Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139362e302f32342d3234203d3e203236313934.roa
File:                     3230302e37332e3139362e302f32342d3234203d3e203236313934.roa (raw, json)
Hash identifier:          OEJO+WKavwrRq8DPv1brvicOuzV/8N41HxhYZejhWCs=
Subject key identifier:   70:AA:1D:65:D7:86:5B:60:AE:1B:D8:03:8A:A8:44:E9:FB:EA:FB:07
Certificate issuer:       /CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
Certificate serial:       05356A83CB7993DA5FC50B7478495D384E0D56F2
Authority key identifier: 90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139362e302f32342d3234203d3e203236313934.roa
Signing time:             Tue 10 Feb 2026 16:00:00 +0000
ROA not before:           Tue 10 Feb 2026 15:55:00 +0000
ROA not after:            Tue 09 Feb 2027 16:00:00 +0000
asID:                     26194
IP address blocks:        200.73.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 11:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:35:6a:83:cb:79:93:da:5f:c5:0b:74:78:49:5d:38:4e:0d:56:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
        Validity
            Not Before: Feb 10 15:55:00 2026 GMT
            Not After : Feb  9 16:00:00 2027 GMT
        Subject: CN=70AA1D65D7865B60AE1BD8038AA844E9FBEAFB07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:d7:e4:03:15:c6:bf:31:13:ee:06:81:15:
                    00:79:be:94:2e:02:23:42:4b:a8:28:86:97:6c:a5:
                    57:38:81:1c:4c:04:d2:c7:09:00:eb:a1:40:31:c2:
                    e4:79:05:19:48:bd:6b:a2:65:d2:72:32:e8:66:45:
                    55:06:01:a5:3b:61:7c:5c:bb:73:cf:c8:e9:17:b6:
                    ee:64:8b:4b:77:d7:a0:31:89:64:6e:2c:df:b2:ec:
                    d5:e4:05:e6:1a:22:ad:ad:15:75:a0:c8:3c:ae:d3:
                    cf:f0:39:33:1f:62:eb:21:8a:13:54:b3:92:cb:9e:
                    b8:db:fd:dc:9a:3a:10:f0:68:59:86:63:87:ce:9f:
                    0f:9d:67:e1:b2:18:a9:76:2e:1f:28:4b:ff:fb:a5:
                    61:72:b9:1d:57:f9:d4:87:ac:99:76:d6:bc:8b:56:
                    60:d4:8e:08:94:80:e1:af:7d:de:ea:88:5d:90:7c:
                    d1:c8:9d:41:36:8c:60:ed:1c:42:30:f0:fc:52:ba:
                    2f:33:08:c2:d4:4c:eb:b8:e0:ca:b4:85:47:d7:62:
                    42:1f:2a:3e:91:33:b7:2b:20:f1:86:32:7c:7a:52:
                    c0:f3:da:24:4e:ac:1c:e3:76:52:65:3a:77:4a:77:
                    e4:ef:15:47:8b:04:12:51:e4:b0:48:66:8a:1b:c0:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AA:1D:65:D7:86:5B:60:AE:1B:D8:03:8A:A8:44:E9:FB:EA:FB:07
            X509v3 Authority Key Identifier:
                keyid:90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139362e302f32342d3234203d3e203236313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:cb:43:74:59:a0:85:15:a1:e3:a8:55:c2:31:ad:a4:e2:65:
