Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS16550.roa
File:                     AS16550.roa (raw, json)
Hash identifier:          HMwk1mR6dhmZde7605wKc9AuI10jFCKsePRkVQ/Af1U=
Subject key identifier:   81:A4:1E:0E:71:46:64:E9:89:B9:39:6C:97:C3:03:A5:C9:7A:58:BE
Certificate issuer:       /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial:       15C1D2F329E7D3DFBD68DD47EF80B04064BCB009
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS16550.roa
Signing time:             Thu 05 Feb 2026 21:55:00 +0000
ROA not before:           Thu 05 Feb 2026 21:50:00 +0000
ROA not after:            Thu 04 Feb 2027 21:55:00 +0000
asID:                     16550
IP address blocks:        200.107.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c1:d2:f3:29:e7:d3:df:bd:68:dd:47:ef:80:b0:40:64:bc:b0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
        Validity
            Not Before: Feb  5 21:50:00 2026 GMT
            Not After : Feb  4 21:55:00 2027 GMT
        Subject: CN=81A41E0E714664E989B9396C97C303A5C97A58BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:a7:9f:fa:d2:39:32:ac:5d:23:5f:6d:d1:
                    08:39:4a:23:81:dc:f2:59:7c:5b:d4:14:7b:4b:11:
                    60:8d:cd:8e:4c:d4:d2:1b:15:f9:25:06:0a:22:47:
                    10:91:4d:a3:5f:3b:c0:20:d5:b7:b6:ec:23:69:31:
                    ff:79:cd:a3:94:0d:74:05:89:8c:c1:d2:0e:09:4b:
                    be:92:86:53:64:8a:64:67:e4:07:4e:f4:c5:70:ed:
                    5e:6a:0f:5a:8e:1d:a4:3b:10:d0:7e:26:71:79:c1:
                    67:ff:77:df:b9:ea:a1:3c:f1:b7:eb:39:7e:03:04:
                    05:a0:0a:24:6b:5d:be:5f:63:4f:57:72:84:bb:ba:
                    81:61:bf:c1:5d:a0:bc:fa:5f:fc:05:1c:2c:3b:a0:
                    7f:1b:21:d1:5c:93:f2:eb:06:25:b6:a6:72:cf:37:
                    b6:5a:d3:3d:df:41:5a:b9:97:85:78:d4:d9:8d:a6:
                    60:9f:8e:3f:5c:45:28:c3:0c:03:8a:34:2b:99:d0:
                    21:17:81:69:8b:50:1a:eb:1b:0a:ab:7b:71:57:96:
                    7c:c1:e4:c0:19:f4:1b:cf:76:a9:1e:9b:b9:fb:7b:
                    81:de:ed:e1:9d:65:12:7c:47:c1:19:a8:00:8c:ee:
                    02:d8:63:8f:cd:d1:59:42:68:67:b2:7a:c1:76:8a:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:1E:0E:71:46:64:E9:89:B9:39:6C:97:C3:03:A5:C9:7A:58:BE
            X509v3 Authority Key Identifier:
                keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS16550.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         65:0e:22:76:2e:8f:40:b3:b8:f0:c7:5a:1b:e4:b7:f7:c6:91:
         4b:ae:33:d0:12:95:50:53:8f:ff:2a:0c:8a:a0:cc:8e:ba:b2:
         c5:21:89:90:f8:d5:33:c5:f7:77:74:b6:15:09:c2:3b:a5:da:
         13:ba:d2:af:c9:2d:00:5b:2e:cd:2f:78:ca:c1:79:cc:e6:89:
         2e:1f:c3:88:a7:20:af:d6:ea:ce:40:ba:29:14:1a:e6:2a:10:
         1e:a9:43:78:d4:0e:38:83:a5:db:99:a6:4e:32:26:f5:58:c2:
         91:4b:10:49:3c:05:af:94:9e:4c:92:3a:a1:90:26:db:f5:c9:
         ea:49:a9:80:5c:ac:45:cb:c7:8d:0c:ed:fe:9a:01:ab:c4:63:
         fb:00:c0:66:6c:6e:fb:db:c7:f0:62:70:91:9b:ce:ea:81:a2:
         93:31:a5:2e:c3:9f:86:24:03:01:d4:8c:77:35:73:01:4f:af:
         ea:60:fb:74:c2:05:c9:c4:f5:3e:86:74:ed:44:0c:0e:5e:cf:
         40:03:ff:24:6c:6b:e1:a5:3b:b2:7b:c9:9f:dd:6e:13:15:f9:
         bf:6e:b0:7b:87:54:2f:5a:0d:b3:d4:ea:43:d6:b1:51:6e:17:
         15:fc:ee:b5:12:31:a6:1a:bc:6f:4b:ce:51:3f:a5:a6:5b:30:
         9e:e5:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:51:30 2026 by rpki-client