Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e382e302f32332d3234203d3e20323632323136.roa
File:                     3230302e38302e382e302f32332d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          sf3ShUfRq/tJNKBv/WTmNWuFlPW0SfLLjsj0I+qldWA=
Subject key identifier:   05:3E:6D:B2:57:2C:09:18:DD:76:A4:68:6E:CA:0B:1D:6E:D3:65:29
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       3D5EF292B6D814FE557D6A835C5A3DEAEA30D282
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e382e302f32332d3234203d3e20323632323136.roa
Signing time:             Fri 11 Sep 2026 15:35:36 +0000
ROA not before:           Fri 11 Sep 2026 15:30:36 +0000
ROA not after:            Fri 10 Sep 2027 15:35:36 +0000
asID:                     262216
IP address blocks:        200.80.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 13:37:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5e:f2:92:b6:d8:14:fe:55:7d:6a:83:5c:5a:3d:ea:ea:30:d2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Sep 11 15:30:36 2026 GMT
            Not After : Sep 10 15:35:36 2027 GMT
        Subject: CN=053E6DB2572C0918DD76A4686ECA0B1D6ED36529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:0f:9c:50:6b:13:c0:c2:96:5f:7c:af:4c:
                    77:ab:f7:9c:77:11:0d:1f:91:bb:43:fe:30:1c:0c:
                    be:50:de:e4:ce:ad:a6:8a:8e:b4:45:35:cb:3c:29:
                    c6:4a:53:a0:5b:50:50:62:f2:7a:4f:43:d6:a8:dc:
                    ab:96:a7:fd:a4:d3:76:d3:01:dd:49:1f:e2:56:7d:
                    56:95:10:be:8e:ec:8f:11:23:48:d8:3d:34:43:92:
                    ab:53:42:71:d5:49:62:00:db:4e:47:b9:4b:c2:b4:
                    d0:66:19:1d:8f:8b:eb:37:65:cf:2a:06:a1:0d:c8:
                    c2:ef:04:12:f0:a1:c2:44:44:6a:5a:94:89:6a:98:
                    9d:5c:a6:56:a2:ca:f7:84:00:f0:44:63:cb:f6:2d:
                    24:dc:19:1b:36:9d:5f:42:a0:da:47:24:ce:f3:a9:
                    59:77:75:8b:78:d5:ca:0d:47:f6:7c:f2:0b:e2:ec:
                    76:69:7e:9b:1e:3c:41:bd:0c:72:e4:e0:5a:22:2b:
                    c6:dc:d4:70:15:f7:b7:cb:fd:be:e9:27:a1:ec:b3:
                    c6:27:60:50:b5:41:1a:4e:40:64:9e:44:ac:ee:2f:
                    a6:9a:0b:84:35:6f:71:2e:b4:af:c5:3d:a8:9c:61:
                    63:30:28:80:91:64:49:2c:8b:37:f8:63:98:a7:b6:
                    35:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:6D:B2:57:2C:09:18:DD:76:A4:68:6E:CA:0B:1D:6E:D3:65:29
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e38302e382e302f32332d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:e2:ad:a7:3b:90:a1:4a:72:29:1f:a6:30:bd:df:72:9c:
         d6:69:06:75:91:a3:27:aa:68:20:57:cc:9b:df:19:ba:07:bf:
         f8:a4:b9:8a:c7:f4:c0:ff:66:c0:e3:a1:be:0d:64:de:c5:28:
         ac:4b:ba:34:1f:0c:b6:29:ab:93:46:92:b0:21:a4:36:6d:0d:
         b9:00:bf:24:c2:22:61:6a:83:73:3e:b8:4c:f5:b4:ee:4e:30:
         c6:7b:f2:b6:4f:71:ad:62:ef:e3:da:71:b4:3b:82:83:26:4c:
         3f:be:c7:54:8e:f6:0e:78:fc:18:e1:1e:2d:24:47:3c:90:70:
         35:67:42:29:f2:1c:74:6d:82:2e:0d:e4:3a:75:34:6c:5b:e3:
         24:e4:f7:df:05:26:1b:ff:e1:f2:6c:40:1b:80:ad:31:63:c8:
         64:a7:0f:d0:53:4f:0d:2b:fb:a9:c7:46:12:d9:62:23:43:08:
         a6:22:e1:24:e2:9b:8d:4e:1f:8a:95:cb:4c:dc:ea:09:c1:bb:
         0c:a6:0d:0d:e4:6b:12:d0:ed:91:11:34:b5:ab:24:f9:9e:9b:
         bc:1f:d6:5f:4e:56:fe:12:b5:83:8d:a5:ff:a3:2d:71:3c:aa:
         52:3a:ec:bd:99:55:2f:4c:c8:09:95:02:29:da:ce:6b:c2:c9:
         63:07:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 23:18:58 2026 by rpki-client