Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32342d3234203d3e203237393736.roa
File:                     3230302e36332e3132302e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          vvBReqK7cYAnmHliynvHqLLAFKdtugTjJ13C13hldqI=
Subject key identifier:   72:C5:4B:2B:02:4C:58:43:D3:E6:C0:6C:A6:A2:E7:C7:68:0F:55:37
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       372572CD1B1D804F97919BA16B3278EBA6886788
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:04 +0000
ROA not before:           Fri 31 Oct 2025 18:10:04 +0000
ROA not after:            Fri 30 Oct 2026 18:15:04 +0000
asID:                     27976
IP address blocks:        200.63.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:25:72:cd:1b:1d:80:4f:97:91:9b:a1:6b:32:78:eb:a6:88:67:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:04 2025 GMT
            Not After : Oct 30 18:15:04 2026 GMT
        Subject: CN=72C54B2B024C5843D3E6C06CA6A2E7C7680F5537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:e5:3c:e6:07:fd:3a:6f:95:80:90:08:e7:
                    53:2c:3a:59:b1:d3:c1:ee:94:c0:02:86:73:40:74:
                    1b:78:d8:3c:fc:66:48:29:ed:23:35:fe:bb:63:3a:
                    74:90:b0:50:11:b9:59:bd:d2:14:aa:9b:57:b1:b4:
                    18:49:eb:16:e2:51:a9:0a:ef:d1:4a:0b:88:0e:b4:
                    24:3b:fa:15:d5:6f:ca:3e:1e:56:fe:11:99:42:b8:
                    30:f4:a3:82:fc:49:97:2c:b5:aa:fe:d4:10:0f:e6:
                    49:81:45:9f:42:bc:e1:a4:e8:31:eb:4c:dc:14:16:
                    63:7e:7e:15:81:ae:f8:f4:2b:49:bb:0d:b9:96:2b:
                    9e:56:5b:7b:a9:c0:e4:3e:02:78:d2:10:e9:79:a6:
                    33:5c:d9:08:fe:e9:1b:8e:77:5c:44:ee:e8:f0:49:
                    71:49:1b:31:6a:77:58:70:0f:3e:19:04:48:ca:71:
                    bd:08:5c:31:c7:b2:cf:90:30:e2:3e:f7:98:37:7d:
                    52:c0:2d:40:cf:25:ad:7b:7a:a3:f4:91:84:3a:7c:
                    3f:13:9b:99:d2:c8:54:a6:82:3b:40:28:68:f4:7b:
                    e6:53:23:7d:a8:c9:7e:a1:b7:ee:0b:4c:17:fe:14:
                    56:60:55:d0:55:0e:a3:38:e6:24:0d:8f:0c:46:0a:
                    a1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C5:4B:2B:02:4C:58:43:D3:E6:C0:6C:A6:A2:E7:C7:68:0F:55:37
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132302e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:de:11:d8:d7:13:a6:de:33:a2:3d:9c:03:3d:2b:c4:95:b7:
         67:21:b7:ac:2f:20:37:db:7d:e8:dd:0b:41:5d:00:cd:48:94:
         21:57:17:4a:0c:32:07:b5:e6:35:93:b5:7d:91:46:10:4f:0b:
         34:1a:6f:a9:86:8b:63:00:8f:22:a9:f2:62:b1:6c:f2:85:46:
         35:37:97:92:95:8d:e2:2d:d4:cc:6f:7c:e6:e7:00:6b:f3:84:
         39:9f:a1:d3:a9:35:e1:c9:f6:7a:45:90:ab:82:ff:0e:c7:98:
         42:aa:ce:36:60:ad:32:93:70:5e:e2:54:a6:4a:02:d9:64:a6:
         d0:39:94:87:59:89:b2:09:60:2f:ab:9f:8f:65:dc:42:53:8e:
         7e:6c:70:7c:4e:de:6b:46:48:4c:fe:ef:70:1b:2e:04:a2:e8:
         46:c1:71:9e:8b:40:ca:24:b3:7b:f5:fe:e3:ff:fa:9c:67:fa:
         47:f3:9a:db:c7:84:f8:ce:da:56:0e:a0:d3:40:09:77:60:54:
         97:98:3f:b1:b4:b9:16:fd:8f:08:8d:2f:44:da:5b:a6:fc:19:
         ff:9c:5e:22:ee:ee:79:8f:c2:67:d2:7f:5b:20:dc:66:1a:ea:
         41:97:df:ff:dc:b5:2a:c3:5c:32:75:27:72:9a:52:4b:5b:8d:
         01:aa:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:43:12 2025 by rpki-client