Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139332e302f32342d3234203d3e203236313934.roa
File:                     3230302e37332e3139332e302f32342d3234203d3e203236313934.roa (raw, json)
Hash identifier:          T9U+7EzanGFLKrLhUGpoNVaylIoquYCMr6ILlpbRUwE=
Subject key identifier:   26:B0:D1:3D:1D:C3:3D:20:D4:D6:F5:2B:33:44:4D:46:AB:B9:5A:81
Certificate issuer:       /CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
Certificate serial:       75013BE7B660DBA180DF870F224168D0841C60E5
Authority key identifier: 90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139332e302f32342d3234203d3e203236313934.roa
Signing time:             Tue 10 Feb 2026 16:00:01 +0000
ROA not before:           Tue 10 Feb 2026 15:55:01 +0000
ROA not after:            Tue 09 Feb 2027 16:00:01 +0000
asID:                     26194
IP address blocks:        200.73.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 11:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:01:3b:e7:b6:60:db:a1:80:df:87:0f:22:41:68:d0:84:1c:60:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
        Validity
            Not Before: Feb 10 15:55:01 2026 GMT
            Not After : Feb  9 16:00:01 2027 GMT
        Subject: CN=26B0D13D1DC33D20D4D6F52B33444D46ABB95A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:53:d9:d0:7c:c8:fe:83:91:5a:a9:37:3a:
                    79:40:16:a7:0d:ce:89:f5:7f:6e:08:b1:7f:a3:a0:
                    9c:72:c3:88:e4:dd:38:72:b1:69:57:d8:d3:c0:50:
                    6c:2d:12:20:88:3e:41:72:17:8d:dc:cf:dc:3f:ec:
                    90:10:1b:cb:96:e0:75:4f:12:c6:70:c5:37:5e:ac:
                    6d:23:0f:90:29:f4:ca:95:3d:57:29:2e:1c:a8:ba:
                    6d:a0:95:be:b0:a8:be:6e:c8:f3:f8:27:cb:a9:b2:
                    51:27:4c:38:5e:c5:62:3c:31:ca:7d:68:d8:d2:b7:
                    e3:f2:70:c3:ca:78:59:84:78:fd:0b:ad:84:d8:47:
                    31:e7:af:e7:f1:97:22:8c:6b:ad:32:af:de:75:da:
                    f1:93:5b:47:6a:97:af:11:3b:6a:91:92:57:32:d5:
                    6a:c1:c2:e6:ac:34:66:7c:07:4a:fa:fc:06:4b:13:
                    3d:c8:1d:f4:3c:bc:31:6d:ee:3d:0d:96:8a:3d:34:
                    68:75:8f:a1:39:59:47:40:52:e8:84:c4:6e:4b:79:
                    9b:01:03:95:4d:4c:aa:e4:92:bb:50:43:94:49:7a:
                    11:9b:12:a6:07:9b:46:58:41:fc:69:d9:b7:52:e0:
                    62:da:2b:0f:e3:74:92:98:5e:6c:b5:ab:c8:b7:45:
                    03:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B0:D1:3D:1D:C3:3D:20:D4:D6:F5:2B:33:44:4D:46:AB:B9:5A:81
            X509v3 Authority Key Identifier:
                keyid:90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139332e302f32342d3234203d3e203236313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:fe:7b:64:5a:cf:eb:26:1c:97:18:b6:09:a9:37:79:ae:
         ab:c0:18:26:10:53:7a:63:e8:35:9a:05:52:be:58:89:d3:4b:
         d3:d9:57:36:88:38:ec:ac:a7:de:35:6f:0d:af:15:b5:ab:bc:
         c2:58:d5:fb:84:92:cf:60:71:1d:c7:ce:71:94:21:ca:05:0d:
         6c:06:1b:4c:72:d9:6e:15:f4:fe:96:93:71:79:97:d0:7b:55:
         b3:57:81:99:ea:05:12:68:97:d5:61:de:76:3e:93:a2:2e:59:
         e4:a8:8c:d7:2e:30:a8:19:7e:8d:ca:7a:8b:c8:a7:ae:8a:c5:
         fd:fb:4d:58:4f:ae:03:d0:37:2b:84:d8:87:3d:9a:ea:0c:bc:
         af:6b:ff:77:b9:de:f2:3a:2a:12:11:e9:ec:06:57:2a:42:1b:
         a5:c2:bc:8f:77:85:59:43:87:74:66:fd:3e:55:39:7f:d0:38:
         bd:7a:96:2a:57:2d:4d:63:cd:21:f2:81:11:78:ad:a1:e4:fe:
         14:5e:6f:61:e2:fc:6a:32:ff:a5:b3:a9:6f:44:34:f0:a2:f7:
         ad:c8:e9:2c:70:69:aa:92:2b:db:9c:af:8d:fc:3b:d7:9a:70:
         0d:25:0a:1c:02:f5:a2:89:1c:a6:ee:ce:7e:3a:6b:99:73:94:
         9a:a5:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:52:47 2026 by rpki-client