Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3230302e37362e3131322e302f32322d3234203d3e20323633323338.roa
File:                     3230302e37362e3131322e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          uLK8CBLbtoalublE1LuUhpacR8iWSoc0WGymxEA4nj8=
Subject key identifier:   01:AB:3A:68:6F:C3:CF:07:DA:5F:1A:CD:68:CB:F4:DE:B7:36:4D:26
Certificate issuer:       /CN=74CB08D6E0688F8E499DD91190E49000CC837759
Certificate serial:       2AC68A2D5298AA5C224F62A53186F17AF84B2183
Authority key identifier: 74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3230302e37362e3131322e302f32322d3234203d3e20323633323338.roa
Signing time:             Mon 02 Feb 2026 02:45:00 +0000
ROA not before:           Mon 02 Feb 2026 02:40:00 +0000
ROA not after:            Mon 01 Feb 2027 02:45:00 +0000
asID:                     263238
IP address blocks:        200.76.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c6:8a:2d:52:98:aa:5c:22:4f:62:a5:31:86:f1:7a:f8:4b:21:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74CB08D6E0688F8E499DD91190E49000CC837759
        Validity
            Not Before: Feb  2 02:40:00 2026 GMT
            Not After : Feb  1 02:45:00 2027 GMT
        Subject: CN=01AB3A686FC3CF07DA5F1ACD68CBF4DEB7364D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:12:a7:92:c2:c8:56:eb:ce:d5:34:77:68:
                    0d:75:06:34:55:d5:e5:1e:60:98:3a:c9:80:50:39:
                    ce:0b:5e:b3:29:03:63:c7:ac:4d:72:ca:a5:57:cd:
                    98:13:bd:5b:b5:e7:fa:47:a9:3b:27:b8:d9:aa:b7:
                    a4:63:0d:8b:c7:6c:51:d7:c2:96:28:02:fa:52:55:
                    d1:8a:18:7b:fa:fe:89:39:e0:87:90:d6:d1:1f:a3:
                    d7:20:88:fd:57:6d:a7:28:34:ba:dd:85:7d:f9:0e:
                    a4:0a:64:37:9d:14:aa:08:f2:95:d5:85:ed:f1:85:
                    10:54:92:99:8a:da:a0:36:eb:ef:93:7c:07:7d:8c:
                    aa:36:5f:94:6d:d1:bd:8e:b8:07:c1:37:2c:0d:af:
                    7b:91:ac:b1:fa:a6:bc:7c:51:a8:e0:ca:3a:97:83:
                    01:02:f9:08:f6:cc:96:c6:69:32:71:70:fd:eb:d2:
                    8c:c1:52:aa:8c:5a:a2:37:eb:0a:f6:4e:a4:e5:4a:
                    7a:e1:b4:be:8f:39:d7:f8:b6:9c:ea:c2:13:36:0f:
                    60:12:28:1b:94:4c:2e:04:fe:1d:99:fe:3c:d5:c8:
                    36:2f:98:e0:1a:c4:74:66:e3:09:69:72:fd:f5:5f:
                    60:7a:c3:8d:a9:07:82:cf:ec:a0:9d:a1:86:cf:d1:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AB:3A:68:6F:C3:CF:07:DA:5F:1A:CD:68:CB:F4:DE:B7:36:4D:26
            X509v3 Authority Key Identifier:
                keyid:74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/3230302e37362e3131322e302f32322d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:65:a6:49:d2:7d:58:69:9d:83:48:1b:a8:a9:38:84:09:32:
         5f:5f:35:78:ac:f4:93:dc:d2:6f:e2:b0:20:39:f9:00:6a:ae:
         35:09:6b:a0:ba:46:77:0c:e2:e5:ee:b6:2a:77:3d:fa:64:57:
         bd:fb:04:91:dd:ad:ed:05:95:82:43:c7:94:4e:c1:d5:33:e5:
         ee:e8:ad:9b:6c:e9:56:16:3e:46:dd:c8:a7:dc:5a:03:c3:3a:
         cd:52:97:e7:21:d1:d5:2f:92:ca:58:de:86:85:5e:e5:02:9f:
         a7:95:f5:98:ac:7d:b5:d1:fc:b4:ad:c8:38:aa:d9:64:ce:37:
         fb:b3:23:32:8a:24:2f:60:39:42:46:aa:ea:ce:04:03:a3:b4:
         f9:ef:8e:67:09:23:a3:ed:24:65:10:1c:ab:9a:3e:e8:f1:6a:
         34:aa:93:c2:99:d9:03:7b:19:57:bc:ba:91:86:fd:7a:ab:33:
         4a:ec:dd:3f:af:0f:d0:c2:65:2a:a6:52:bb:e5:53:76:69:47:
         a7:9c:d2:70:8f:be:bf:c9:88:1a:e6:f4:da:2b:19:fd:5b:df:
         d7:7d:b8:0b:17:a5:f0:fd:b5:73:bd:a2:68:f4:e2:cb:64:48:
         01:99:8e:01:6c:f6:2b:fb:07:6c:86:6b:0f:5d:70:6d:5d:f8:
         93:91:c8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:38:12 2026 by rpki-client