Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32322d3232203d3e203237393736.roa
File:                     3230302e36332e3132302e302f32322d3232203d3e203237393736.roa (raw, json)
Hash identifier:          eayN+YXvH+xudHguMnhzvyE0VxOS6nTJoYsbxUa8JBE=
Subject key identifier:   D7:42:24:8C:34:A4:2B:B4:2A:75:3D:22:5A:E0:D4:BB:63:63:14:60
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       3C5C2184FCDF2126738C5A19A7A814BDC4307FED
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32322d3232203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:01 +0000
ROA not before:           Fri 31 Oct 2025 18:10:01 +0000
ROA not after:            Fri 30 Oct 2026 18:15:01 +0000
asID:                     27976
IP address blocks:        200.63.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5c:21:84:fc:df:21:26:73:8c:5a:19:a7:a8:14:bd:c4:30:7f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:01 2025 GMT
            Not After : Oct 30 18:15:01 2026 GMT
        Subject: CN=D742248C34A42BB42A753D225AE0D4BB63631460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:03:c0:15:f3:7e:32:1f:2d:da:3e:82:bf:
                    fd:80:26:a0:be:67:ce:f1:56:22:cf:e6:69:48:ea:
                    8f:ca:ce:65:65:79:01:7b:bf:60:f0:3c:1c:45:b3:
                    c5:40:29:59:fb:ee:e7:66:71:0a:3c:15:c9:66:b0:
                    09:61:bf:04:d3:2c:57:ef:22:65:5e:97:d4:04:97:
                    92:a0:ac:78:2f:0e:ad:7f:a5:bb:39:4e:ac:f0:b0:
                    f4:5e:ff:c5:0f:a2:8f:04:00:0a:dd:86:41:24:ee:
                    c5:c2:3a:41:21:1c:59:41:76:52:65:7f:7c:f7:36:
                    72:0c:1c:3f:fd:2c:19:55:32:6d:24:35:e3:32:0b:
                    22:b7:1c:1c:05:f3:7e:34:6c:94:c3:0e:6b:8a:8f:
                    56:37:3f:20:25:32:d4:65:3e:38:ed:8b:f0:e2:eb:
                    58:46:1a:94:38:fe:f0:80:66:af:54:9e:f5:8d:70:
                    36:1c:bf:bc:c0:41:a5:40:4b:fd:67:42:69:a9:db:
                    bc:b8:2d:5d:06:39:14:56:8b:56:b8:79:c8:b3:3c:
                    b5:83:70:96:a9:c1:9b:a1:2b:1e:76:0e:3a:19:d2:
                    6a:b9:5c:61:b4:3a:f5:fb:15:f1:77:ad:2f:b4:86:
                    d1:2a:f8:03:a5:21:bb:db:1b:b5:84:1e:b0:5c:ad:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:42:24:8C:34:A4:2B:B4:2A:75:3D:22:5A:E0:D4:BB:63:63:14:60
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32322d3232203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:6a:5c:6f:f9:31:7c:28:5a:29:d4:08:31:56:99:d7:91:7c:
         01:84:1e:3b:c7:66:92:fa:af:7a:32:c5:12:ce:4f:36:a8:d5:
         11:e0:6f:1d:d5:ba:93:c4:2f:63:a4:2c:b4:ca:77:c1:26:a9:
         3d:76:51:4b:ab:60:2b:9a:c0:7e:c9:7f:44:fc:99:c3:b9:6d:
         fc:5d:c5:04:22:b7:79:cc:75:4d:ef:ac:2a:e4:2c:29:a0:6f:
         f1:9b:8b:ed:52:22:89:b2:7c:7e:7c:ff:87:af:f0:4e:d7:f5:
         6e:d6:78:5d:f6:26:c1:58:1f:77:79:f5:70:1d:38:0e:45:cc:
         d0:44:97:60:7e:14:75:54:80:ab:ed:92:3e:ba:d7:75:65:10:
         45:db:45:ce:cd:f3:a2:b3:00:72:4a:94:c3:de:39:2f:b7:90:
         a4:a3:d0:51:51:d5:5c:90:f4:17:2d:77:e7:46:a3:ca:dc:6f:
         c6:f8:fc:3c:09:df:f4:1e:29:52:12:dc:3a:f7:83:10:5f:45:
         ce:b7:f0:7e:5c:d4:19:d2:9c:03:5f:c5:ff:56:f9:80:bc:e7:
         84:41:76:2f:f6:70:ed:c3:2f:12:a1:8a:bd:62:1a:dc:9a:e4:
         de:f7:ae:89:7a:c6:7e:41:9c:a2:96:d7:70:e4:33:bb:94:c5:
         46:3d:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:40:40 2025 by rpki-client