Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132312e302f32342d3234203d3e203237393736.roa
File:                     3230302e36332e3132312e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          ZxNVkUdlgZ8NLU81YNhuoapKIdsPvijWVQ+E+SK0G4o=
Subject key identifier:   6F:C7:D9:7A:EB:D1:3C:94:40:C4:24:80:29:3D:F7:0B:B7:7B:5A:EE
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       65100505456762FD1DA466715C941316A2F551CF
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132312e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:03 +0000
ROA not before:           Fri 31 Oct 2025 18:10:03 +0000
ROA not after:            Fri 30 Oct 2026 18:15:03 +0000
asID:                     27976
IP address blocks:        200.63.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:10:05:05:45:67:62:fd:1d:a4:66:71:5c:94:13:16:a2:f5:51:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:03 2025 GMT
            Not After : Oct 30 18:15:03 2026 GMT
        Subject: CN=6FC7D97AEBD13C9440C42480293DF70BB77B5AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:aa:9a:0c:95:9e:9f:f8:71:35:22:e7:b1:
                    e8:36:eb:24:88:f7:6e:27:6d:09:54:ad:4b:49:9f:
                    37:b7:71:b8:6c:fe:74:92:09:c8:ad:15:a2:11:f4:
                    75:7d:48:7f:61:25:e3:37:0d:58:00:1a:12:a8:e8:
                    6f:51:fb:80:55:b2:55:0d:5e:cd:20:57:c1:ae:fe:
                    8e:a9:85:fe:6b:f6:c9:62:35:9a:19:81:21:6a:97:
                    bf:1b:87:bf:16:6e:80:18:1d:2f:08:4c:19:74:c4:
                    46:4e:b1:32:ca:15:e0:4f:60:b2:38:40:c1:c0:2a:
                    14:59:e1:55:85:38:8e:56:4b:e2:bc:98:c5:36:21:
                    0e:45:f6:0f:4f:90:38:91:52:14:ea:2e:6f:d7:e6:
                    c9:d1:39:eb:48:86:c8:c1:ef:ec:7b:4e:79:a5:bd:
                    92:ef:44:25:a1:89:fc:18:68:2c:b8:b2:18:13:78:
                    33:26:a6:c7:99:7c:5f:b1:96:1b:1d:f9:15:27:03:
                    f8:f5:22:9a:40:45:b5:92:a5:ed:5f:82:3e:82:b0:
                    67:55:57:c8:e9:77:33:c1:ea:d8:df:9b:10:b9:41:
                    bd:ab:3c:7c:b8:9d:c7:30:dd:3b:51:ae:36:63:c9:
                    98:f0:4d:7f:1a:54:6a:90:fb:f8:6f:37:9f:7d:51:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C7:D9:7A:EB:D1:3C:94:40:C4:24:80:29:3D:F7:0B:B7:7B:5A:EE
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132312e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:44:ad:07:ac:5a:f8:fd:42:ff:05:8d:f7:62:e8:1e:85:9f:
         c3:c3:7f:3b:f3:84:43:7a:f7:31:2f:2d:fc:f8:8b:99:53:f0:
         be:4b:f2:8f:db:a2:ba:8d:86:d2:45:a4:b8:1b:2b:b1:33:e9:
         90:73:f3:a4:32:22:0d:14:d2:f6:b1:bb:7a:ec:b2:4c:5e:04:
         14:5e:8b:2e:1a:e8:54:1b:b8:94:30:da:24:3f:ac:69:81:bc:
         37:63:e3:72:be:4d:7c:39:b1:04:16:54:8f:10:1b:3f:7a:89:
         8a:0c:1b:71:9f:3d:32:da:72:18:6a:17:64:94:3b:fa:cb:b9:
         86:20:32:97:c7:0b:a7:71:41:47:46:f3:ce:33:1c:18:a9:de:
         27:53:60:a7:29:93:f2:dc:29:bb:f6:84:38:f5:d1:0e:74:03:
         ee:23:cd:ad:cd:82:c6:07:e2:e4:79:76:c4:65:e5:72:29:da:
         10:e5:65:fb:fa:55:2c:3f:0f:96:29:ad:25:61:98:a1:d9:44:
         8c:c5:87:16:fc:93:1a:91:4e:d1:0a:f2:e7:e2:58:88:0e:69:
         8c:34:f6:73:87:f6:4a:ed:63:ca:5b:30:a7:a1:35:d4:18:8e:
         fd:31:fd:ce:68:e0:3a:47:e0:61:c0:11:99:3c:15:b5:ac:db:
         48:27:0a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:44:08 2025 by rpki-client