Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e37332e302f32342d3234203d3e203136383734.roa
File:                     3230302e362e37332e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          z3+BBctD2M3ywy/w+rLXjD0Yc4rHrC29ZdrdSliZJ5A=
Subject key identifier:   9A:06:AD:B4:82:F5:7F:50:03:93:6D:DD:F3:9A:83:27:07:81:2A:76
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       7988EE5A2288C337DD0578118199485651D97961
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e37332e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:30:00 +0000
ROA not before:           Thu 09 Jul 2026 23:25:00 +0000
ROA not after:            Thu 08 Jul 2027 23:30:00 +0000
asID:                     16874
IP address blocks:        200.6.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 17:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:88:ee:5a:22:88:c3:37:dd:05:78:11:81:99:48:56:51:d9:79:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:25:00 2026 GMT
            Not After : Jul  8 23:30:00 2027 GMT
        Subject: CN=9A06ADB482F57F5003936DDDF39A832707812A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:be:18:43:5d:5e:21:41:80:f3:7d:01:80:
                    19:fd:11:97:d3:3e:1f:31:60:2e:92:2f:44:69:82:
                    c2:3c:9d:0f:5f:64:05:c2:fb:42:69:4e:28:9d:f8:
                    8c:36:17:b9:78:eb:b1:8b:6c:a2:b2:af:c8:b5:98:
                    00:96:b3:dc:df:bc:f8:a8:c1:5e:27:61:7b:3b:7f:
                    c0:90:5d:0f:29:20:16:cf:2b:ee:5b:8c:9d:e3:2b:
                    75:9b:54:42:f3:13:d6:71:eb:13:c9:8e:98:ad:68:
                    e5:93:da:02:74:98:99:6c:05:02:52:8c:d9:83:94:
                    84:a1:53:f5:eb:f6:26:80:e1:1a:cc:71:56:04:e2:
                    a3:fc:30:30:8f:9f:e7:43:ba:bb:1c:f8:94:10:c0:
                    a8:85:b3:f5:d0:56:de:1f:b3:65:8f:9c:0a:2b:35:
                    a7:17:46:7f:ba:d6:cd:b3:5e:d1:7d:7a:32:ee:51:
                    76:57:57:1c:13:c7:eb:64:a8:6a:a6:71:6f:8c:b0:
                    5b:41:7f:d8:0e:59:f6:f2:02:b0:5d:9a:88:d2:75:
                    81:2b:08:91:81:d1:dc:c7:65:57:50:1f:d9:cf:cb:
                    f3:db:28:2c:f0:50:63:7c:d0:9c:e9:1f:b3:5e:64:
                    c5:ae:1a:94:72:7e:e6:7b:99:33:ab:07:b4:92:e0:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:06:AD:B4:82:F5:7F:50:03:93:6D:DD:F3:9A:83:27:07:81:2A:76
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3230302e362e37332e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b6:ea:71:80:e7:cb:8b:0d:9f:db:54:6c:59:85:94:de:76:
         ec:86:45:37:54:77:63:54:f2:84:a9:d7:bd:fa:99:2f:6b:7c:
         19:65:35:79:3b:b2:7c:aa:f7:14:f6:d6:8f:39:96:8d:0e:5f:
         a0:63:dc:25:5e:c6:a0:2e:a1:9b:09:11:0a:1d:04:7d:dc:1e:
         7c:01:f3:92:4d:eb:42:25:d9:df:fc:8d:5f:b8:89:63:e7:ba:
         5e:c2:d8:c4:c1:0e:67:4f:88:42:a8:c4:7a:2d:bd:28:26:ce:
         ff:2f:73:4d:2e:53:d5:29:13:58:61:3e:12:f8:cc:9a:7c:e0:
         20:35:15:76:a7:39:00:b8:b3:5b:55:7f:4b:19:b4:10:f4:42:
         0b:1b:56:4f:e9:01:cf:73:6b:30:30:15:88:5d:da:14:22:61:
         bb:71:58:3b:32:92:c2:bf:a6:5b:a8:8c:15:f1:e2:2e:b5:a4:
         a1:71:7c:0a:01:87:12:3d:f4:7e:d5:7a:0e:89:a3:56:72:b0:
         d7:b1:63:96:f8:82:a2:99:ec:19:d4:eb:c6:72:41:0b:2c:1d:
         47:0f:32:41:be:3d:a5:49:56:1e:1a:5b:32:39:c4:e7:53:00:
         ad:10:7c:33:07:46:7b:ea:d3:92:ac:d7:3b:22:82:e9:21:ac:
         29:dc:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:42 2026 by rpki-client