Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139302e302f32342d3234203d3e20323732393835.roa
File:                     3230302e32362e3139302e302f32342d3234203d3e20323732393835.roa (raw, json)
Hash identifier:          zGIYdpavSbjxOM9lCXHsL1XRbQM7yzzufWAZDYo+NN8=
Subject key identifier:   AD:C4:D0:40:AC:44:2A:A7:1E:BD:79:9B:05:C6:15:8E:FD:6F:7B:A1
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       1E43FCECF6CD253F257E2C1F27521F7B97AA352D
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139302e302f32342d3234203d3e20323732393835.roa
Signing time:             Mon 27 Jul 2026 12:25:00 +0000
ROA not before:           Mon 27 Jul 2026 12:20:00 +0000
ROA not after:            Mon 26 Jul 2027 12:25:00 +0000
asID:                     272985
IP address blocks:        200.26.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 06:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:43:fc:ec:f6:cd:25:3f:25:7e:2c:1f:27:52:1f:7b:97:aa:35:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Jul 27 12:20:00 2026 GMT
            Not After : Jul 26 12:25:00 2027 GMT
        Subject: CN=ADC4D040AC442AA71EBD799B05C6158EFD6F7BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:b8:35:6a:c3:01:19:3a:68:9f:3d:5e:b3:
                    75:62:30:63:82:3c:18:8a:84:fe:ab:7c:c0:04:d3:
                    27:f2:45:3a:09:5e:b4:78:fd:6c:14:8c:cd:38:f3:
                    15:0c:b1:3e:93:7d:dc:a8:4e:f1:e9:ed:5d:ea:9b:
                    c0:9d:12:48:95:9b:98:90:09:8a:6b:92:53:8e:73:
                    b0:32:8f:a9:ce:39:46:3a:f0:1a:e1:d0:ae:7b:e9:
                    16:39:1d:6e:a2:80:ae:5c:7d:b3:7b:ef:7b:be:6e:
                    63:97:85:ea:50:25:f2:c2:f3:cd:18:f9:3d:eb:6c:
                    af:fb:b3:8f:e1:11:5a:1c:1d:7d:d3:19:63:c7:44:
                    f7:b0:5f:df:60:42:71:b8:31:60:e4:9a:92:91:19:
                    cf:31:de:ba:66:2d:35:db:3f:9b:5f:ab:26:7f:e4:
                    65:38:52:d1:03:54:38:6c:bf:e5:9a:7c:ef:ec:28:
                    01:32:9f:bb:4e:17:69:c5:d8:e7:4a:6b:21:00:40:
                    c9:c2:fe:88:2a:4e:ac:f0:38:a3:80:b1:9d:c4:f9:
                    17:02:59:6c:c7:59:fd:81:f1:6f:72:c2:b4:c6:09:
                    34:93:a3:1e:f6:0a:00:0b:7e:11:6b:48:12:07:91:
                    c4:b2:a9:c5:22:bc:53:de:cb:5c:ee:58:51:21:36:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C4:D0:40:AC:44:2A:A7:1E:BD:79:9B:05:C6:15:8E:FD:6F:7B:A1
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139302e302f32342d3234203d3e20323732393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:32:2e:b3:8b:de:d5:e0:5d:8c:0d:18:cb:cf:46:5f:71:02:
         12:b5:f3:83:3a:d9:92:a5:87:f5:c2:7d:f9:8a:a0:ee:79:ee:
         8c:25:fe:2d:16:56:cd:47:9f:1c:08:ff:ac:54:ce:a5:56:be:
         0b:ee:8f:91:63:0f:19:08:c7:c3:34:04:e8:6e:f1:7c:a4:fa:
         3a:90:ca:c1:cd:34:35:50:95:c0:8b:73:b9:fb:a2:af:44:82:
         48:9c:3c:a7:7d:f9:87:4d:ef:57:16:dc:cb:cc:7f:b1:ee:ea:
         e5:d8:d2:ca:3e:da:2f:7c:ac:0e:c1:f3:9a:2d:e7:9e:8b:eb:
         14:da:79:21:65:9f:d7:74:32:89:9d:96:84:78:36:35:65:a5:
         6e:8e:07:e8:3d:a2:20:60:19:d7:a5:95:84:57:be:ea:cb:6d:
         39:eb:ac:c6:79:c7:e8:a4:27:5c:7f:7c:bd:ca:cf:0b:23:ed:
         57:2e:00:01:c2:85:4c:da:11:dc:c5:d0:5f:1a:37:15:b3:1b:
         7f:64:3d:e9:a0:e8:66:7f:5a:31:06:65:c3:c5:66:3e:59:5f:
         39:1a:8e:24:69:12:d5:8b:73:34:c1:22:63:6f:21:7e:2d:0a:
         42:b4:c3:f0:0d:53:ba:ac:c8:a0:a7:51:69:8a:c2:b2:82:60:
         d4:eb:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:22 2026 by rpki-client