Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234322e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234322e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          cj1jj1p3jWecwMnVVMkKYLhZrm9gQPr4tfC1W976AEw=
Subject key identifier:   80:D6:0E:EF:78:36:62:AA:EF:1B:EA:0F:68:BA:09:D7:B5:F3:00:70
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       254378AB0A890A1004CAE69497B89F76547314DD
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234322e302f32342d3239203d3e203634313230.roa
Signing time:             Thu 25 Jun 2026 00:49:40 +0000
ROA not before:           Thu 25 Jun 2026 00:44:40 +0000
ROA not after:            Thu 24 Jun 2027 00:49:40 +0000
asID:                     64120
IP address blocks:        200.49.242.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:43:78:ab:0a:89:0a:10:04:ca:e6:94:97:b8:9f:76:54:73:14:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Jun 25 00:44:40 2026 GMT
            Not After : Jun 24 00:49:40 2027 GMT
        Subject: CN=80D60EEF783662AAEF1BEA0F68BA09D7B5F30070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:cb:7a:6f:d7:b3:27:f1:f4:66:11:88:66:
                    e1:1b:fd:bb:50:cf:b3:f3:e5:7f:ba:ac:c3:1c:49:
                    65:ce:96:b2:1e:4b:9b:92:ac:c1:4d:09:34:da:28:
                    75:2a:5e:41:1e:d8:38:10:d7:79:31:01:43:80:87:
                    e1:06:19:da:78:5a:2f:11:8b:6a:82:74:7b:a7:34:
                    b8:5c:55:72:7c:2f:30:5f:eb:fc:da:df:59:08:88:
                    31:cb:99:38:fa:15:9e:ac:3b:b2:eb:a1:f6:72:07:
                    ab:d2:55:55:2e:67:4c:cc:92:f3:c8:6a:eb:54:bc:
                    21:19:d6:ce:32:68:35:92:94:7f:0f:eb:40:85:62:
                    43:5a:c9:14:1c:fa:93:f5:03:7f:48:65:15:09:7b:
                    a8:f9:49:af:ee:96:38:47:5b:10:10:13:3d:da:4e:
                    fd:2c:05:b5:ea:56:b4:43:2d:dc:d3:87:85:8c:4c:
                    96:6f:1a:02:eb:e2:65:4c:5f:79:05:52:37:67:ce:
                    33:30:4e:38:eb:20:3c:ee:9b:1c:a5:f4:05:0c:e9:
                    31:fb:07:0b:90:97:d9:ce:11:a9:80:e7:26:cb:0a:
                    73:6b:86:54:83:49:de:71:61:c7:46:01:00:70:53:
                    78:9b:9e:23:ee:e3:fa:84:b8:4e:74:4b:b7:f0:da:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D6:0E:EF:78:36:62:AA:EF:1B:EA:0F:68:BA:09:D7:B5:F3:00:70
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234322e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:36:53:67:4f:45:2f:56:e8:6e:ff:4d:ed:2a:dc:81:fe:7b:
         33:84:a2:99:ab:be:92:45:d5:68:c3:48:54:17:58:9c:97:88:
         ff:e2:55:c5:cd:2d:4b:f2:f9:b5:2e:0b:01:ea:b2:48:e9:88:
