Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32332d3233203d3e203237393736.roa
File:                     3230302e36332e3132302e302f32332d3233203d3e203237393736.roa (raw, json)
Hash identifier:          uT36j5lfx9iv4ZSSV6a6qA3ClFqJK+92OJf33F5zuHw=
Subject key identifier:   9E:C8:DD:10:6F:AB:FA:EB:E9:94:88:E1:36:2C:78:2E:5E:2C:E7:64
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       66FC0D06C400C8885B8BEE3F09ED1F74C5CDDF39
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32332d3233203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:02 +0000
ROA not before:           Fri 31 Oct 2025 18:10:02 +0000
ROA not after:            Fri 30 Oct 2026 18:15:02 +0000
asID:                     27976
IP address blocks:        200.63.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fc:0d:06:c4:00:c8:88:5b:8b:ee:3f:09:ed:1f:74:c5:cd:df:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:02 2025 GMT
            Not After : Oct 30 18:15:02 2026 GMT
        Subject: CN=9EC8DD106FABFAEBE99488E1362C782E5E2CE764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:ef:9f:54:37:d8:d3:55:74:58:f9:9d:60:
                    7e:ce:4b:ad:ac:bc:85:e3:18:68:0e:92:e4:91:18:
                    28:e2:38:82:d6:44:03:af:21:f6:23:ab:2f:da:ab:
                    1b:38:0c:33:86:54:5a:1d:65:88:a9:62:07:b3:90:
                    5b:d9:df:86:f6:dd:f9:b7:e0:16:69:a6:cb:27:4f:
                    0f:48:de:06:31:75:a2:8f:ac:5f:be:d4:44:69:be:
                    2e:6e:04:a1:4e:54:ce:2c:ee:04:3f:bc:4d:a3:41:
                    3a:d3:b8:36:21:ee:d2:6b:52:be:c3:ff:00:7d:bc:
                    0e:b1:dc:6f:c6:84:27:8a:93:da:3e:41:eb:bb:6a:
                    d8:bc:73:2a:a5:29:dd:84:73:fe:6c:a6:9f:93:ba:
                    24:29:8b:8f:12:e4:06:22:81:f5:9b:e8:19:6e:b9:
                    cc:86:f2:3c:16:88:36:a2:20:65:c8:c1:79:d3:95:
                    02:49:5c:9b:7c:98:96:6d:1c:6e:b0:ea:22:97:75:
                    98:5c:12:a8:42:47:1a:c9:ee:b8:fd:7a:02:21:20:
                    9a:fe:fd:ef:16:0b:25:40:f3:1c:1b:a9:3d:04:24:
                    9b:9a:44:60:73:16:be:6d:aa:d0:70:e7:51:01:02:
                    ec:59:5a:bb:10:2e:a2:6c:e8:8c:da:e5:9b:cc:67:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C8:DD:10:6F:AB:FA:EB:E9:94:88:E1:36:2C:78:2E:5E:2C:E7:64
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32332d3233203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:af:10:0b:5d:1f:f4:e6:40:6c:76:b5:77:bb:bc:7e:bb:34:
         24:eb:6a:10:42:a7:f4:06:f3:f1:1c:6b:1c:c3:ac:de:90:1b:
         47:ea:58:4f:4d:0d:ef:84:8e:de:97:b4:5c:75:01:9c:16:2b:
         79:6c:31:19:11:6b:2e:9b:8c:a0:bc:06:55:28:28:88:5d:62:
         a4:f3:61:9c:97:a9:44:03:e1:69:6c:62:8c:27:24:e0:8d:3c:
         93:f6:9d:3d:48:be:7a:72:b6:31:06:44:a3:08:70:6e:07:9b:
         27:79:93:1d:d8:de:e6:e8:d3:d6:df:b2:a2:0d:30:26:00:0c:
         e9:46:68:5c:70:47:5e:f4:16:84:03:9e:33:94:1d:74:2f:46:
         05:d7:02:8e:dd:b7:5e:35:51:c6:55:42:d2:35:08:c4:8b:f2:
         82:47:bd:e5:02:43:e6:90:94:57:0d:23:59:e4:43:c8:79:a1:
         cb:56:11:c5:ca:d3:88:e3:1e:af:1e:ae:61:0c:ff:c4:e7:82:
         e6:f2:8f:3f:cc:17:4f:be:9a:65:69:30:9d:50:a0:b0:d4:43:
         1d:c2:ab:16:46:e9:e5:9d:f9:de:8d:a2:f8:ce:a2:01:e8:30:
         0f:a3:99:50:8f:db:71:dd:63:b7:23:92:76:27:76:49:01:bf:
         ac:51:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:40:39 2025 by rpki-client