Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e32322e302f32332d3234203d3e20323632323136.roa
File:                     3230302e38302e32322e302f32332d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          ouE5KPVMyDdWwRk1PfjMb9O1e84P4zOwcV1PlPEUK7c=
Subject key identifier:   4A:04:EE:17:61:94:91:62:E6:26:24:0F:2E:80:1F:24:A2:DE:E1:97
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       08DF41E9E8386975ABFC9FDCA91D3A3572A41250
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e32322e302f32332d3234203d3e20323632323136.roa
Signing time:             Fri 11 Sep 2026 15:35:36 +0000
ROA not before:           Fri 11 Sep 2026 15:30:36 +0000
ROA not after:            Fri 10 Sep 2027 15:35:36 +0000
asID:                     262216
IP address blocks:        200.80.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:df:41:e9:e8:38:69:75:ab:fc:9f:dc:a9:1d:3a:35:72:a4:12:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Sep 11 15:30:36 2026 GMT
            Not After : Sep 10 15:35:36 2027 GMT
        Subject: CN=4A04EE1761949162E626240F2E801F24A2DEE197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:5d:66:c8:66:ca:f2:c8:89:dd:3d:fe:cb:
                    4f:2d:f7:14:ae:3e:bb:65:fc:89:d2:43:d2:80:59:
                    0c:ff:32:6e:7a:ea:a6:ed:a0:fd:d2:2f:b8:b9:ac:
                    f1:e4:e6:97:9d:52:68:5f:e7:d3:31:db:20:09:41:
                    1d:d3:ce:de:c1:f5:e4:75:30:c8:2d:04:fd:7a:49:
                    27:2c:5d:4a:e3:e5:2e:d8:90:dc:75:27:62:04:cd:
                    5d:e8:77:e2:f0:a5:1a:3d:07:af:07:b9:c8:30:30:
                    c2:6b:28:05:d9:8e:50:d6:ac:3a:5f:4e:9f:f7:03:
                    ab:aa:2d:5a:77:6f:1e:0a:43:67:59:0a:66:97:98:
                    cd:1f:26:5a:cf:c7:6e:d7:8f:51:20:18:a9:0f:6b:
                    2f:7d:fa:73:e2:8e:d2:30:71:32:2b:e2:d7:0b:17:
                    1d:a4:07:ab:36:ee:b2:5c:8e:7a:4e:58:dc:45:87:
                    6b:46:3f:07:07:40:ad:8b:09:53:9e:11:ef:87:a7:
                    15:31:f7:40:0a:22:99:d0:24:48:65:07:65:4d:ae:
                    28:cf:71:00:4c:65:d2:7d:c0:36:f1:8a:be:42:34:
                    eb:c0:4b:52:38:76:e2:69:5b:69:50:1d:2e:a3:d1:
                    97:75:a1:c8:3c:b6:bf:13:cf:4b:d0:b1:fe:96:73:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:04:EE:17:61:94:91:62:E6:26:24:0F:2E:80:1F:24:A2:DE:E1:97
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e32322e302f32332d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:91:c4:be:a7:98:05:2c:ad:4b:c3:d4:6f:0f:8f:f4:f3:71:
         96:f9:53:6d:52:2a:ec:34:de:70:9b:28:e6:79:e3:13:b7:ab:
         89:ab:9c:91:e1:af:80:b3:68:64:25:12:f9:0c:e3:26:e5:c0:
         94:88:06:ba:62:1e:bd:dd:f9:79:bc:44:ee:c4:fa:6c:8e:20:
         2f:1d:36:d4:43:88:d7:dd:81:5e:57:c4:56:71:94:cb:6f:ce:
         8e:20:7e:da:9e:21:28:ba:61:79:ee:d7:81:fb:a6:4d:a8:f4:
         02:c2:89:1d:32:8c:ee:35:14:1f:9f:2f:b8:61:9e:c3:db:22:
         4f:e8:75:de:f2:e2:63:b0:45:f4:f1:33:80:b7:c4:2e:68:11:
         dc:1d:f4:17:b3:71:22:8d:0e:13:b0:5d:dd:91:91:b6:7d:e1:
         1a:73:ce:7c:af:de:13:f8:59:2d:34:8c:00:e0:b7:8b:4f:c1:
         a8:28:b0:9a:1d:12:7a:07:d8:75:b7:06:32:1a:ee:85:e7:b1:
         3b:46:69:55:f0:28:8e:93:fe:a4:09:7d:f0:36:98:60:5d:b2:
         b0:72:44:6f:73:58:4e:fd:d9:83:1d:2a:c2:74:98:76:71:50:
         c0:f4:88:e7:41:9e:41:19:63:9a:1a:db:1f:53:57:f2:36:f9:
         15:0e:4b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:32:30 2026 by rpki-client