Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203237393437.roa
File:                     3230302e392e3137362e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          X9NuGp6297Ck9Z1mbCk+sYbB/KrFBFZBxB11MmigUuI=
Subject key identifier:   C0:89:18:C7:81:2A:50:04:3D:E7:C1:45:5D:4A:8E:55:B6:CF:BB:3F
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       1A6FF35CC981D1C0511AF3157D16994A2F29156E
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 03 Feb 2026 20:29:02 +0000
ROA not before:           Tue 03 Feb 2026 20:24:02 +0000
ROA not after:            Tue 02 Feb 2027 20:29:02 +0000
asID:                     27947
IP address blocks:        200.9.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 03:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6f:f3:5c:c9:81:d1:c0:51:1a:f3:15:7d:16:99:4a:2f:29:15:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Feb  3 20:24:02 2026 GMT
            Not After : Feb  2 20:29:02 2027 GMT
        Subject: CN=C08918C7812A50043DE7C1455D4A8E55B6CFBB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:d9:76:d3:d5:67:c7:29:5b:c5:41:f1:df:
                    e8:74:0f:75:f9:bd:5b:6b:f3:24:14:ff:cc:14:d5:
                    98:43:9c:b2:4f:e4:5d:84:71:b0:20:11:bd:3f:93:
                    03:d0:53:51:e0:fd:66:fb:be:ae:0f:96:e9:ea:d7:
                    87:d5:a7:9e:38:ef:72:45:c4:3b:7b:17:d6:2a:97:
                    1f:db:13:b8:39:8d:d5:5f:3f:2d:e4:e8:97:58:9f:
                    de:a8:c5:ef:5c:a7:79:3d:cc:8b:84:c3:d0:43:e6:
                    54:cb:7e:db:73:71:99:07:18:bb:77:b5:97:4e:08:
                    ec:c8:8e:cf:b4:80:9a:88:c7:0f:8c:f2:73:a5:b0:
                    49:87:66:c8:12:a9:c3:a8:9b:26:b6:7f:4f:f8:b0:
                    8d:90:4f:5b:4b:9f:ce:69:95:17:63:38:f9:32:79:
                    3d:ea:4d:63:be:0e:70:ad:4d:ce:96:9f:1c:1e:f4:
                    0f:69:10:6b:6b:23:a1:b8:ba:59:c7:4f:a1:6f:1b:
                    8f:65:3f:a6:a7:ba:8f:76:24:c3:6d:9e:df:25:56:
                    d3:06:b7:27:e9:3e:66:87:91:93:e2:f2:ae:e4:68:
                    d8:58:60:37:1d:a1:e8:c1:48:47:2b:d4:a3:cf:c6:
                    83:d9:3d:44:56:79:68:55:a8:84:ea:d7:33:a9:bc:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:89:18:C7:81:2A:50:04:3D:E7:C1:45:5D:4A:8E:55:B6:CF:BB:3F
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:0a:c2:2c:62:c7:86:8b:65:5c:50:b9:44:03:44:0e:93:
         34:07:18:5e:1a:3f:86:e4:e7:d9:6f:12:db:41:49:0c:c5:c9:
         2e:d6:e2:5a:f5:d6:a6:b1:5b:bb:ec:2a:2c:d3:31:b5:74:ec:
         48:31:b8:0e:5d:9f:62:00:5e:4c:da:40:78:0e:47:8a:2d:ac:
         33:bd:0e:fe:1d:c3:42:b9:de:6e:56:5c:d1:66:11:a8:52:6d:
         0b:49:7e:7b:06:50:31:83:14:a0:c2:cb:c8:af:f2:22:92:dd:
         65:44:93:dc:f6:c3:41:0c:ce:06:27:f8:9f:06:7b:3e:62:bf:
         89:51:29:96:c9:b3:68:e5:39:62:de:ea:85:a9:6c:92:71:c4:
         74:08:c7:97:97:77:01:78:61:95:68:62:78:6d:d7:36:62:d0:
         5e:86:a6:c4:5a:8b:76:ca:1a:54:88:0e:1c:b0:af:45:4b:38:
         9c:c2:c2:80:00:2a:eb:cc:1c:f0:4c:ba:6a:3d:dc:c5:55:6d:
         fd:ac:37:4a:f6:ca:21:09:1d:bd:d3:cd:bc:40:89:2a:75:40:
         b8:5e:a1:89:3c:43:77:59:8f:25:e2:39:35:cf:7f:5e:ed:54:
         8d:0f:61:e2:19:bc:6c:2b:a6:65:92:46:6a:1a:65:15:93:31:
         c9:65:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:31 2026 by rpki-client