Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139392e302f32342d3234203d3e203236313934.roa
File:                     3230302e37332e3139392e302f32342d3234203d3e203236313934.roa (raw, json)
Hash identifier:          LC3mt3sHN7k/XoG4dkN1vZrziNCirLvViBOYOX66YNo=
Subject key identifier:   9B:27:FF:D1:10:D6:39:4E:A6:59:28:F7:EC:76:AD:1A:CD:A3:4D:21
Certificate issuer:       /CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
Certificate serial:       376782AE30A78303209E9FC07D570D761809360D
Authority key identifier: 90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139392e302f32342d3234203d3e203236313934.roa
Signing time:             Tue 10 Feb 2026 16:00:02 +0000
ROA not before:           Tue 10 Feb 2026 15:55:02 +0000
ROA not after:            Tue 09 Feb 2027 16:00:02 +0000
asID:                     26194
IP address blocks:        200.73.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 11:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:67:82:ae:30:a7:83:03:20:9e:9f:c0:7d:57:0d:76:18:09:36:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1
        Validity
            Not Before: Feb 10 15:55:02 2026 GMT
            Not After : Feb  9 16:00:02 2027 GMT
        Subject: CN=9B27FFD110D6394EA65928F7EC76AD1ACDA34D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:32:b7:73:c8:46:c1:1b:7d:15:c4:ca:4b:02:
                    01:91:03:f3:f1:24:e6:b0:f7:8a:ac:4a:ba:96:bf:
                    a0:47:a0:5f:87:09:f1:aa:52:0e:41:35:67:37:ab:
                    8a:72:69:69:60:53:ba:55:00:87:62:4c:ee:9d:54:
                    89:90:50:2d:cb:23:03:44:62:8e:c9:8e:d6:c1:7e:
                    b2:96:44:55:9e:b9:c0:73:9e:95:09:e5:88:f0:c4:
                    69:62:e5:59:5d:25:78:b0:5c:70:65:a3:ad:13:b8:
                    48:a1:16:dd:f9:3d:81:e5:7a:b1:58:1e:0f:0f:96:
                    21:75:a1:b4:53:54:b9:85:48:57:57:73:93:7a:c5:
                    a1:ec:f0:4c:ea:a9:08:9e:67:0c:27:fc:fb:44:08:
                    9b:b7:4f:ed:d3:98:86:f1:90:23:7f:fe:49:ba:b3:
                    e4:d4:75:0f:8f:6e:9e:ac:0e:f4:28:3a:dd:10:29:
                    fd:f4:6d:f0:ff:c0:96:b1:e3:1c:b8:7a:8b:a9:1d:
                    c6:9b:be:bc:dd:06:64:5a:4d:e4:ff:a8:28:fa:6d:
                    68:b8:30:92:36:e8:93:3f:2e:89:5a:1a:fe:8f:58:
                    c2:46:7a:14:42:3b:2b:84:bd:e7:d9:aa:ce:7e:35:
                    bd:15:54:ee:ce:ad:96:fe:6e:06:e1:07:81:2b:6f:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:27:FF:D1:10:D6:39:4E:A6:59:28:F7:EC:76:AD:1A:CD:A3:4D:21
            X509v3 Authority Key Identifier:
                keyid:90:DA:96:66:CF:A6:FB:9B:CD:40:F9:FC:F6:6F:69:9A:A9:1C:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90DA9666CFA6FB9BCD40F9FCF66F699AA91CCDA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA6224B840DE83E9481DB367289C5E5A616E7A9081AE919B1C1AECD87F2A9D81/0/3230302e37332e3139392e302f32342d3234203d3e203236313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:bd:ac:49:e8:8c:30:63:90:08:a9:3c:81:43:ac:ab:ab:
