Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20323639303730.roa
File:                     3230302e32362e3138352e302f32342d3234203d3e20323639303730.roa (raw, json)
Hash identifier:          dW5VuKC8CHdooeWs3YbaX6t43NdWhJq8QkAY2U16Tqs=
Subject key identifier:   FF:F6:4F:A3:05:4F:C8:BA:D8:82:80:D7:1B:4F:37:92:F6:19:77:99
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       0EFF4421A37E14EA3DBFFE290BFA329D99DCC69B
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20323639303730.roa
Signing time:             Mon 18 Aug 2025 13:40:05 +0000
ROA not before:           Mon 18 Aug 2025 13:35:05 +0000
ROA not after:            Mon 17 Aug 2026 13:40:05 +0000
asID:                     269070
IP address blocks:        200.26.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Aug 2025 21:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ff:44:21:a3:7e:14:ea:3d:bf:fe:29:0b:fa:32:9d:99:dc:c6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Aug 18 13:35:05 2025 GMT
            Not After : Aug 17 13:40:05 2026 GMT
        Subject: CN=FFF64FA3054FC8BAD88280D71B4F3792F6197799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:a6:37:71:94:33:53:f3:c8:bd:32:d6:43:
                    ae:e9:32:db:3d:ad:56:33:d8:78:fb:5b:ec:07:8c:
                    2a:41:a1:e0:2d:ba:77:02:a8:dd:80:50:9a:01:fd:
                    fb:f4:51:13:6c:72:a5:00:ed:00:f1:5a:62:54:e4:
                    b4:5c:70:93:7b:44:2b:e4:7d:13:44:43:ce:8c:be:
                    85:f2:c1:12:6d:9a:64:a9:35:77:ad:82:1d:e0:15:
                    6b:c7:d9:29:ad:e5:c1:26:22:0b:88:31:61:b4:1a:
                    9d:c4:ad:bd:43:02:11:23:eb:ba:0b:31:8a:74:2f:
                    78:99:e9:e3:e7:5d:41:43:8f:32:73:c0:11:d2:cc:
                    a9:db:53:32:d6:9b:f5:c7:98:85:3a:cd:51:c7:77:
                    76:53:32:38:15:5f:e2:07:62:49:fc:da:42:99:ee:
                    b2:ee:39:4b:29:03:29:5a:b6:2d:4b:23:57:21:73:
                    b9:0e:a3:3c:3f:57:52:26:d2:78:bf:b7:c1:5d:90:
                    1d:ef:c7:a8:d8:f8:b3:9a:60:b4:dc:02:8b:ba:94:
                    44:4b:2c:c8:7f:8f:3f:e3:48:7b:a9:c8:68:4e:f9:
                    97:01:e3:e4:65:d1:99:81:d2:d6:45:42:7e:5f:15:
                    81:2c:a7:6f:18:4c:cd:a7:77:d4:47:ec:fb:e7:51:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F6:4F:A3:05:4F:C8:BA:D8:82:80:D7:1B:4F:37:92:F6:19:77:99
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138352e302f32342d3234203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:70:57:d5:20:46:8b:c3:b0:7e:3d:4a:86:b6:52:7b:c9:62:
         a0:74:17:c3:a3:1d:6f:35:f0:a8:7f:97:ff:6e:30:f7:81:13:
         b0:c1:67:d6:0f:b2:0d:35:68:09:e5:45:ce:43:b2:16:51:35:
         b0:74:2a:7a:53:28:78:5f:73:67:32:44:8e:53:4b:51:de:50:
         97:05:a6:e0:3d:20:f9:cc:5b:b1:f0:7d:06:aa:81:9e:cf:dd:
         ce:96:95:12:9d:25:f9:95:ca:81:90:d6:3f:86:89:74:c8:00:
         b5:5e:53:e0:5d:0b:e0:bf:e5:8c:b2:bd:b2:26:c6:92:66:30:
         d7:4a:aa:d9:2d:d4:e2:66:c1:49:6f:52:c1:a6:c9:27:2f:5f:
         1b:03:13:fd:13:c0:18:89:f3:20:bd:25:03:c0:bc:02:df:5b:
         9a:ad:fe:51:8c:a0:f6:6d:83:d0:cb:30:fe:e4:ec:4b:d1:f5:
         06:ec:cf:19:ed:7e:15:63:45:7c:a2:c3:02:09:0d:1c:3a:11:
         96:31:61:30:23:dc:04:a9:e2:8a:b8:55:35:e4:a7:43:3e:c5:
         04:21:8c:19:de:40:1d:db:cf:18:33:ed:11:42:9b:82:85:7b:
         22:4f:45:e3:83:a6:da:fe:c3:5b:ea:2b:09:13:a1:69:2b:3d:
         23:7a:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:28:00 2025 by rpki-client