Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3230302e32332e3134302e302f32342d3234203d3e20323730303038.roa
File:                     3230302e32332e3134302e302f32342d3234203d3e20323730303038.roa (raw, json)
Hash identifier:          ncJDOdsS/0Al9NRJoK26DKXkKLB7JqyTeOjBG3dBSZI=
Subject key identifier:   14:81:C2:1F:93:DC:06:C7:A7:2A:D4:64:91:18:EC:92:9D:F0:0F:2E
Certificate issuer:       /CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
Certificate serial:       73D1A99217C30617CBC097816C89D2C988D59ABF
Authority key identifier: 0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3230302e32332e3134302e302f32342d3234203d3e20323730303038.roa
Signing time:             Thu 08 Jan 2026 16:59:29 +0000
ROA not before:           Thu 08 Jan 2026 16:54:29 +0000
ROA not after:            Thu 07 Jan 2027 16:59:29 +0000
asID:                     270008
IP address blocks:        200.23.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d1:a9:92:17:c3:06:17:cb:c0:97:81:6c:89:d2:c9:88:d5:9a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
        Validity
            Not Before: Jan  8 16:54:29 2026 GMT
            Not After : Jan  7 16:59:29 2027 GMT
        Subject: CN=1481C21F93DC06C7A72AD4649118EC929DF00F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:58:2c:c3:4d:f9:e2:b1:15:68:ff:c3:94:0c:
                    94:91:18:36:b5:71:c8:4f:a3:fe:a2:fc:fb:15:19:
                    13:25:45:8a:7e:2f:90:4e:f2:d9:48:22:dc:3f:03:
                    09:24:8a:c5:69:68:dc:c7:95:9a:36:de:bd:85:06:
                    53:1c:85:15:34:4d:81:19:e3:56:2d:c6:fd:10:86:
                    c3:3a:bc:8b:a5:92:98:87:49:ab:1e:de:d8:2f:e7:
                    26:ef:c3:e8:c6:1b:0a:38:fe:64:78:bf:7c:c5:55:
                    e1:14:7c:18:52:37:ae:11:f3:bb:99:f0:86:53:6f:
                    ea:4a:20:99:9b:eb:5e:9c:61:8d:46:98:3e:81:a7:
                    96:1c:80:bf:47:94:3d:b6:fa:82:b5:20:6c:66:40:
                    5d:9e:98:f0:ef:43:42:7b:0b:19:a2:06:21:aa:b8:
                    b9:e2:69:21:3d:aa:47:35:7e:3b:2a:e2:99:89:43:
                    1f:a3:7e:36:07:14:98:88:55:cd:fc:9a:06:3b:3f:
                    2a:f7:2f:d8:52:3c:41:f4:d9:18:0a:8e:2f:a2:93:
                    be:0c:6f:ea:ca:04:20:de:0e:ea:80:c9:40:cf:8c:
                    2e:0f:15:e4:fd:c5:b6:a4:44:02:10:89:b4:cd:c0:
                    0b:94:09:c0:be:53:3e:d2:0c:aa:5f:ca:9d:b5:fd:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:81:C2:1F:93:DC:06:C7:A7:2A:D4:64:91:18:EC:92:9D:F0:0F:2E
            X509v3 Authority Key Identifier:
                keyid:0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3230302e32332e3134302e302f32342d3234203d3e20323730303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:aa:ff:33:bf:40:7f:59:c4:f8:ce:29:a6:74:96:70:61:4d:
