Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e3131302e34382e302f32302d3234203d3e203237383832.roa
File:                     3230302e3131302e34382e302f32302d3234203d3e203237383832.roa (raw, json)
Hash identifier:          sbJEzd/FWBDup4KVzsNqBjJg0UYwCBHEIEoRfKTvA/E=
Subject key identifier:   FE:FA:59:5C:5F:95:18:77:34:C5:9E:CF:06:D9:BA:52:6A:2E:88:19
Certificate issuer:       /CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Certificate serial:       7D84B88BAA0B2C8188119AE30214063E793C9E48
Authority key identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e3131302e34382e302f32302d3234203d3e203237383832.roa
Signing time:             Fri 13 Feb 2026 15:30:22 +0000
ROA not before:           Fri 13 Feb 2026 15:25:22 +0000
ROA not after:            Fri 12 Feb 2027 15:30:22 +0000
asID:                     27882
IP address blocks:        200.110.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 22:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:84:b8:8b:aa:0b:2c:81:88:11:9a:e3:02:14:06:3e:79:3c:9e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
        Validity
            Not Before: Feb 13 15:25:22 2026 GMT
            Not After : Feb 12 15:30:22 2027 GMT
        Subject: CN=FEFA595C5F95187734C59ECF06D9BA526A2E8819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:e0:3e:b6:d1:38:4a:53:1f:5d:46:d2:8b:
                    a1:09:5d:09:57:fa:2b:23:56:b2:08:5d:72:c6:7f:
                    55:f9:47:a6:60:40:90:92:3d:f0:18:d9:b6:f7:9b:
                    02:09:a9:20:e5:1b:a2:ac:e9:cd:30:92:b8:0c:a0:
                    82:fc:c2:c1:c2:02:ae:1e:91:b2:89:15:7d:7f:8a:
                    bc:45:0e:90:0c:17:3c:03:39:76:a8:a5:bd:e4:60:
                    fb:7d:24:2c:97:43:05:7b:44:7b:52:8b:04:3f:1a:
                    98:39:d3:1d:ac:e2:c8:72:86:92:38:90:5c:40:7d:
                    56:d0:29:21:1b:62:ba:d0:f4:7c:4d:ac:70:46:6d:
                    1f:2d:69:05:fc:40:56:65:8a:fc:7a:07:28:3b:3b:
                    21:9f:c5:51:42:95:0f:5c:17:72:7f:ff:58:d8:98:
                    0d:30:f5:7e:e3:81:6d:66:f4:40:be:b6:36:a6:27:
                    b4:e0:fc:a3:1e:0a:a4:6c:fb:a0:0e:01:e4:d4:64:
                    1f:16:d4:c4:63:5f:b5:3a:f0:29:5d:a1:20:f8:64:
                    3d:e5:12:66:37:75:32:d5:e4:19:88:45:3b:f1:18:
                    41:26:10:bc:56:98:fd:4c:3b:a9:e7:ea:5e:e9:92:
                    cf:a4:9c:2c:52:58:5c:34:27:bb:4c:df:7d:59:52:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FA:59:5C:5F:95:18:77:34:C5:9E:CF:06:D9:BA:52:6A:2E:88:19
            X509v3 Authority Key Identifier:
                keyid:EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e3131302e34382e302f32302d3234203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:c0:f7:a3:07:bd:b3:fe:72:ce:07:ed:bc:a5:d8:97:b2:
         51:d7:e2:89:53:e4:91:90:6a:47:ce:54:32:a1:af:07:6b:5f:
         5b:67:26:27:23:bf:f7:f9:7c:55:8c:5d:e5:aa:80:81:ac:10:
         53:b6:3c:e6:b0:2b:d0:f1:bd:bf:af:36:94:7a:51:af:25:25:
         f7:2a:4f:63:86:8c:a6:8e:92:bb:5b:0f:ff:b5:80:07:3c:1a:
         50:9a:93:6f:be:dc:c9:7d:8d:94:f7:84:ba:19:95:c8:59:74:
         2c:08:58:6c:01:5b:ae:ad:32:33:93:bb:20:73:f7:81:79:a1:
         26:14:b1:cb:fa:f0:a5:73:c7:f4:e3:85:eb:fc:1f:46:c5:90:
         d0:a7:f5:d6:85:ab:71:ac:17:43:ee:74:ec:5e:4b:63:e7:8f:
         0e:18:5a:78:07:de:13:6c:e6:cf:98:be:53:b7:52:0d:a3:4c:
         b9:e9:70:04:31:b9:6f:95:ca:09:3b:2b:19:2e:27:ed:ef:82:
         38:a2:9a:4a:be:7b:44:bd:77:1c:ba:57:78:b4:63:dd:2e:18:
         b1:3a:48:62:22:80:35:1c:04:11:18:01:95:ab:c5:98:76:58:
         8e:9d:aa:9f:9c:db:26:07:cf:cb:9d:ca:f2:92:ec:fe:24:02:
         08:8f:50:33
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfYS4i6oLLIGIEZrjAhQGPnk8nkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxRjA2OEFBNTdCQkY4OUJBM0Q3RDVBRDMyQTkzRUM0
NDdEQzU3QjAeFw0yNjAyMTMxNTI1MjJaFw0yNzAyMTIxNTMwMjJaMDMxMTAvBgNV
BAMTKEZFRkE1OTVDNUY5NTE4NzczNEM1OUVDRjA2RDlCQTUyNkEyRTg4MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdAuA+ttE4SlMfXUbSi6EJXQlX
+isjVrIIXXLGf1X5R6ZgQJCSPfAY2bb3mwIJqSDlG6Ks6c0wkrgMoIL8wsHCAq4e
kbKJFX1/irxFDpAMFzwDOXaopb3kYPt9JCyXQwV7RHtSiwQ/Gpg50x2s4shyhpI4
kFxAfVbQKSEbYrrQ9HxNrHBGbR8taQX8QFZlivx6Byg7OyGfxVFClQ9cF3J//1jY
mA0w9X7jgW1m9EC+tjamJ7Tg/KMeCqRs+6AOAeTUZB8W1MRjX7U68CldoSD4ZD3l
EmY3dTLV5BmIRTvxGEEmELxWmP1MO6nn6l7pks+knCxSWFw0J7tM331ZUi6hAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/vpZXF+VGHc0xZ7PBtm6UmouiBkwHwYDVR0j
BBgwFoAU7B8GiqV7v4m6PX1a0yqT7ER9xXswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NENBN0JDNzI3OEM3Mzg5RkU4MUUyQTc2OUE5NTBCMzAz
Mjg0RTlDMURFOTNCMTY0OUIyNjFDM0MwOTk0NzYwLzAvRUMxRjA2OEFBNTdCQkY4
OUJBM0Q3RDVBRDMyQTkzRUM0NDdEQzU3Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzFGMDY4QUE1N0JCRjg5QkEz
RDdENUFEMzJBOTNFQzQ0N0RDNTdCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTRDQTdCQzcyNzhDNzM4OUZFODFFMkE3NjlBOTUwQjMwMzI4NEU5QzFE
RTkzQjE2NDlCMjYxQzNDMDk5NDc2MC8wLzMyMzAzMDJlMzEzMTMwMmUzNDM4MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNzM4MzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMhuMDAN
BgkqhkiG9w0BAQsFAAOCAQEAE27A96MHvbP+cs4H7byl2JeyUdfiiVPkkZBqR85U
MqGvB2tfW2cmJyO/9/l8VYxd5aqAgawQU7Y85rAr0PG9v682lHpRryUl9ypPY4aM
po6Su1sP/7WABzwaUJqTb77cyX2NlPeEuhmVyFl0LAhYbAFbrq0yM5O7IHP3gXmh
JhSxy/rwpXPH9OOF6/wfRsWQ0Kf11oWrcawXQ+507F5LY+ePDhhaeAfeE2zmz5i+
U7dSDaNMuelwBDG5b5XKCTsrGS4n7e+COKKaSr57RL13HLpXeLRj3S4YsTpIYiKA
NRwEERgBlavFmHZYjp2qn5zbJgfPy53K8pLs/iQCCI9QMw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:16:21 2026 by rpki-client