         4f:91:df:f8:35:e0:64:9b:5c:0b:83:64:54:81:89:32:ad:67:
         16:c9:a9:31:11:32:c4:bd:1b:4b:09:f2:99:4f:fd:a1:ae:1d:
         a5:3c:37:c8:b1:bb:e4:25:bf:77:1c:4b:11:f5:e0:41:a0:48:
         ad:18:a6:17:e3:3f:22:eb:67:9b:e7:32:cb:96:b3:8f:ba:48:
         cd:2b:07:de:82:b8:af:58:45:1f:a6:03:ec:72:53:42:ae:9f:
         82:d2:e3:cd:f2:4a:00:0a:45:ef:c5:ae:b3:d5:5f:66:96:19:
         ab:f3:14:ce:f7:ca:11:fa:dd:0d:79:ad:f8:9f:a9:88:51:df:
         49:64:99:bf:ad:1c:ca:b7:2f:04:6a:59:ea:fe:17:4f:bf:16:
         fd:89:0b:b7:80:60:20:7b:c0:2c:c1:6a:6e:89:f3:fa:f1:f7:
         7b:fd:7b:33:78:51:c2:c8:a7:1a:81:ef:f2:64:aa:ca:f7:54:
         a8:0e:68:88:e1:ac:de:12:f1:f4:50:e4:f1:dc:65:be:3d:eb:
         fe:29:c1:f5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJUN4qwqJChAEyuaUl7ifdlRzFN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRCQ0ZDNkU4QUQzQkE3NDAyM0NCMkVCQUY3QjY1OTk1
QUNENEJCQTAeFw0yNjA2MjUwMDQ0NDBaFw0yNzA2MjQwMDQ5NDBaMDMxMTAvBgNV
BAMTKDgwRDYwRUVGNzgzNjYyQUFFRjFCRUEwRjY4QkEwOUQ3QjVGMzAwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvI8t6b9ezJ/H0ZhGIZuEb/btQ
z7Pz5X+6rMMcSWXOlrIeS5uSrMFNCTTaKHUqXkEe2DgQ13kxAUOAh+EGGdp4Wi8R
i2qCdHunNLhcVXJ8LzBf6/za31kIiDHLmTj6FZ6sO7LrofZyB6vSVVUuZ0zMkvPI
autUvCEZ1s4yaDWSlH8P60CFYkNayRQc+pP1A39IZRUJe6j5Sa/uljhHWxAQEz3a
Tv0sBbXqVrRDLdzTh4WMTJZvGgLr4mVMX3kFUjdnzjMwTjjrIDzumxyl9AUM6TH7
BwuQl9nOEamA5ybLCnNrhlSDSd5xYcdGAQBwU3ibniPu4/qEuE50S7fw2vR5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgNYO73g2YqrvG+oPaLoJ17XzAHAwHwYDVR0j
BBgwFoAUxLz8borTunQCPLLrr3tlmVrNS7owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDYwMzU3QzMxQTQwNUUwQTRBMTBGOEZDQUU5MjFFNTgw
NTM4Q0NBQ0IwN0UwREE4OEExNkQ0QjczNEI3REY4LzAvQzRCQ0ZDNkU4QUQzQkE3
NDAyM0NCMkVCQUY3QjY1OTk1QUNENEJCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEJDRkM2RThBRDNCQTc0MDIz
Q0IyRUJBRjdCNjU5OTVBQ0Q0QkJBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTA2MDM1N0MzMUE0MDVFMEE0QTEwRjhGQ0FFOTIxRTU4MDUzOENDQUNC
MDdFMERBODhBMTZENEI3MzRCN0RGOC8wLzMyMzAzMDJlMzQzOTJlMzIzNDMyMmUz
MDJmMzIzNDJkMzIzOTIwM2QzZTIwMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgx8jAN
BgkqhkiG9w0BAQsFAAOCAQEAHTZTZ09FL1bobv9N7Srcgf57M4Simau+kkXVaMNI
VBdYnJeI/+JVxc0tS/L5tS4LAeqySOmIT5Hf+DXgZJtcC4NkVIGJMq1nFsmpMREy
xL0bSwnymU/9oa4dpTw3yLG75CW/dxxLEfXgQaBIrRimF+M/Iutnm+cyy5azj7pI
zSsH3oK4r1hFH6YD7HJTQq6fgtLjzfJKAApF78Wus9VfZpYZq/MUzvfKEfrdDXmt
+J+piFHfSWSZv60cyrcvBGpZ6v4XT78W/YkLt4BgIHvALMFqbonz+vH3e/17M3hR
wsinGoHv8mSqyvdUqA5oiOGs3hLx9FDk8dxlvj3r/inB9Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 05:39:55 2026 by rpki-client