Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135342e302f32342d3234203d3e203532323730.roa
File:                     3230302e38352e3135342e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          XK5u5X0qWHkpD3dz5wxC930kahpz013uH9fl3ms4pTE=
Subject key identifier:   81:DF:02:69:75:3E:61:98:53:8E:39:9B:58:6A:9F:FE:39:AB:31:E8
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       2AB22735A37DE421689B283272EC63B13B8A5736
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135342e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 14 Oct 2026 20:40:24 +0000
ROA not before:           Wed 14 Oct 2026 20:35:24 +0000
ROA not after:            Wed 13 Oct 2027 20:40:24 +0000
asID:                     52270
IP address blocks:        200.85.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b2:27:35:a3:7d:e4:21:68:9b:28:32:72:ec:63:b1:3b:8a:57:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Oct 14 20:35:24 2026 GMT
            Not After : Oct 13 20:40:24 2027 GMT
        Subject: CN=81DF0269753E6198538E399B586A9FFE39AB31E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:20:74:54:e6:45:0a:68:83:a0:2a:49:9c:73:
                    f6:e1:b2:c9:ef:73:99:dd:62:02:3b:6d:ca:4e:8b:
                    51:af:33:2e:44:86:79:54:0f:a4:f2:9f:74:e4:56:
                    cb:f9:f6:14:07:de:09:93:52:f5:9c:9d:6e:5f:fb:
                    99:96:b7:16:d1:d2:3d:f0:d8:7a:e8:c6:09:e9:ce:
                    6e:4e:aa:56:7d:7f:cb:8f:9e:a4:fb:97:fe:de:f6:
                    92:7b:20:8f:f2:57:9b:c2:8d:d0:fe:b7:09:eb:4b:
                    ad:a5:28:d1:8e:a5:32:db:0e:a8:a2:dd:69:72:1d:
                    6e:0a:39:5f:a0:1f:ac:45:4c:3f:9b:84:b1:83:fd:
                    c5:3c:fa:91:8b:65:9b:a6:0c:9d:9a:ed:78:27:58:
                    c8:06:25:f0:fa:60:e4:b9:d2:b7:c1:c2:f4:1a:31:
                    56:f1:f6:26:36:70:84:ca:c7:22:47:82:d8:3a:09:
                    cd:ac:db:bd:4d:d1:54:da:ec:d5:ef:25:f9:69:0b:
                    f2:f6:04:90:01:8f:0b:12:e1:7c:15:5e:75:92:09:
                    9a:f4:a9:97:f6:f6:10:f9:b2:f1:22:d0:90:5c:89:
                    89:e8:8b:57:e8:be:b8:4e:6f:8b:a3:49:de:f9:76:
                    00:39:3c:38:3e:e2:d1:c8:0b:02:2f:77:38:5c:5b:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DF:02:69:75:3E:61:98:53:8E:39:9B:58:6A:9F:FE:39:AB:31:E8
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135342e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:ed:a9:97:b3:f0:e0:6a:6a:97:37:b4:9f:71:ec:98:26:
         35:4e:18:9a:ce:d9:c9:87:d8:e9:15:2b:41:28:c3:3f:91:22:
         4f:73:b7:47:b8:c8:2b:40:a7:4c:39:81:80:54:02:10:50:67:
