Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139322e302f32342d3234203d3e203236313934.roa
File:                     3230302e37332e3139322e302f32342d3234203d3e203236313934.roa (raw, json)
Hash identifier:          PLM9WiPU9/0vaidKs/WgyrcJdRskERV//9eV8Iee3CI=
Subject key identifier:   9A:C5:D1:2A:34:0A:F7:64:8B:70:E4:57:28:91:E1:07:07:55:1D:96
Certificate issuer:       /CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
Certificate serial:       50B8619E9098D69CD745A3B5D336618C05D2DB38
Authority key identifier: 90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139322e302f32342d3234203d3e203236313934.roa
Signing time:             Tue 10 Feb 2026 16:00:00 +0000
ROA not before:           Tue 10 Feb 2026 15:55:00 +0000
ROA not after:            Tue 09 Feb 2027 16:00:00 +0000
asID:                     26194
IP address blocks:        200.73.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 11:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b8:61:9e:90:98:d6:9c:d7:45:a3:b5:d3:36:61:8c:05:d2:db:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
        Validity
            Not Before: Feb 10 15:55:00 2026 GMT
            Not After : Feb  9 16:00:00 2027 GMT
        Subject: CN=9AC5D12A340AF7648B70E4572891E10707551D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:fb:5d:c7:63:f2:1b:ff:4f:3d:82:4f:c6:
                    d9:1c:f1:05:1d:69:e1:d1:b3:74:c6:f7:2b:42:53:
                    8a:1b:ac:ef:a2:6b:a1:93:04:31:1a:d6:67:1c:04:
                    ca:a0:d2:be:04:f7:62:31:67:0c:8c:50:a3:e7:df:
                    c1:b6:c1:b6:cb:2f:43:84:57:14:a8:d9:b1:2c:bc:
                    39:18:7f:89:5e:00:ee:e5:12:3f:35:03:dc:ce:4d:
                    d6:b7:9c:3b:79:3d:32:12:58:41:c7:7a:71:4d:e6:
                    02:b0:23:b8:82:0a:aa:c1:47:80:18:d7:e9:fb:3e:
                    a6:d7:83:7f:82:6f:07:e2:c9:7b:d9:59:1f:2f:69:
                    a7:79:46:62:47:87:b6:ea:ab:28:1d:49:72:4a:76:
                    d3:f2:f3:ff:ff:17:a7:89:32:3a:75:f7:72:2d:bc:
                    80:37:76:ee:62:bb:0b:28:63:8c:6b:99:d6:0c:cc:
                    bb:f7:cf:9c:03:3f:f4:15:9b:90:4f:ef:7f:bd:77:
                    72:2e:85:49:86:81:9f:0b:38:b2:b1:c2:ea:7d:cd:
                    ba:61:a2:60:41:d5:26:92:da:55:dd:c4:1f:49:88:
                    b9:cf:0f:0a:84:31:5d:d3:f5:37:61:69:3d:7d:2e:
                    2f:a3:f5:4c:a2:fe:75:1c:fc:d2:27:ca:f5:ed:d6:
                    3c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C5:D1:2A:34:0A:F7:64:8B:70:E4:57:28:91:E1:07:07:55:1D:96
            X509v3 Authority Key Identifier:
                keyid:90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139322e302f32342d3234203d3e203236313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:4b:bd:57:00:53:81:61:1d:b1:15:b0:3f:64:cd:3a:07:ea:
         e1:45:07:67:48:36:03:33:78:e9:05:99:44:a1:88:60:3d:8a:
         63:7b:67:17:f0:c1:fb:e0:67:a9:a2:c2:86:bd:9b:b1:40:17:
         d3:a0:54:17:34:5d:20:cf:11:46:18:0c:69:85:3e:d2:60:33:
         5f:1b:32:47:ae:35:32:ad:c1:4f:a6:65:f3:e4:78:bd:f2:54:
         86:df:f1:83:f5:40:56:54:a9:07:ad:b6:ce:0e:7d:ab:14:3d:
         d5:f9:9a:07:22:11:9f:89:a0:1a:7c:88:44:a6:53:28:4f:d5:
         19:ff:d4:39:33:36:f7:b4:5a:5b:8d:3c:1c:43:9b:78:40:c8:
         38:9a:8c:7a:87:0c:b0:15:67:f4:a8:33:8b:b4:45:7a:5f:9c:
         c6:b0:09:9e:33:36:75:18:95:bb:d8:86:75:74:e7:23:25:68:
         bc:1e:e1:ee:e3:dc:48:c5:d1:49:f8:eb:96:20:6f:8d:c1:d3:
         13:04:3a:d9:b5:2a:b6:ea:a1:65:e3:70:85:4b:6b:90:99:59:
         82:10:87:8a:29:d7:70:99:3f:6e:b0:2b:ef:51:b2:58:60:6f:
         8f:77:8f:8b:f1:e2:54:0d:d9:28:42:15:1a:0d:f9:97:12:31:
         b9:5d:6d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:52:47 2026 by rpki-client