Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134352e302f32342d3234203d3e20323632323439.roa
File:                     3230302e3130382e3134352e302f32342d3234203d3e20323632323439.roa (raw, json)
Hash identifier:          HwtN6QomFPdM94xx6Fs/2HxxthZg7DF503kJFNbsB50=
Subject key identifier:   E3:74:6D:54:26:94:D0:8F:D4:73:54:1D:C6:FD:5E:C4:F0:9F:1E:09
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       405CEC6E92AA2639DFD9D2C4A54F6B20A3C6E06D
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134352e302f32342d3234203d3e20323632323439.roa
Signing time:             Mon 19 Oct 2026 15:41:58 +0000
ROA not before:           Mon 19 Oct 2026 15:36:58 +0000
ROA not after:            Mon 18 Oct 2027 15:41:58 +0000
asID:                     262249
IP address blocks:        200.108.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Oct 2026 22:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5c:ec:6e:92:aa:26:39:df:d9:d2:c4:a5:4f:6b:20:a3:c6:e0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Oct 19 15:36:58 2026 GMT
            Not After : Oct 18 15:41:58 2027 GMT
        Subject: CN=E3746D542694D08FD473541DC6FD5EC4F09F1E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:5a:f2:83:d1:e2:b9:d4:33:51:8c:bf:72:
                    5d:e9:e8:ba:7b:db:11:ce:2a:94:65:d4:50:64:98:
                    d2:30:4d:f0:9a:13:1b:09:91:e0:59:1e:69:ae:c4:
                    48:c7:e8:5d:e0:81:f8:24:2a:da:81:aa:35:bb:d0:
                    01:ad:72:ee:eb:95:8a:7d:38:a1:b1:a1:a2:8d:94:
                    45:cb:02:e2:b2:64:23:7a:81:18:77:51:09:2f:cb:
                    3e:ec:3d:b2:89:02:7f:97:58:df:9e:fe:79:45:1c:
                    08:fe:a9:88:8a:dd:d0:e3:43:1a:86:b4:48:2c:65:
                    5d:1e:45:5d:e4:61:ec:d4:58:e4:65:e4:85:fe:6f:
                    19:9a:56:95:ab:a6:fd:f2:b2:55:57:4e:44:92:07:
                    70:fb:d6:53:ed:93:ff:28:ee:75:d1:94:15:5f:c7:
                    eb:f9:08:00:05:aa:82:5e:b0:ea:30:b0:dd:1c:3d:
                    d4:fc:d0:75:1f:ea:36:05:cb:64:55:86:c8:c7:f5:
                    43:a3:df:5f:7c:8c:72:83:47:ab:6a:de:ac:77:e7:
                    ff:b7:7c:a9:c1:62:63:6d:59:69:60:9b:9c:04:75:
                    28:b0:e5:d3:65:6e:ed:c8:47:27:ce:17:db:a5:ba:
                    2a:31:db:cd:ab:92:85:e0:04:a5:7a:4b:49:35:04:
                    e7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:74:6D:54:26:94:D0:8F:D4:73:54:1D:C6:FD:5E:C4:F0:9F:1E:09
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134352e302f32342d3234203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:9a:a3:f5:6f:fb:f3:7c:0d:52:f2:ab:f4:f6:66:85:59:
         82:d2:2e:7f:6f:41:5c:5a:00:6b:98:9c:4e:42:79:3f:b2:51:
