Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139382e302f32342d3234203d3e203236313934.roa
File:                     3230302e37332e3139382e302f32342d3234203d3e203236313934.roa (raw, json)
Hash identifier:          J9rtwSJXUArEVf4b/DpjgNApSfYjjKXJrmuyC9nuEtE=
Subject key identifier:   BD:B0:55:14:09:BA:B5:BF:F2:18:1A:F4:C3:74:94:D0:24:39:67:73
Certificate issuer:       /CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
Certificate serial:       035F1C4376AC4574EFBE8D008CA3A3CE90466F17
Authority key identifier: 90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139382e302f32342d3234203d3e203236313934.roa
Signing time:             Tue 10 Feb 2026 16:00:02 +0000
ROA not before:           Tue 10 Feb 2026 15:55:02 +0000
ROA not after:            Tue 09 Feb 2027 16:00:02 +0000
asID:                     26194
IP address blocks:        200.73.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 11:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5f:1c:43:76:ac:45:74:ef:be:8d:00:8c:a3:a3:ce:90:46:6f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
        Validity
            Not Before: Feb 10 15:55:02 2026 GMT
            Not After : Feb  9 16:00:02 2027 GMT
        Subject: CN=BDB0551409BAB5BFF2181AF4C37494D024396773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:3c:cf:52:1b:2b:fc:91:d9:ee:65:c2:5c:
                    58:87:13:cd:08:1f:80:87:76:28:d4:7a:7d:11:ff:
                    01:ab:96:5d:2b:95:39:53:1f:8c:c0:e7:70:e6:ce:
                    de:97:6f:7b:73:14:7d:28:71:a2:7d:2a:7d:cf:60:
                    7b:66:6d:7a:60:59:f9:aa:58:f8:ab:8b:a4:6b:65:
                    a5:c4:6a:30:db:69:a1:c3:e1:f7:3f:f4:1d:5a:ed:
                    d7:0f:8d:8f:1c:69:6e:bc:27:73:99:01:1f:46:64:
                    b6:7c:62:1b:22:65:c9:74:65:6e:f1:4c:dd:8b:84:
                    1b:76:3e:bb:5f:2a:27:29:37:5e:3d:29:cd:f6:84:
                    53:4f:1c:d0:ff:b1:d1:84:b6:66:53:59:f9:83:c9:
                    e0:ba:62:70:05:c0:73:0b:fa:9d:ed:67:48:3d:ac:
                    99:e4:de:c1:21:84:1a:54:96:f0:c2:d4:b1:85:8e:
                    1b:27:c7:9b:3a:54:2c:8b:10:3c:f1:5e:aa:4f:90:
                    87:6d:06:f7:be:dd:10:3a:5a:67:b0:85:a0:60:32:
                    bf:1b:e0:3b:a6:b1:e4:c8:04:74:b7:45:2a:ad:0e:
                    a2:f6:9a:a8:45:a1:e8:45:07:80:79:d2:b3:82:06:
                    29:b7:ed:21:09:21:53:33:e4:ad:ef:87:33:bf:db:
                    a2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B0:55:14:09:BA:B5:BF:F2:18:1A:F4:C3:74:94:D0:24:39:67:73
            X509v3 Authority Key Identifier:
                keyid:90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139382e302f32342d3234203d3e203236313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:55:d6:d3:73:2f:97:a3:03:d2:af:25:36:cb:27:97:89:57:
         00:bc:96:23:ab:ab:a2:2f:2d:8a:f4:ca:0e:1f:84:d7:0f:85:
         a9:92:0c:da:ad:be:44:bc:c9:4d:63:a0:28:e9:38:29:1c:e8:
         0c:f2:a8:35:bd:dd:9c:5e:d8:f3:00:96:37:de:bb:a2:f7:35:
         c7:9a:7a:49:6f:fe:9a:42:fc:1c:d0:39:4a:8f:84:95:f9:f5:
         72:da:e3:ca:e4:38:12:e0:19:14:1d:f7:74:ee:07:22:88:78:
         dd:37:73:74:1b:05:7e:32:91:db:97:f5:33:82:e6:32:52:f0:
         b7:dc:ad:33:71:2d:49:a1:c0:b8:4f:fa:af:19:b1:9d:32:91:
         21:0d:cf:d2:d5:59:a8:87:77:a5:bd:5f:bd:6a:e0:fa:ce:70:
         84:35:c2:7b:38:e6:73:f8:d4:97:ec:bf:b1:8e:50:3c:aa:f5:
         60:49:93:28:8a:f9:b8:ed:95:ec:83:10:08:fc:9d:38:57:d9:
         d3:5b:67:ad:dd:6a:d6:42:f6:54:8b:28:3c:6a:b6:91:c0:05:
         3a:f8:dc:d4:28:b9:06:02:1b:4b:3b:73:c9:98:87:c6:f6:5b:
         cf:64:8b:66:74:67:c9:67:fc:02:58:81:69:56:43:e5:af:15:
         24:15:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:52:47 2026 by rpki-client