         52:48:fe:b0:8d:f6:f1:3f:75:6c:b1:76:b6:2a:66:1d:38:58:
         92:4b:b0:7a:f3:67:a8:b3:d9:12:5f:c4:53:97:0e:8a:28:3c:
         44:95:94:dd:e9:74:a1:1f:9a:4a:a9:9e:94:1d:5d:84:03:3b:
         ce:06:ae:c4:32:14:94:7c:c5:01:46:d7:db:c4:ec:25:38:49:
         d3:cd:84:2e:b5:a7:49:0a:33:d4:1c:b7:e2:fa:9d:e3:c3:f2:
         6b:7d:1c:29:46:2d:f4:7f:cc:3e:3f:ca:9d:61:fc:40:ad:f4:
         8b:8b:1b:83:49:15:51:56:20:79:31:54:62:80:1b:50:1c:a3:
         28:a8:9a:14:7e:55:cf:6e:d6:8d:b8:e7:cd:b3:21:b3:80:c8:
         e9:0c:b5:34:d6:2e:9f:b2:b8:44:1f:83:a4:06:f2:e6:ca:91:
         12:1e:78:07:dc:a0:c7:3d:2f:00:d8:73:b7:7e:9b:09:07:dc:
         10:7d:0c:ac:bc:c2:09:74:aa:16:ca:81:e7:a6:f3:72:9b:a0:
         f4:06:2d:98
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKrInNaN95CFomygycuxjsTuKVzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3MzVFMTk5Rjk3NkUwQ0IxQkExOERBMzI5RTZFNEE3
NzhCRDAwOTAeFw0yNjEwMTQyMDM1MjRaFw0yNzEwMTMyMDQwMjRaMDMxMTAvBgNV
BAMTKDgxREYwMjY5NzUzRTYxOTg1MzhFMzk5QjU4NkE5RkZFMzlBQjMxRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmIHRU5kUKaIOgKkmcc/bhssnv
c5ndYgI7bcpOi1GvMy5EhnlUD6Tyn3TkVsv59hQH3gmTUvWcnW5f+5mWtxbR0j3w
2Hroxgnpzm5OqlZ9f8uPnqT7l/7e9pJ7II/yV5vCjdD+twnrS62lKNGOpTLbDqii
3WlyHW4KOV+gH6xFTD+bhLGD/cU8+pGLZZumDJ2a7XgnWMgGJfD6YOS50rfBwvQa
MVbx9iY2cITKxyJHgtg6Cc2s271N0VTa7NXvJflpC/L2BJABjwsS4XwVXnWSCZr0
qZf29hD5svEi0JBciYnoi1fovrhOb4ujSd75dgA5PDg+4tHICwIvdzhcW9mhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgd8CaXU+YZhTjjmbWGqf/jmrMegwHwYDVR0j
BBgwFoAUZ3NeGZ+XbgyxuhjaMp5uSneL0AkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERUIyQjNDOTQ5RTE5M0IxNkNCNjEzM0Q3NzFGMDFGMDBG
OUVGN0JCMzMwODNCMkE3OEI3NjE4MEIwQkRFNDhBLzAvNjc3MzVFMTk5Rjk3NkUw
Q0IxQkExOERBMzI5RTZFNEE3NzhCRDAwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NzczNUUxOTlGOTc2RTBDQjFC
QTE4REEzMjlFNkU0QTc3OEJEMDA5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREVCMkIzQzk0OUUxOTNCMTZDQjYxMzNENzcxRjAxRjAwRjlFRjdCQjMz
MDgzQjJBNzhCNzYxODBCMEJERTQ4QS8wLzMyMzAzMDJlMzgzNTJlMzEzNTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzczMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhVmjAN
BgkqhkiG9w0BAQsFAAOCAQEAUBztqZez8OBqapc3tJ9x7JgmNU4Yms7ZyYfY6RUr
QSjDP5EiT3O3R7jIK0CnTDmBgFQCEFBnUkj+sI328T91bLF2tipmHThYkkuwevNn
qLPZEl/EU5cOiig8RJWU3el0oR+aSqmelB1dhAM7zgauxDIUlHzFAUbX28TsJThJ
082ELrWnSQoz1By34vqd48Pya30cKUYt9H/MPj/KnWH8QK30i4sbg0kVUVYgeTFU
YoAbUByjKKiaFH5Vz27WjbjnzbMhs4DI6Qy1NNYun7K4RB+DpAby5sqREh54B9yg
xz0vANhzt36bCQfcEH0MrLzCCXSqFsqB56bzcpug9AYtmA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:52 2026 by rpki-client