Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139342e302f32342d3234203d3e203236313934.roa
File:                     3230302e37332e3139342e302f32342d3234203d3e203236313934.roa (raw, json)
Hash identifier:          9fOUcAR3sEB50GbDxym2ydh/6oXIpCrrk10Aw1ZjyMI=
Subject key identifier:   6C:B2:35:1A:3C:95:9C:06:2B:71:5B:C1:B4:25:61:7C:E2:38:2D:F4
Certificate issuer:       /CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
Certificate serial:       17A49C34583A61DA49F0FD1877A7B32CF74BDB15
Authority key identifier: 90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139342e302f32342d3234203d3e203236313934.roa
Signing time:             Tue 10 Feb 2026 16:00:00 +0000
ROA not before:           Tue 10 Feb 2026 15:55:00 +0000
ROA not after:            Tue 09 Feb 2027 16:00:00 +0000
asID:                     26194
IP address blocks:        200.73.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 11:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a4:9c:34:58:3a:61:da:49:f0:fd:18:77:a7:b3:2c:f7:4b:db:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
        Validity
            Not Before: Feb 10 15:55:00 2026 GMT
            Not After : Feb  9 16:00:00 2027 GMT
        Subject: CN=6CB2351A3C959C062B715BC1B425617CE2382DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:1d:4a:c2:4e:94:6c:d4:7b:31:2d:0e:ad:
                    fd:be:8d:5f:23:0a:4b:1e:b6:1d:cd:9a:98:f2:44:
                    03:7f:6f:98:8a:27:a5:ac:03:59:4a:29:e1:a2:97:
                    4d:11:3d:9c:ab:b9:b2:1c:c4:9e:ce:72:cb:38:52:
                    e1:3c:7e:52:bb:cc:64:bf:59:c6:48:73:e9:f2:96:
                    a9:2a:eb:63:dd:a7:29:52:a7:c5:b0:51:79:4b:a6:
                    b4:71:74:79:f4:67:7c:1c:44:e0:1c:63:4e:76:d5:
                    8b:8d:35:fd:32:43:5e:9a:41:1b:d1:60:96:0c:3e:
                    e0:7b:c8:6b:d4:23:56:ed:4c:d7:a6:6c:ac:08:76:
                    65:27:a3:a2:d6:dc:be:2f:5f:93:6d:44:9a:c7:20:
                    81:e5:10:85:a2:ac:23:d0:8a:f2:5d:5a:8a:68:ae:
                    1b:3a:4b:d0:dc:51:bd:75:2d:de:4b:fe:16:c1:b8:
                    97:b1:ac:92:25:72:38:6e:01:19:81:d0:2c:78:42:
                    0f:d5:83:60:49:8c:6d:f1:be:27:c0:4e:53:12:a5:
                    19:ce:c4:c3:63:04:2d:ec:c3:61:98:07:78:36:6d:
                    ec:49:f3:a8:c3:f3:8e:ec:c7:93:18:1e:c3:04:73:
                    05:c1:1d:be:cb:92:d9:ec:43:5b:69:01:aa:4f:38:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B2:35:1A:3C:95:9C:06:2B:71:5B:C1:B4:25:61:7C:E2:38:2D:F4
            X509v3 Authority Key Identifier:
                keyid:90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139342e302f32342d3234203d3e203236313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:69:5c:cc:18:9f:da:22:c5:f4:2a:db:cd:56:b6:89:0b:c8:
         8c:91:1c:b2:f6:33:23:96:5a:81:24:ed:e7:92:cd:7f:43:f8:
         76:72:29:1a:4f:df:af:78:a7:a2:1d:6f:42:e5:3f:bd:06:81:
         9d:1a:2b:15:62:58:34:9e:05:40:58:22:b9:b9:11:c8:fe:6e:
         28:d6:0d:76:d0:08:8f:3e:4f:84:5e:dc:55:d2:07:9c:2e:e1:
         6d:cf:df:5c:a8:36:2a:1e:61:4a:b4:21:62:49:4e:67:73:f3:
         10:57:f4:6b:0c:00:1b:8f:1a:83:1c:c5:5e:f0:a6:94:57:ec:
         91:10:a8:b8:16:06:ef:cd:f2:8e:a2:ee:43:bd:0d:45:b0:e3:
         9c:cc:13:1f:fe:d3:0d:af:35:02:2e:83:e0:4e:1c:66:d3:35:
         02:31:13:8a:0f:2d:70:14:27:95:84:9f:9b:44:f3:c2:54:77:
         06:5f:9b:b8:d7:68:b6:99:65:55:53:96:9f:bc:40:f0:b3:d5:
         2e:77:35:21:97:4a:d9:5e:ee:7d:97:7a:6b:cc:f1:23:e3:54:
         c4:0d:18:a4:fd:a7:65:bd:20:96:56:ff:0c:e6:2e:72:43:28:
         04:65:cc:17:b2:96:07:4f:f6:40:b4:23:23:b2:24:60:21:c8:
         d4:44:72:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:52:47 2026 by rpki-client