Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3230302e302e37342e302f32342d3234203d3e203233303331.roa
File:                     3230302e302e37342e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier:          iuhyCgyGNi0U9rbJ90fq2cH2BuICVVqR14D9DyWPpzg=
Subject key identifier:   E1:B9:12:1B:05:8A:FE:69:95:6E:42:30:7D:1C:B3:3D:32:8E:52:00
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       59553A859005D9ED4C7BBAC20D0735E12D909A47
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3230302e302e37342e302f32342d3234203d3e203233303331.roa
Signing time:             Thu 09 Jul 2026 19:51:40 +0000
ROA not before:           Thu 09 Jul 2026 19:46:40 +0000
ROA not after:            Thu 08 Jul 2027 19:51:40 +0000
asID:                     23031
IP address blocks:        200.0.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:55:3a:85:90:05:d9:ed:4c:7b:ba:c2:0d:07:35:e1:2d:90:9a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Jul  9 19:46:40 2026 GMT
            Not After : Jul  8 19:51:40 2027 GMT
        Subject: CN=E1B9121B058AFE69956E42307D1CB33D328E5200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:76:1e:ad:f9:ca:04:39:12:f0:a9:1d:6f:
                    d9:41:92:65:bf:02:7e:83:b5:c3:bb:89:7b:fa:62:
                    d6:05:3c:2f:20:a6:1d:cd:e2:a6:31:b8:3f:fc:4e:
                    d2:eb:19:d1:69:d6:7d:97:cb:18:41:6d:68:8d:b0:
                    50:47:98:47:52:61:e5:91:27:5f:1f:10:f5:c2:df:
                    56:6f:67:48:26:4c:79:7f:de:29:77:16:cf:65:3a:
                    10:d5:41:d7:df:df:f5:73:7e:da:e7:af:fa:2d:2d:
                    58:ad:78:d7:6b:d7:0d:38:d4:b3:b0:a9:05:c2:a7:
                    be:a3:b7:d3:f9:43:63:c8:93:a7:0a:3b:48:c0:e6:
                    83:3f:ec:71:fe:e9:c7:2e:e4:97:5f:0c:81:ae:5f:
                    09:05:4d:1e:c7:b4:ec:20:b3:73:be:ff:75:ca:fd:
                    dd:76:db:6d:b9:d5:cc:b1:d6:03:18:5b:a9:0d:4f:
                    5c:e5:02:e8:fa:2a:a2:f9:c4:6e:bb:c3:cd:5b:f1:
                    33:d3:ba:f9:56:7f:fb:e0:f9:df:7a:ee:b8:31:f7:
                    fc:f7:01:01:67:52:f9:3e:26:05:cd:3f:47:12:fe:
                    50:c7:ee:56:bc:09:32:16:1d:ec:53:cc:6f:03:1f:
                    69:96:90:f1:d7:bd:1a:7d:72:eb:19:84:c9:93:75:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B9:12:1B:05:8A:FE:69:95:6E:42:30:7D:1C:B3:3D:32:8E:52:00
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3230302e302e37342e302f32342d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d6:d3:e3:20:59:43:af:38:b5:61:88:ad:9c:80:96:3b:35:
         97:d6:56:f4:ce:36:b2:a6:72:f0:e9:6d:bd:c9:9d:63:04:cf:
         e7:c0:27:37:6b:c7:c3:0d:d7:22:15:16:fe:a8:fc:65:a6:29:
         af:23:36:9a:4f:2d:a1:fe:d1:e3:50:bd:cc:1f:70:ea:0a:a8:
         ff:3e:c6:e2:4b:7c:ab:4d:1d:ce:bb:4d:95:5b:c1:98:7a:76:
         9d:3f:fd:19:18:ff:51:2b:a4:f4:3d:cf:49:fa:20:cd:e3:19:
         4c:b1:09:18:5c:f7:7e:bb:7e:ad:8d:0a:ae:25:98:ff:e3:5e:
         c7:cc:95:f3:86:d8:c6:38:3b:23:b1:4a:f2:2a:58:d0:45:87:
         4c:8b:f9:78:3a:ab:a1:f3:85:ea:f8:b6:3e:6c:9c:0c:11:29:
         50:2c:58:cf:9a:2e:11:22:19:75:7b:1f:99:32:8b:a0:93:12:
         b8:98:56:1b:3e:53:d3:3e:be:39:b5:ad:08:dd:a2:f1:a4:f6:
         da:6b:ba:14:ff:2e:41:80:51:c7:59:23:f9:64:2a:b3:dd:3a:
         31:15:a1:42:80:65:72:76:c6:eb:80:22:a1:84:28:4f:5c:27:
         83:1f:7b:e7:61:42:5f:2b:20:47:c5:72:37:96:6d:de:ba:95:
         ab:21:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:02:19 2026 by rpki-client