         94:9b:c7:60:0e:e3:d4:62:43:77:36:5a:0f:fd:94:d8:92:4d:
         98:7a:41:b1:c4:d3:94:1b:06:b4:47:54:6e:1d:1b:8d:8e:9f:
         09:03:f0:64:08:95:68:53:a4:d1:c6:c0:27:a9:24:67:b9:b6:
         ae:7e:0b:c0:a0:9b:ed:44:0f:8c:f9:53:a8:60:92:d6:54:f7:
         7a:c8:c6:64:9f:60:2d:3d:cc:f0:71:32:aa:cd:05:31:44:f5:
         58:4b:51:60:56:68:d1:3b:c4:76:03:c2:b4:d1:5f:f3:4f:42:
         2c:ab:0e:8d:91:da:50:95:c6:b3:21:73:47:d9:cb:96:79:80:
         ec:d3:80:46:9e:02:57:85:19:de:f3:45:83:a8:45:db:e0:c1:
         92:b4:ff:19:26:48:d9:2a:0d:cd:9a:cc:b8:ed:d1:8d:58:39:
         53:a4:bb:67:c9:c2:a9:98:d2:c4:4a:3f:74:9b:02:5d:a5:06:
         30:de:a4:53:e8:1a:cf:33:41:2c:03:3f:aa:12:f1:5f:2b:3e:
         c1:14:73:9f:31:67:7d:2a:55:22:1a:92:29:40:04:07:d3:03:
         5a:15:de:5d:00:29:ae:5a:14:96:e0:3e:dc:1b:10:a0:7a:62:
         ff:0b:a7:5a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBTVqg8t5k9pfxQt0eEldOE4NVvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBEQTk2NjZDRkE2RkI5QkNENDBGOUZDRjY2RjY5OUFB
OTFDQ0RBMTAeFw0yNjAyMTAxNTU1MDBaFw0yNzAyMDkxNjAwMDBaMDMxMTAvBgNV
BAMTKDcwQUExRDY1RDc4NjVCNjBBRTFCRDgwMzhBQTg0NEU5RkJFQUZCMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtD9fkAxXGvzET7gaBFQB5vpQu
AiNCS6gohpdspVc4gRxMBNLHCQDroUAxwuR5BRlIvWuiZdJyMuhmRVUGAaU7YXxc
u3PPyOkXtu5ki0t316AxiWRuLN+y7NXkBeYaIq2tFXWgyDyu08/wOTMfYushihNU
s5LLnrjb/dyaOhDwaFmGY4fOnw+dZ+GyGKl2Lh8oS//7pWFyuR1X+dSHrJl21ryL
VmDUjgiUgOGvfd7qiF2QfNHInUE2jGDtHEIw8PxSui8zCMLUTOu44Mq0hUfXYkIf
Kj6RM7crIPGGMnx6UsDz2iROrBzjdlJlOndKd+TvFUeLBBJR5LBIZoobwGUNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcKodZdeGW2CuG9gDiqhE6fvq+wcwHwYDVR0j
BBgwFoAUkNqWZs+m+5vNQPn89m9pmqkczaEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQTYyMjRCODQwREU4M0U5NDgxREIzNjcyODlDNUU1QTYx
NkU3QTkwODFBRTkxOUIxQzFBRUNEODdGMkE5RDgxLzAvOTBEQTk2NjZDRkE2RkI5
QkNENDBGOUZDRjY2RjY5OUFBOTFDQ0RBMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MERBOTY2NkNGQTZGQjlCQ0Q0
MEY5RkNGNjZGNjk5QUE5MUNDREExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkE2MjI0Qjg0MERFODNFOTQ4MURCMzY3Mjg5QzVFNUE2MTZFN0E5MDgx
QUU5MTlCMUMxQUVDRDg3RjJBOUQ4MS8wLzMyMzAzMDJlMzczMzJlMzEzOTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMxMzkzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhJxDAN
BgkqhkiG9w0BAQsFAAOCAQEAFstDdFmghRWh46hVwjGtpOJllJvHYA7j1GJDdzZa
D/2U2JJNmHpBscTTlBsGtEdUbh0bjY6fCQPwZAiVaFOk0cbAJ6kkZ7m2rn4LwKCb
7UQPjPlTqGCS1lT3esjGZJ9gLT3M8HEyqs0FMUT1WEtRYFZo0TvEdgPCtNFf809C
LKsOjZHaUJXGsyFzR9nLlnmA7NOARp4CV4UZ3vNFg6hF2+DBkrT/GSZI2SoNzZrM
uO3RjVg5U6S7Z8nCqZjSxEo/dJsCXaUGMN6kU+gazzNBLAM/qhLxXys+wRRznzFn
fSpVIhqSKUAEB9MDWhXeXQAprloUluA+3BsQoHpi/wunWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:52:48 2026 by rpki-client