Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e36372e302f32342d3234203d3e203136383734.roa
File:                     3230302e362e36372e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          mBMWC2mh8TOON70kVIPWPRjyRBI0E2sqcpes2TfjTuo=
Subject key identifier:   D1:6B:6E:E1:CC:BA:DE:61:C1:AE:A8:35:4B:7C:D0:00:1F:3F:73:59
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       3522C1E33BF9AB9283B8CF2B2AD07E1EC08A25A2
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e36372e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:30:01 +0000
ROA not before:           Thu 09 Jul 2026 23:25:01 +0000
ROA not after:            Thu 08 Jul 2027 23:30:01 +0000
asID:                     16874
IP address blocks:        200.6.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 17:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:22:c1:e3:3b:f9:ab:92:83:b8:cf:2b:2a:d0:7e:1e:c0:8a:25:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:25:01 2026 GMT
            Not After : Jul  8 23:30:01 2027 GMT
        Subject: CN=D16B6EE1CCBADE61C1AEA8354B7CD0001F3F7359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:60:a8:20:63:80:74:e9:1b:e4:db:fa:46:
                    b7:6a:3b:7b:5e:12:1d:ca:f6:9b:64:40:3c:e7:77:
                    92:9b:cf:c8:8c:a3:bb:a6:98:5d:31:4b:5a:d8:d1:
                    c2:57:ee:19:05:af:80:07:94:65:1c:1d:c7:c9:09:
                    49:6b:33:77:b0:f9:a5:d6:8d:cb:cc:7e:17:50:2e:
                    15:7c:66:c4:42:ee:00:96:2e:84:b5:ad:e5:a3:d8:
                    be:a5:96:23:79:53:47:35:bf:c0:7b:85:aa:a2:fa:
                    96:07:38:15:80:e4:35:79:d2:e9:f6:5f:f1:07:3d:
                    8f:cd:e0:e2:77:28:20:10:d8:66:00:a7:9f:3a:6b:
                    7b:f3:1c:b0:37:8f:2b:d6:e2:35:df:f2:ee:13:cc:
                    90:5e:76:02:d2:14:64:ed:16:8b:fb:3b:42:39:2d:
                    47:a7:ea:9c:22:e1:1c:e9:ea:69:ed:9b:46:b5:8b:
                    0c:be:c3:c7:02:0b:f3:f1:c2:cc:7c:33:7a:1c:fd:
                    23:0e:2f:cc:06:f0:be:59:a1:83:65:6c:3a:f7:68:
                    3f:3a:f3:e7:9d:71:ff:c7:c5:c9:02:e0:84:22:ed:
                    7b:e6:2e:34:87:76:a2:13:e6:1f:37:80:2d:a6:87:
                    bc:50:71:17:97:c4:63:67:e2:c8:d5:f7:9b:f3:c5:
                    39:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6B:6E:E1:CC:BA:DE:61:C1:AE:A8:35:4B:7C:D0:00:1F:3F:73:59
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e36372e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:61:b7:74:08:39:1e:ad:39:5b:fa:fe:73:1a:8c:0e:28:72:
         e7:78:14:09:d5:37:da:4b:61:0d:66:8f:17:2b:48:c5:f6:6c:
         63:a4:94:67:2f:b8:df:a6:6a:11:49:80:da:ec:02:8f:2e:56:
         4d:3e:c6:6c:71:92:37:e0:0b:ea:57:ea:37:5a:12:51:13:7a:
         f5:d6:3c:2e:bc:98:be:55:22:dd:b9:8c:3f:21:3c:66:cc:a9:
         2f:ba:11:98:fd:13:22:b6:56:4c:e0:9b:85:37:36:3d:06:b0:
         11:8b:06:c7:dc:e9:e7:34:0a:86:23:fa:59:8c:a4:8a:bd:f8:
         39:bd:26:55:35:c0:f2:92:75:57:5d:a5:ef:7f:47:a7:d7:62:
         4a:70:c4:0f:02:f4:f8:36:cd:27:2a:57:01:c5:12:ed:53:d1:
         38:b6:1f:20:0c:ee:1a:7e:9f:d9:e3:34:ec:2e:33:4f:3e:50:
         de:ac:8a:e6:d3:31:49:12:23:bf:73:1c:7c:bb:f0:b3:5e:62:
         d0:0a:76:18:08:23:49:4f:b1:52:89:8d:81:48:2d:f8:eb:92:
         80:24:f3:c3:24:58:9e:d7:30:8d:a7:8e:a5:42:62:ff:25:7e:
         6d:0a:6e:98:50:dc:eb:a8:90:83:1d:a5:ab:20:5a:14:bb:e6:
         46:63:b0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:43 2026 by rpki-client