyRun0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNjAyMTcyMDU1MDBaFw0yNzAyMTYyMTAwMDBaMDMxMTAvBgNV
BAMTKDc2RDBBN0VDOUUzODhDNzY4NDIyOEZFOEVDMDVGMEQ1OTQ2RTQ5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI6QOKK2NKFqXfxGyE+LLHbZ0d
+mHZ4InLR9emdG/PH9hz7r3gMpXOxYKqQ+axveZ0/OSQkberVvzxPxa1E5Q7Ah6T
9P8YRi9dO3I439N8eqUTw/wFtdqPfRU6Mv/5D7tuLNSUqeBNl6JNC4RR6qTXHeL0
gnpwWcUHn181VdyqlWYJx564A3Lc7MsKUw/cdo2vgtKRad8ZBn5Lb1KDc8dyceTU
kqZh/2MovGf1H04rAHeAl8c70yjGCGxZ8QJemyygQQSsL0djIs/2hvlOTZ8ohaZo
RlKxecZcEdY2JSKAL/9InFO5CeQvYXJ9Sm6X/eAeRJm/vo0BoBhvVCXpHTpVAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUdtCn7J44jHaEIo/o7AXw1ZRuScgwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMTJlMzIzMzM0MmUzMTM0MzQy
ZTM3MzYyZjMzMzAyZDMzMzAyMDNkM2UyMDMzMzMzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUCyeqQ
TDANBgkqhkiG9w0BAQsFAAOCAQEAkL9yMZ+dc6qoZ0T93eiIvZbbIvfnNmkHuBbn
y8/dYwHVKBeRfwH25R1gpyrnpZJwKi4uL4+gXWsR6+Qsxo7TExumQIcKXohxYsVT
0G0H00dSKeA3FGOll4pOzB+NE613Fg5k1AJHsamNdZd1NnD1uir3khxXPuTBYTIS
UcEpRQubYSCXMGq3BAe4WI4YzblGxdbIj/qi3mHIY9ojUTiPKdb1hg7+Bq3Frma+
ekyryD1/m9UweMqDONRoqj7K0pdt+Mz+Oxp2kBSIfWW/fTIOCuHdCBBPnbqA4PFl
FSR+CHqC1pavjDc/fh7ab3MzLkxCuwVP/4Su2VD0MVLTQdOPfw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:57:42 2026 by rpki-client