         56:ec:80:e2:39:d6:79:c9:6c:42:8f:9c:23:47:08:53:3f:4a:
         63:52:f9:17:9e:95:af:78:61:23:3e:da:73:2c:94:c9:43:ea:
         c0:c9:6b:a8:57:65:12:a2:87:c5:e7:51:7c:97:2c:86:af:23:
         05:f8:0f:02:e1:08:8e:f4:4a:e4:20:8d:49:8d:74:bc:84:ac:
         cc:72:a3:60:74:71:0a:9a:87:8e:19:c0:89:93:16:d1:ba:bb:
         df:f8:9e:d0:7d:63:4f:18:db:07:bb:a7:26:3a:fc:50:2d:43:
         32:c6:11:76:19:73:a8:a8:c3:df:b5:cc:c3:66:00:46:02:c8:
         71:c2:6c:9c:fe:c0:54:01:d0:a0:32:11:bb:41:31:14:97:0a:
         99:f1:54:d1:11:51:6e:d2:52:bc:b4:d3:e8:6a:77:2f:92:0d:
         7d:77:82:48:4a:c0:53:da:86:c1:01:d6:88:bf:b0:d1:aa:c1:
         15:b6:be:10:81:d5:da:ca:84:3c:de:5f:6f:7c:71:f2:d5:f7:
         55:3d:e2:58:a9:6d:59:52:3b:81:12:6f:cc:9d:75:0c:86:af:
         07:61:a1:ce:44:9b:7e:6b:10:2d:09:cf:f5:f4:91:e1:d7:fd:
         aa:b6:76:fd
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUc9GpkhfDBhfLwJeBbInSyYjVmr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMDY2RDhCRTAxNjUwMTJBNjdGRDRGQUVCQkM0QjlG
MENFOUE3ODAeFw0yNjAxMDgxNjU0MjlaFw0yNzAxMDcxNjU5MjlaMDMxMTAvBgNV
BAMTKDE0ODFDMjFGOTNEQzA2QzdBNzJBRDQ2NDkxMThFQzkyOURGMDBGMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWCzDTfnisRVo/8OUDJSRGDa1
cchPo/6i/PsVGRMlRYp+L5BO8tlIItw/AwkkisVpaNzHlZo23r2FBlMchRU0TYEZ
41Ytxv0QhsM6vIulkpiHSase3tgv5ybvw+jGGwo4/mR4v3zFVeEUfBhSN64R87uZ
8IZTb+pKIJmb616cYY1GmD6Bp5YcgL9HlD22+oK1IGxmQF2emPDvQ0J7CxmiBiGq
uLniaSE9qkc1fjsq4pmJQx+jfjYHFJiIVc38mgY7Pyr3L9hSPEH02RgKji+ik74M
b+rKBCDeDuqAyUDPjC4PFeT9xbakRAIQibTNwAuUCcC+Uz7SDKpfyp21/e09AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUFIHCH5PcBsenKtRkkRjskp3wDy4wHwYDVR0j
BBgwFoAUDQBm2L4BZQEqZ/1PrrvEufDOmngwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOUQ5RkE3RjkwNDU0RUI1RjRDMUQ4ODBGMjkxNDU1MTNB
QjFBNTUxMTQzNDZFQUEyMDNFMzlDMUYwMTQyODExLzAvMEQwMDY2RDhCRTAxNjUw
MTJBNjdGRDRGQUVCQkM0QjlGMENFOUE3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAwNjZEOEJFMDE2NTAxMkE2
N0ZENEZBRUJCQzRCOUYwQ0U5QTc4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTlEOUZBN0Y5MDQ1NEVCNUY0QzFEODgwRjI5MTQ1NTEzQUIxQTU1MTE0
MzQ2RUFBMjAzRTM5QzFGMDE0MjgxMS8wLzMyMzAzMDJlMzIzMzJlMzEzNDMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyBeM
MA0GCSqGSIb3DQEBCwUAA4IBAQBEqv8zv0B/WcT4zimmdJZwYU1W7IDiOdZ5yWxC
j5wjRwhTP0pjUvkXnpWveGEjPtpzLJTJQ+rAyWuoV2USoofF51F8lyyGryMF+A8C
4QiO9ErkII1JjXS8hKzMcqNgdHEKmoeOGcCJkxbRurvf+J7QfWNPGNsHu6cmOvxQ
LUMyxhF2GXOoqMPftczDZgBGAshxwmyc/sBUAdCgMhG7QTEUlwqZ8VTREVFu0lK8
tNPoancvkg19d4JISsBT2obBAdaIv7DRqsEVtr4QgdXayoQ83l9vfHHy1fdVPeJY
qW1ZUjuBEm/MnXUMhq8HYaHORJt+axAtCc/19JHh1/2qtnb9
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:31:50 2026 by rpki-client