Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa
File:                     3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa (raw, json)
Hash identifier:          gYyDVBNmuIeIRHbbL6vLxvw/JaJDB0OGWsy3CCM0jsE=
Subject key identifier:   B8:53:6A:75:D8:26:F2:8A:28:7B:CC:CD:57:87:A9:6E:CD:2C:7F:EC
Certificate issuer:       /CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
Certificate serial:       012170BEDE487C5913B9881FB196B02E14130472
Authority key identifier: 93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa
Signing time:             Wed 23 Sep 2026 19:36:28 +0000
ROA not before:           Wed 23 Sep 2026 19:31:28 +0000
ROA not after:            Wed 22 Sep 2027 19:36:28 +0000
asID:                     273942
IP address blocks:        200.107.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 09:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:21:70:be:de:48:7c:59:13:b9:88:1f:b1:96:b0:2e:14:13:04:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
        Validity
            Not Before: Sep 23 19:31:28 2026 GMT
            Not After : Sep 22 19:36:28 2027 GMT
        Subject: CN=B8536A75D826F28A287BCCCD5787A96ECD2C7FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:f2:c1:29:9a:b3:fe:39:ad:7f:37:97:9b:
                    dd:1a:f3:17:a6:49:42:ae:69:d2:9a:9e:41:80:d8:
                    67:43:05:a8:59:29:05:3a:fe:6e:e8:0c:21:ac:24:
                    03:be:4f:8a:b4:61:d7:96:ef:5e:af:3e:c1:9b:85:
                    97:8a:c1:c7:85:bf:bb:5c:84:be:50:3e:5c:92:3d:
                    ba:db:d8:8f:24:8a:0b:1e:29:a3:d5:ed:f3:88:68:
                    d6:28:bc:3a:74:c3:06:ae:74:f2:cc:b0:69:99:a1:
                    17:bf:a3:5c:fe:fd:8c:31:21:4b:dd:4c:70:b1:38:
                    24:64:32:17:1d:b8:7a:65:a8:ef:a9:6c:4d:cc:51:
                    26:36:49:5d:7b:bb:df:21:47:cd:d7:fd:99:ba:14:
                    0b:6f:93:cd:46:90:80:02:11:a5:03:22:07:80:8e:
                    1c:4f:0a:5e:86:83:13:e8:03:ed:d7:f6:e2:52:85:
                    bb:8e:83:e8:fc:41:70:a1:fd:1c:80:16:39:a5:0f:
                    b5:79:02:9d:b8:5d:c5:cc:f5:c4:e8:15:38:be:a2:
                    42:07:05:c9:89:37:d5:37:11:97:f2:fa:54:84:67:
                    ee:d9:1d:ce:de:c2:58:c7:00:c2:41:09:24:3a:74:
                    1a:31:1f:7d:f6:4c:80:88:cd:16:f6:17:cc:a3:00:
                    83:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:53:6A:75:D8:26:F2:8A:28:7B:CC:CD:57:87:A9:6E:CD:2C:7F:EC
            X509v3 Authority Key Identifier:
                keyid:93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:a9:93:73:c2:ba:9e:d5:41:68:5e:d0:e6:8e:74:ea:fc:
         44:0e:6c:cd:df:0c:b9:71:b5:d5:fa:c3:34:1d:b5:cb:c6:37:
         1d:ae:64:1b:71:5c:10:47:be:7d:f2:0f:ff:02:71:ba:10:81:
         87:82:54:9e:31:d1:2b:74:fb:fa:7c:5f:09:6f:78:b4:99:83:
         f8:4b:a9:67:c4:42:a8:48:cb:96:92:9b:81:dc:c5:d6:61:2f:
         6a:26:0e:26:89:59:b3:36:83:f1:8f:30:df:ba:be:f9:37:fb:
         ff:b1:50:8d:ac:fa:ac:13:00:76:21:86:98:41:8b:82:5a:82:
         10:c5:84:92:f0:eb:be:1a:6b:90:85:27:20:f5:70:02:4c:ac:
         65:92:48:7b:5d:41:9b:bc:28:19:38:a6:fd:14:2d:e3:35:55:
         8a:f4:a5:09:f2:61:ae:2a:2c:d8:2e:e1:92:53:1f:61:47:08:
         b7:54:6f:ac:5b:e4:71:0d:dc:a8:97:26:72:ad:51:3f:fc:d2:
         ce:3d:58:56:44:c4:3d:9a:75:b0:5f:3c:7f:19:55:3a:a0:94:
         01:a3:d3:98:5a:35:eb:d9:2f:c3:00:19:c9:6d:b8:aa:29:fe:
         dc:d4:8f:bf:96:ec:d0:81:71:90:06:1b:bb:c6:ce:0c:cb:b6:
         09:e4:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:14:49 2026 by rpki-client