Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135362e302f32342d3234203d3e20323636363630.roa
File:                     3230302e38352e3135362e302f32342d3234203d3e20323636363630.roa (raw, json)
Hash identifier:          7BAA81BLNlifJY26nNxqxhxeMnrfVZ6/OZNrHddLwhA=
Subject key identifier:   DF:CC:6E:AD:C7:29:FE:75:FE:F4:2E:0F:A5:39:49:15:00:2F:83:F6
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       6FA8A611978CF699B1397754C8F3BFFF990C17B4
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135362e302f32342d3234203d3e20323636363630.roa
Signing time:             Tue 29 Sep 2026 16:15:00 +0000
ROA not before:           Tue 29 Sep 2026 16:10:00 +0000
ROA not after:            Tue 28 Sep 2027 16:15:00 +0000
asID:                     266660
IP address blocks:        200.85.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a8:a6:11:97:8c:f6:99:b1:39:77:54:c8:f3:bf:ff:99:0c:17:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Sep 29 16:10:00 2026 GMT
            Not After : Sep 28 16:15:00 2027 GMT
        Subject: CN=DFCC6EADC729FE75FEF42E0FA5394915002F83F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:d3:3c:c5:ba:93:47:c7:cf:a1:2f:f0:bb:
                    a9:e3:5a:49:b1:ea:37:c4:22:5b:8f:7e:aa:25:6e:
                    c7:f5:8b:23:35:6a:c9:50:a3:11:9c:fa:70:5d:99:
                    d9:cd:93:9a:ee:ba:a8:bc:33:1a:e3:56:03:b1:46:
                    4f:13:9e:6d:e3:8c:bd:41:78:40:cc:13:33:03:5e:
                    e2:1d:b6:e6:88:f3:a1:a7:d6:23:2a:9a:e7:0c:d8:
                    04:4d:a2:49:89:eb:44:90:67:c7:05:fb:c4:39:34:
                    b0:86:87:a9:6a:35:5e:a2:13:7b:44:b4:9f:b4:bd:
                    a9:77:46:d2:76:af:bb:8f:cb:c4:bd:83:3c:fb:83:
                    be:c0:53:7f:28:22:07:71:cb:2c:88:b4:87:36:56:
                    20:2f:5a:66:6b:8e:93:d3:49:6d:da:29:fd:30:50:
                    c1:d6:ab:00:62:87:45:0b:d2:fe:cb:1f:c3:a1:ae:
                    84:98:c5:1f:b6:b0:30:e3:80:04:73:2b:c3:49:18:
                    d0:84:b9:1a:ba:09:d6:a4:f9:d6:89:31:6f:04:e3:
                    01:ae:5f:cc:d2:62:f4:9d:f9:00:90:2f:91:36:40:
                    03:2b:b3:12:86:9b:cd:72:40:2d:9e:f3:7c:71:12:
                    64:23:25:8c:fc:e9:b2:c6:7d:9d:ff:32:b0:35:96:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CC:6E:AD:C7:29:FE:75:FE:F4:2E:0F:A5:39:49:15:00:2F:83:F6
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135362e302f32342d3234203d3e20323636363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:cb:90:40:1e:d6:88:20:9f:b4:30:c4:a1:30:95:ac:ea:82:
         38:64:66:62:54:92:7c:a4:26:77:dc:2b:f1:f3:84:2b:34:ec:
         51:e1:d4:18:25:e0:66:18:47:46:4c:d0:8e:4d:fc:76:6d:8c:
         85:90:f2:b8:05:56:80:fb:51:5d:57:b5:ce:24:a8:3d:ed:60:
         2f:ca:80:c5:f8:21:60:a0:54:89:7d:9c:25:85:60:14:a5:cb:
         66:1f:ac:9a:a5:4d:06:e2:84:fd:f0:b6:8e:24:52:1d:87:bb:
         da:bc:9e:b6:1e:5a:6b:74:f4:c5:1f:96:6a:33:c6:65:40:cb:
         6a:6b:f2:d0:7f:eb:df:6a:97:69:e9:fe:26:2a:e9:16:7c:30:
         ff:24:46:53:05:d0:19:b9:29:10:00:80:be:b9:12:bd:61:8d:
         d8:df:b8:d4:79:ec:75:82:3c:a9:3a:ca:ec:e3:2d:4b:48:e0:
         71:ac:98:4c:1c:31:2c:f4:df:c5:b0:bb:67:7c:56:50:bf:e2:
         ff:73:19:1c:e9:e9:a6:04:48:54:dc:b9:4f:53:f9:18:c6:45:
         cf:5a:19:c1:41:a2:8d:02:64:b1:65:dd:d8:33:9d:85:e7:ed:
         74:71:37:f1:24:ed:21:bc:a6:10:52:08:e4:fa:48:29:9b:b4:
         67:53:49:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:08:57 2026 by rpki-client