         94:dc:44:5d:e4:13:1c:73:04:cc:28:4a:3a:aa:e1:ab:fa:90:
         f9:b8:9f:63:3c:a9:0e:f5:59:96:87:19:ef:24:f6:fc:43:71:
         90:69:a9:25:de:13:8d:71:30:2b:09:c7:72:12:25:18:2a:f5:
         aa:f3:da:b2:fd:17:0a:51:e8:82:ab:30:d0:fe:3e:b7:70:7a:
         a6:5b:0c:0a:d0:e3:b6:53:63:16:32:17:0b:b7:dc:45:25:6a:
         e9:d6:3f:15:6d:4a:3d:1a:2d:12:e0:50:fe:5a:67:7f:9b:3d:
         90:26:f4:50:87:c9:64:83:ae:08:98:6e:a1:88:3f:bc:fc:dc:
         1d:54:a0:4b:be:e1:64:92:f1:6a:25:25:e1:d0:14:a9:dc:74:
         30:a6:d5:d5:68:f2:9c:60:b6:d4:c6:93:68:51:de:95:8b:52:
         92:81:b4:e0:26:75:16:cf:9b:ec:f0:59:21:f4:bc:78:6d:b6:
         e4:7c:dd:a8:5d:f8:1a:37:db:45:0b:50:fe:9d:5c:62:54:b8:
         43:64:fe:3f:a2:38:ea:73:28:9d:e2:47:1c:0e:bf:58:9f:ef:
         8c:97:5f:6d:c0:9e:7c:e8:69:f9:7c:d9:49:5f:07:9a:81:db:
         1d:10:88:46
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUN2eCrjCngwMgnp/AfVcNdhgJNg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBEQTk2NjZDRkE2RkI5QkNENDBGOUZDRjY2RjY5OUFB
OTFDQ0RBMTAeFw0yNjAyMTAxNTU1MDJaFw0yNzAyMDkxNjAwMDJaMDMxMTAvBgNV
BAMTKDlCMjdGRkQxMTBENjM5NEVBNjU5MjhGN0VDNzZBRDFBQ0RBMzREMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuMrdzyEbBG30VxMpLAgGRA/Px
JOaw94qsSrqWv6BHoF+HCfGqUg5BNWc3q4pyaWlgU7pVAIdiTO6dVImQUC3LIwNE
Yo7JjtbBfrKWRFWeucBznpUJ5YjwxGli5VldJXiwXHBlo60TuEihFt35PYHlerFY
Hg8PliF1obRTVLmFSFdXc5N6xaHs8EzqqQieZwwn/PtECJu3T+3TmIbxkCN//km6
s+TUdQ+Pbp6sDvQoOt0QKf30bfD/wJax4xy4eoupHcabvrzdBmRaTeT/qCj6bWi4
MJI26JM/LolaGv6PWMJGehRCOyuEvefZqs5+Nb0VVO7OrZb+bgbhB4ErbzdnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUmyf/0RDWOU6mWSj37HatGs2jTSEwHwYDVR0j
BBgwFoAUkNqWZs+m+5vNQPn89m9pmqkczaEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQTYyMjRCODQwREU4M0U5NDgxREIzNjcyODlDNUU1QTYx
NkU3QTkwODFBRTkxOUIxQzFBRUNEODdGMkE5RDgxLzAvOTBEQTk2NjZDRkE2RkI5
QkNENDBGOUZDRjY2RjY5OUFBOTFDQ0RBMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MERBOTY2NkNGQTZGQjlCQ0Q0
MEY5RkNGNjZGNjk5QUE5MUNDREExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkE2MjI0Qjg0MERFODNFOTQ4MURCMzY3Mjg5QzVFNUE2MTZFN0E5MDgx
QUU5MTlCMUMxQUVDRDg3RjJBOUQ4MS8wLzMyMzAzMDJlMzczMzJlMzEzOTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMxMzkzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhJxzAN
BgkqhkiG9w0BAQsFAAOCAQEAiIq9rEnojDBjkAipPIFDrKurlNxEXeQTHHMEzChK
Oqrhq/qQ+bifYzypDvVZlocZ7yT2/ENxkGmpJd4TjXEwKwnHchIlGCr1qvPasv0X
ClHogqsw0P4+t3B6plsMCtDjtlNjFjIXC7fcRSVq6dY/FW1KPRotEuBQ/lpnf5s9
kCb0UIfJZIOuCJhuoYg/vPzcHVSgS77hZJLxaiUl4dAUqdx0MKbV1WjynGC21MaT
aFHelYtSkoG04CZ1Fs+b7PBZIfS8eG225HzdqF34GjfbRQtQ/p1cYlS4Q2T+P6I4
6nMoneJHHA6/WJ/vjJdfbcCefOhp+XzZSV8HmoHbHRCIRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:52:47 2026 by rpki-client