Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3232342e302f32342d3234203d3e203237373534.roa
File:                     3230302e38302e3232342e302f32342d3234203d3e203237373534.roa (raw, json)
Hash identifier:          IKXLy1C9cYGtamnhgcYOn2KKTVBME2WIckATDmomBWc=
Subject key identifier:   E0:A8:DC:11:35:0E:C4:03:7F:A4:C8:3B:72:98:8B:B7:9F:F7:12:50
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       2D6BC9396153E4B819C0BFFE5B94F8D6F593C2F8
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3232342e302f32342d3234203d3e203237373534.roa
Signing time:             Tue 06 Jan 2026 19:06:17 +0000
ROA not before:           Tue 06 Jan 2026 19:01:17 +0000
ROA not after:            Tue 05 Jan 2027 19:06:17 +0000
asID:                     27754
IP address blocks:        200.80.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 03:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6b:c9:39:61:53:e4:b8:19:c0:bf:fe:5b:94:f8:d6:f5:93:c2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Jan  6 19:01:17 2026 GMT
            Not After : Jan  5 19:06:17 2027 GMT
        Subject: CN=E0A8DC11350EC4037FA4C83B72988BB79FF71250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:39:3e:2c:31:ba:dd:80:87:79:f1:15:70:
                    85:13:6e:14:5d:79:fd:f5:46:26:12:cc:04:b2:06:
                    0f:b1:c7:00:d3:4e:d3:9c:38:b8:43:8c:5e:45:28:
                    d7:a1:d9:b1:69:83:27:d0:ed:9e:52:2f:66:63:17:
                    bf:49:e1:ae:f6:12:0c:71:dc:68:06:71:cc:8b:4c:
                    d5:ca:bf:22:77:04:54:95:1a:a3:0e:7b:38:51:fd:
                    d0:e4:60:6a:02:69:e5:d0:62:1f:0a:d8:c2:d6:e1:
                    37:d7:7a:fa:89:8f:a0:78:1e:2d:e0:88:fe:df:14:
                    ef:59:86:83:e0:ff:6d:93:63:07:b6:9d:98:36:1b:
                    c4:32:1e:01:04:4f:dc:fa:49:53:ef:09:72:35:7b:
                    cc:46:ac:4f:9f:05:8f:db:e2:4a:f0:cb:73:1d:f3:
                    5b:16:5b:d5:69:12:1d:31:06:ae:95:d0:25:41:1c:
                    a8:93:b6:40:37:5c:bb:ac:64:f8:b2:77:0b:7e:c6:
                    5c:52:2e:e1:ac:12:a7:f8:19:22:ff:7d:cb:22:bf:
                    f7:55:16:91:5f:2e:18:aa:07:96:fe:ea:f2:0d:f8:
                    c5:6c:ca:f5:7a:f0:3f:9d:a8:c1:36:0c:81:74:2b:
                    2f:bc:7b:bf:95:98:55:78:0c:90:59:f5:47:8f:4c:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A8:DC:11:35:0E:C4:03:7F:A4:C8:3B:72:98:8B:B7:9F:F7:12:50
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e38302e3232342e302f32342d3234203d3e203237373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:37:da:7c:46:ab:1f:52:ab:76:2c:f0:1b:74:1c:80:8b:12:
         33:21:a3:53:1a:ef:d2:bb:04:56:95:59:62:31:bb:58:11:e0:
         c9:9c:8f:dd:99:5c:46:32:7e:0d:8f:aa:f9:41:6e:40:b1:11:
         06:4b:14:01:bf:00:6f:5a:3b:b7:0f:ce:de:7a:c3:ca:f4:99:
         09:c5:54:5f:6e:df:c3:89:3d:af:10:3a:45:98:43:c6:d1:95:
         dd:c9:7d:53:32:cd:5f:c6:de:df:23:a7:e7:2d:18:39:72:dc:
         18:3c:4b:a3:9e:31:94:60:30:0f:d2:03:3f:9c:ac:8f:e7:0a:
         fe:d2:61:e1:20:bd:33:15:3d:22:4a:f4:69:e4:52:6b:c8:2d:
         69:33:6c:36:a8:16:9d:c5:20:99:59:54:c0:85:b0:9a:67:88:
         ea:47:20:cb:7b:b4:f6:c5:72:9d:13:60:f7:26:db:df:8a:9d:
         fb:23:0f:00:eb:24:0a:e8:9e:8f:c6:b6:21:d7:bc:5f:73:dd:
         b7:bb:a5:3e:f5:30:b0:3e:04:d9:78:c2:ba:ec:70:6c:3e:3f:
         51:56:26:1b:0e:6e:1a:ef:33:6e:ad:c9:e2:b1:6d:06:4d:39:
         31:0f:79:42:68:5d:02:93:54:44:70:db:2d:01:fc:72:cb:af:
         07:17:15:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:59:37 2026 by rpki-client