         6e:30:b6:78:7e:e4:9d:40:4d:85:6f:5d:e4:42:fe:83:b0:fa:
         95:80:c5:62:45:cd:11:19:d4:ee:d7:71:f4:ea:dd:69:ed:b4:
         65:07:c0:97:fd:5a:73:f7:a3:69:fa:d7:16:b5:8d:b8:98:04:
         e9:d8:63:ee:a5:fe:c6:20:01:d0:b1:4f:65:16:9d:91:66:2a:
         d6:3d:33:eb:fb:59:d7:a0:12:13:e7:94:ae:5f:f7:a7:cd:e2:
         99:07:53:c2:2f:57:08:42:4c:46:56:fe:35:21:76:2d:42:dc:
         e2:81:17:d8:64:dc:a3:e3:78:b5:13:f9:ee:d9:78:98:40:fa:
         5c:37:23:78:c9:a3:db:7c:57:9d:bc:67:87:36:ef:44:45:76:
         fc:30:19:57:66:1a:47:61:c4:3f:b7:02:5a:e8:e2:72:78:79:
         e1:e7:7f:f0:fd:a2:2a:80:52:46:9a:05:8e:89:d7:75:d3:5c:
         db:a9:cf:25:9a:75:3f:c0:f7:58:9c:82:1d:4a:3d:1d:a9:71:
         9c:2a:52:a5:5a:48:89:87:23:4d:08:a9:91:e2:80:e3:c2:25:
         f2:53:3e:48
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUQFzsbpKqJjnf2dLEpU9rIKPG4G0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhFNkQ5QzA2RTREOEZGQ0RDQzIyQUZGNEI0Q0EzOTJD
MUE3RDYwMDAeFw0yNjEwMTkxNTM2NThaFw0yNzEwMTgxNTQxNThaMDMxMTAvBgNV
BAMTKEUzNzQ2RDU0MjY5NEQwOEZENDczNTQxREM2RkQ1RUM0RjA5RjFFMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs1Fryg9HiudQzUYy/cl3p6Lp7
2xHOKpRl1FBkmNIwTfCaExsJkeBZHmmuxEjH6F3ggfgkKtqBqjW70AGtcu7rlYp9
OKGxoaKNlEXLAuKyZCN6gRh3UQkvyz7sPbKJAn+XWN+e/nlFHAj+qYiK3dDjQxqG
tEgsZV0eRV3kYezUWORl5IX+bxmaVpWrpv3yslVXTkSSB3D71lPtk/8o7nXRlBVf
x+v5CAAFqoJesOowsN0cPdT80HUf6jYFy2RVhsjH9UOj3198jHKDR6tq3qx35/+3
fKnBYmNtWWlgm5wEdSiw5dNlbu3IRyfOF9uluiox282rkoXgBKV6S0k1BOfzAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU43RtVCaU0I/Uc1Qdxv1exPCfHgkwHwYDVR0j
BBgwFoAU2ObZwG5Nj/zcwir/S0yjksGn1gAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRjY4MzYwQzQzNUVFMTQ2MTJDMTk0NEREOEI3QTY1RUI5
MDkzN0VDMkMxRDY4RkE0MkNCMDZDQTdFMzAwRjNDLzAvRDhFNkQ5QzA2RTREOEZG
Q0RDQzIyQUZGNEI0Q0EzOTJDMUE3RDYwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEU2RDlDMDZFNEQ4RkZDREND
MjJBRkY0QjRDQTM5MkMxQTdENjAwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkY2ODM2MEM0MzVFRTE0NjEyQzE5NDRERDhCN0E2NUVCOTA5MzdFQzJD
MUQ2OEZBNDJDQjA2Q0E3RTMwMEYzQy8wLzMyMzAzMDJlMzEzMDM4MmUzMTM0MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM0Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADI
bJEwDQYJKoZIhvcNAQELBQADggEBADppmqP1b/vzfA1S8qv09maFWYLSLn9vQVxa
AGuYnE5CeT+yUW4wtnh+5J1ATYVvXeRC/oOw+pWAxWJFzREZ1O7XcfTq3WnttGUH
wJf9WnP3o2n61xa1jbiYBOnYY+6l/sYgAdCxT2UWnZFmKtY9M+v7WdegEhPnlK5f
96fN4pkHU8IvVwhCTEZW/jUhdi1C3OKBF9hk3KPjeLUT+e7ZeJhA+lw3I3jJo9t8
V528Z4c270RFdvwwGVdmGkdhxD+3Alro4nJ4eeHnf/D9oiqAUkaaBY6J13XTXNup
zyWadT/A91icgh1KPR2pcZwqUqVaSImHI00IqZHigOPCJfJTPkg=
-----END CERTIFICATE-----
Generated at Tue Oct 20 03:38:37 2026 by rpki-client