Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3230302e302e37332e302f32342d3234203d3e203233303331.roa
File:                     3230302e302e37332e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier:          mEh1L2MLIIS89nl+AoZqjw1aMpgWxtTxLqeEHYkvw6I=
Subject key identifier:   D5:DF:0D:19:A7:9E:9F:82:E2:AF:FE:B5:EF:92:F1:F5:CA:FE:B2:F8
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       037F76A9382AE7594BE203FFBA688AE42E2467ED
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3230302e302e37332e302f32342d3234203d3e203233303331.roa
Signing time:             Fri 03 Jul 2026 15:50:49 +0000
ROA not before:           Fri 03 Jul 2026 15:45:49 +0000
ROA not after:            Fri 02 Jul 2027 15:50:49 +0000
asID:                     23031
IP address blocks:        200.0.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7f:76:a9:38:2a:e7:59:4b:e2:03:ff:ba:68:8a:e4:2e:24:67:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Jul  3 15:45:49 2026 GMT
            Not After : Jul  2 15:50:49 2027 GMT
        Subject: CN=D5DF0D19A79E9F82E2AFFEB5EF92F1F5CAFEB2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:aa:31:ae:b4:2a:3d:63:38:a2:ff:b4:a4:
                    fe:4b:e2:3f:bf:06:ae:34:9e:f7:4a:48:12:e3:d5:
                    ee:db:35:fd:0f:82:21:84:98:cb:94:51:8c:b7:b9:
                    78:0f:15:fc:6a:5f:56:78:bb:5f:23:39:d2:30:51:
                    81:61:5f:ae:7e:a1:cf:c8:f2:86:e0:27:93:1d:86:
                    e9:cb:a8:de:8e:ec:68:0d:4e:7f:9f:fb:9e:bb:32:
                    c6:cc:b1:25:7a:34:5f:3e:1d:c8:70:31:fc:cc:de:
                    d0:e9:70:0f:43:4a:3f:cc:b0:4a:21:7a:8e:99:70:
                    bd:72:8c:9f:fc:dc:6f:c7:45:b5:fb:f6:7a:b6:e4:
                    72:20:7e:9b:05:c9:d5:3c:ac:03:34:e3:b2:c3:1a:
                    d6:ea:2f:11:07:c3:cb:34:89:d7:a8:7c:df:d3:c7:
                    b9:87:2c:c7:6d:5f:2c:87:20:04:04:dc:96:5f:92:
                    16:83:43:4b:73:a2:7f:3e:13:03:24:d0:83:69:78:
                    a8:de:66:93:fd:ab:19:97:b5:d1:c7:d6:0f:d1:0c:
                    30:0e:0f:dc:2b:85:dc:bf:30:26:1f:bf:24:3f:33:
                    7f:f4:f5:8b:75:74:b1:fe:a6:11:cd:32:26:ba:10:
                    b6:77:f2:04:8b:c3:43:dd:8d:81:39:72:25:5a:b6:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DF:0D:19:A7:9E:9F:82:E2:AF:FE:B5:EF:92:F1:F5:CA:FE:B2:F8
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3230302e302e37332e302f32342d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:31:7b:60:20:0d:ab:b7:c1:52:75:89:a6:10:4c:62:a7:a7:
         f6:ae:36:21:aa:f8:85:d5:1a:b0:49:4f:f2:0e:05:55:1a:8e:
         3c:57:7a:75:d4:59:85:2b:ce:e3:87:bd:94:90:86:6f:b9:28:
         4e:11:d4:73:20:b2:5c:53:79:2f:79:36:95:47:88:19:f9:e3:
         04:85:7f:a7:ea:2e:45:b5:18:7e:c9:08:bd:98:1c:07:8d:fe:
         4f:ee:3d:d0:b4:29:3c:7b:63:14:b1:25:ae:2b:59:7c:72:a9:
         ae:42:cd:a1:8c:48:64:c7:f5:b7:1e:f0:2a:73:5b:37:d4:71:
         23:17:fd:67:2a:d9:87:08:1c:8f:03:94:ff:1d:c7:70:45:98:
         ef:85:ee:eb:6d:b2:69:1a:2e:4d:bc:04:9c:20:f8:2c:e6:44:
         50:c7:87:36:4f:99:2e:55:fd:ec:67:eb:8d:92:7c:ee:dd:db:
         ad:89:a0:9a:bb:ba:75:d4:2e:66:98:37:b1:97:8b:c7:70:37:
         71:be:d4:32:48:d4:d4:1e:d0:f4:46:4a:84:f6:bb:e8:a1:5a:
         44:b4:38:76:8f:43:9e:d2:b8:6c:7b:25:3a:86:a6:2b:18:bf:
         45:56:dc:c5:64:ec:91:62:fe:71:ee:0c:9a:35:51:f9:60:0d:
         e1:0a:6f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:56:16 2026 by rpki-client