Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e203631343638.roa
File:                     3230302e312e3131322e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          gcS5mKh0w0LBMJPqB8O7PhbhAWH96himkgJ/O27wh2k=
Subject key identifier:   99:FA:97:63:AD:C8:F3:F8:94:4A:92:45:4D:08:03:DA:C4:F9:67:CE
Certificate issuer:       /CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
Certificate serial:       413D708AA4318785020E97AF0D5598B28FB16996
Authority key identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e203631343638.roa
Signing time:             Fri 06 Feb 2026 21:29:27 +0000
ROA not before:           Fri 06 Feb 2026 21:24:27 +0000
ROA not after:            Fri 05 Feb 2027 21:29:27 +0000
asID:                     61468
IP address blocks:        200.1.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 22:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3d:70:8a:a4:31:87:85:02:0e:97:af:0d:55:98:b2:8f:b1:69:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
        Validity
            Not Before: Feb  6 21:24:27 2026 GMT
            Not After : Feb  5 21:29:27 2027 GMT
        Subject: CN=99FA9763ADC8F3F8944A92454D0803DAC4F967CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:62:6a:6d:c1:96:8d:06:96:92:d2:d4:5c:
                    91:74:36:fe:80:f1:9a:b2:f7:51:91:2d:1c:63:ef:
                    92:5b:1b:b2:71:cc:b0:73:0b:d0:ff:2f:59:00:c6:
                    bc:49:39:91:35:f1:1f:49:61:bf:d3:12:f3:f1:cd:
                    c4:ff:9e:1f:c2:64:6b:17:2e:7f:79:af:c7:20:e5:
                    e4:ca:20:da:68:e2:26:2c:37:dc:de:c0:10:1f:a2:
                    87:a3:bb:ff:1d:c4:dc:b2:5d:c0:92:37:2b:25:33:
                    71:48:ac:d4:3e:5a:63:45:6a:77:68:17:12:74:d0:
                    ae:01:f5:64:46:20:f7:7c:67:2b:ec:06:fa:ce:fc:
                    2f:d9:a2:d0:01:3b:bd:e7:44:dd:a7:e7:c4:a4:86:
                    b9:36:57:4c:b0:b7:df:06:53:65:8f:d5:c5:00:b4:
                    65:11:2a:ec:cb:bf:89:e6:44:f9:ac:6c:09:f0:17:
                    4b:49:7a:09:26:9a:76:5c:29:84:eb:b3:54:a8:22:
                    26:31:d4:30:25:8e:91:64:bb:78:1a:7a:ed:9e:60:
                    11:38:3e:b5:c8:6e:07:71:75:f5:92:19:87:09:70:
                    60:3a:5a:d8:7f:76:ea:cb:3d:3c:0b:01:fc:78:43:
                    e2:9c:c1:f5:b2:05:37:bd:de:bf:31:6d:08:dd:86:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FA:97:63:AD:C8:F3:F8:94:4A:92:45:4D:08:03:DA:C4:F9:67:CE
            X509v3 Authority Key Identifier:
                keyid:FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/3230302e312e3131322e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:58:10:06:26:62:93:d5:30:65:1a:b0:9b:0f:17:c4:a7:
         7b:50:db:47:97:00:37:78:66:fc:65:f8:8c:03:93:53:09:97:
         29:a5:4e:49:06:3b:e3:2c:b0:c3:82:7d:1b:6c:ca:bf:2f:6e:
         96:b2:7d:0c:58:fe:41:18:ca:d1:cf:f1:29:0f:0b:53:4a:75:
         64:80:0d:9b:12:5c:d0:ac:5d:e2:e6:a0:8d:2e:49:a7:a4:ec:
         74:3f:27:eb:83:54:e9:3a:6b:df:3c:5c:d5:3e:83:f2:9d:a8:
         d1:25:2a:55:73:ae:c2:3d:0f:42:a2:49:f5:f1:b0:0f:60:81:
         b7:c0:b6:f2:cd:cf:d3:89:f2:0c:ef:4a:18:36:3d:ff:fa:a0:
         69:20:46:07:6b:06:ed:b5:97:96:df:b5:46:d1:f5:c4:94:09:
         57:fe:b0:05:90:db:46:fe:46:db:04:0d:af:d8:4c:a0:eb:7d:
         f0:f0:e7:b4:d9:b9:57:5a:fa:a8:57:80:dd:bd:20:6b:8b:20:
         de:1e:9c:95:70:fe:6b:18:d6:00:bd:05:f3:98:fa:1b:30:3a:
         18:04:29:b9:53:fc:4a:8b:ed:b4:26:5c:d0:c8:54:dc:8a:1e:
         b6:0a:f0:77:12:f4:09:5e:9f:4f:66:aa:a2:6c:a8:ab:a1:18:
         44:06:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:31:27 2026 by rpki-client