Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39362e302f32322d3234203d3e20323632313931.roa
File:                     3230312e3135302e39362e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          3islOv+eZvFgeatOBovVfiQYBPItMPGqA6gVBXL4Y7Y=
Subject key identifier:   07:3F:48:58:C7:2D:59:4E:33:0D:78:51:C7:67:A6:B7:FD:EC:FB:F0
Certificate issuer:       /CN=6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF
Certificate serial:       33EABB603C173A8ED02667D7C14C57779707C16B
Authority key identifier: 6F:E8:D9:F3:26:C9:49:74:AC:24:CD:1C:C7:5E:4E:49:EF:AF:1C:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39362e302f32322d3234203d3e20323632313931.roa
Signing time:             Tue 10 Feb 2026 19:30:03 +0000
ROA not before:           Tue 10 Feb 2026 19:25:03 +0000
ROA not after:            Tue 09 Feb 2027 19:30:03 +0000
asID:                     262191
IP address blocks:        201.150.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ea:bb:60:3c:17:3a:8e:d0:26:67:d7:c1:4c:57:77:97:07:c1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF
        Validity
            Not Before: Feb 10 19:25:03 2026 GMT
            Not After : Feb  9 19:30:03 2027 GMT
        Subject: CN=073F4858C72D594E330D7851C767A6B7FDECFBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:0d:8b:da:a0:2c:03:09:d3:77:36:04:70:
                    71:4c:84:12:d3:94:26:1c:69:01:9a:25:c6:ef:f2:
                    19:08:99:b7:d2:9f:16:e8:b5:a0:0a:b1:1b:aa:56:
                    24:99:16:46:6f:4c:d4:0a:08:8c:14:72:40:cc:48:
                    3e:27:20:89:47:73:15:6b:d9:9b:a8:31:bd:65:31:
                    7d:22:9e:9b:c3:e1:1d:08:d7:ef:cb:6a:3d:48:91:
                    b5:37:7b:51:29:fc:9f:eb:63:f1:ac:40:7c:0c:2a:
                    79:d5:04:27:f7:1a:f5:0e:e7:53:c0:27:ca:5a:63:
                    7f:70:c8:4f:c0:ed:df:32:f6:70:ab:0e:e7:31:3b:
                    a1:0b:97:d8:c0:00:f9:e8:22:4a:c5:92:ae:45:fa:
                    ef:df:a7:66:34:26:87:45:89:5b:fb:96:67:9c:ec:
                    f2:84:c4:ea:cd:b7:66:5e:d4:4b:1f:48:27:36:80:
                    10:d3:e3:1a:d3:02:d8:a0:40:c9:8a:0b:4a:80:e8:
                    12:e3:06:56:f9:65:4d:af:07:c2:21:10:5c:99:e8:
                    1b:04:3f:6b:04:3f:22:1b:1e:61:9b:09:4a:f6:d6:
                    19:a6:f6:e4:04:4b:e4:f6:70:10:bc:0d:28:19:fb:
                    49:13:63:b2:1c:0f:d5:a8:63:6e:52:4d:f2:c3:6a:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3F:48:58:C7:2D:59:4E:33:0D:78:51:C7:67:A6:B7:FD:EC:FB:F0
            X509v3 Authority Key Identifier:
                keyid:6F:E8:D9:F3:26:C9:49:74:AC:24:CD:1C:C7:5E:4E:49:EF:AF:1C:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39362e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:b0:7a:6c:b0:2e:22:25:11:fb:ac:19:49:1b:09:5a:8f:93:
         40:20:fa:b1:e0:36:b5:ca:43:ec:60:05:3c:d9:57:7f:27:06:
         4c:66:7a:51:0a:e2:4b:0d:bb:9b:f6:e1:f3:5f:63:a4:f1:19:
         62:fa:e0:38:4a:d7:cb:00:26:93:b7:c9:10:5e:00:6c:b5:74:
         21:c4:b3:59:e3:57:3c:d7:ea:df:8d:b6:64:1d:f5:98:ba:92:
         20:21:46:b3:6d:5c:2f:40:57:ef:b2:8c:da:2c:90:f4:70:c4:
         83:28:4d:ad:c6:79:59:97:9e:5b:2e:d5:fa:4d:51:04:20:12:
         b0:78:8b:66:d9:ad:7a:af:73:f4:b1:a6:cd:a4:59:1b:b5:57:
         da:1c:d5:94:b0:df:8f:3e:19:31:e4:d5:1c:f0:34:7d:ad:60:
         a4:02:bc:b1:e0:77:ff:21:9a:9a:95:29:b7:ac:2d:08:16:bb:
         cc:f4:c4:42:b4:ef:b7:7d:25:5b:95:9d:7a:27:4a:4e:29:c8:
         ff:2e:d2:f3:50:1f:3d:62:24:cc:da:b8:4f:17:12:6e:67:93:
         b3:d6:c9:8c:f7:2d:4b:c4:a3:cd:7e:d8:90:56:24:20:c7:44:
         78:0d:9b:1d:36:92:37:dc:b1:9c:48:e7:4f:a9:19:a9:15:17:
         50:3a:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:37:08 2026 by rpki-client