Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132362e302f32342d3234203d3e203237393736.roa
File:                     3230302e36332e3132362e302f32342d3234203d3e203237393736.roa (raw, json)
Hash identifier:          O6ymzqrGky5vfMI3bloDzJwCF0A5okS/Y8+pXjyHCn4=
Subject key identifier:   EE:12:3C:3B:4F:D4:97:98:72:B6:34:94:EC:CE:DE:9B:B8:91:2E:BF
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       1389AF77C6E8B2DB193FDB497A0ABF294348E3D7
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132362e302f32342d3234203d3e203237393736.roa
Signing time:             Fri 31 Oct 2025 18:15:09 +0000
ROA not before:           Fri 31 Oct 2025 18:10:09 +0000
ROA not after:            Fri 30 Oct 2026 18:15:09 +0000
asID:                     27976
IP address blocks:        200.63.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:89:af:77:c6:e8:b2:db:19:3f:db:49:7a:0a:bf:29:43:48:e3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct 31 18:10:09 2025 GMT
            Not After : Oct 30 18:15:09 2026 GMT
        Subject: CN=EE123C3B4FD4979872B63494ECCEDE9BB8912EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:63:70:b1:8e:70:aa:e7:53:f8:10:32:f3:
                    32:ac:a5:61:5a:56:72:de:aa:d3:5e:1c:02:ca:dd:
                    39:64:68:85:af:e6:ff:e8:b6:04:f8:4d:b1:93:59:
                    8f:05:94:9f:12:84:1b:02:4a:15:44:83:cd:a4:d7:
                    ae:33:7d:cc:88:02:5c:37:d7:6e:15:ec:f5:05:e4:
                    dd:07:a8:b3:61:2f:c6:9f:5d:67:22:71:52:65:13:
                    d9:08:ce:92:17:23:27:1d:e6:6e:27:8a:b0:84:8e:
                    2c:6a:25:07:bc:96:47:4e:9c:c3:5b:a1:62:a6:ff:
                    9a:78:c1:a2:94:c1:cb:8b:e2:5c:34:d9:4e:07:93:
                    79:dc:60:5b:0a:a1:ee:95:e9:31:21:3d:9f:a0:50:
                    de:ee:8c:e9:ef:be:73:a5:20:b1:53:6d:ea:06:74:
                    6c:b0:06:88:69:a3:cf:e2:f1:b0:6c:bf:ef:d4:18:
                    14:12:a4:03:cc:e9:78:64:bf:34:b8:f7:ef:54:04:
                    cf:7e:86:f6:de:1e:a6:b7:d2:2a:b6:b3:cd:12:ab:
                    83:08:09:79:d1:cc:b6:d8:26:04:aa:38:dc:2d:13:
                    c4:a3:26:a9:ad:8b:96:24:46:c2:d1:2d:14:c9:8b:
                    53:31:96:15:c9:48:50:68:6b:be:ee:69:69:d3:1b:
                    4c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:12:3C:3B:4F:D4:97:98:72:B6:34:94:EC:CE:DE:9B:B8:91:2E:BF
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132362e302f32342d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:21:08:b2:c0:71:65:d4:58:14:21:be:58:df:7e:58:1d:02:
         e6:35:82:6a:83:a0:91:c3:6a:a0:f3:7e:86:64:1a:f1:fe:dc:
         94:aa:83:86:c5:e7:72:29:0d:c1:d2:a9:09:0f:d3:e7:56:b1:
         60:11:32:67:9d:be:59:6c:b5:9e:a0:70:28:3c:03:ad:66:9b:
         bd:98:cc:8c:c4:70:b8:6a:34:fd:64:71:42:fa:3c:f9:11:e8:
         c5:89:67:21:db:3c:f1:1f:47:bc:a1:3d:d3:f1:63:92:3f:60:
         f9:83:62:c1:df:be:09:80:db:91:18:fa:e1:56:8f:a2:49:32:
         3e:45:60:b0:c8:65:12:2d:5a:c2:6b:b1:0d:3b:34:6e:ad:a6:
         07:09:e4:92:7d:c6:d4:df:3b:2c:1a:a2:1b:30:14:5c:1c:b8:
         d9:88:a0:8b:15:5a:65:f8:2e:26:c7:ed:04:82:a6:db:b4:49:
         38:d1:6c:1a:d5:c3:02:a3:77:a2:99:70:b8:cf:0e:7b:ac:8e:
         1d:77:ed:9f:47:0c:bb:f1:96:18:90:51:f4:0d:8b:a4:10:6a:
         9e:21:2d:9f:9d:8e:15:c8:5c:e3:66:74:0e:c0:99:16:da:cd:
         7b:0c:25:8d:cb:49:43:2e:f4:7c:0a:14:92:f9:56:02:6e:ec:
         7a:74:65:54
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUE4mvd8bostsZP9tJegq/KUNI49cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRFNDczMjY3QzdFRDhEQkZDQ0QyMDlBQzA5QTFDQTdC
ODRBN0MzOTAeFw0yNTEwMzExODEwMDlaFw0yNjEwMzAxODE1MDlaMDMxMTAvBgNV
BAMTKEVFMTIzQzNCNEZENDk3OTg3MkI2MzQ5NEVDQ0VERTlCQjg5MTJFQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vmNwsY5wqudT+BAy8zKspWFa
VnLeqtNeHALK3TlkaIWv5v/otgT4TbGTWY8FlJ8ShBsCShVEg82k164zfcyIAlw3
124V7PUF5N0HqLNhL8afXWcicVJlE9kIzpIXIycd5m4nirCEjixqJQe8lkdOnMNb
oWKm/5p4waKUwcuL4lw02U4Hk3ncYFsKoe6V6TEhPZ+gUN7ujOnvvnOlILFTbeoG
dGywBohpo8/i8bBsv+/UGBQSpAPM6XhkvzS49+9UBM9+hvbeHqa30iq2s80Sq4MI
CXnRzLbYJgSqONwtE8SjJqmti5YkRsLRLRTJi1MxlhXJSFBoa77uaWnTG0yPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7hI8O0/Ul5hytjSU7M7em7iRLr8wHwYDVR0j
BBgwFoAUxORzJnx+2Nv8zSCawJocp7hKfDkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzJEOUIxRTYxNkJGQzYwMzBGM0RBMUQ2RjIwQjZCNDE0
MzE5QThDREQ0NEVFNjQyMEI2RkZFNzBENjVDNUI5LzAvQzRFNDczMjY3QzdFRDhE
QkZDQ0QyMDlBQzA5QTFDQTdCODRBN0MzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEU0NzMyNjdDN0VEOERCRkND
RDIwOUFDMDlBMUNBN0I4NEE3QzM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMyRDlCMUU2MTZCRkM2MDMwRjNEQTFENkYyMEI2QjQxNDMxOUE4Q0RE
NDRFRTY0MjBCNkZGRTcwRDY1QzVCOS8wLzMyMzAzMDJlMzYzMzJlMzEzMjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg/fjAN
BgkqhkiG9w0BAQsFAAOCAQEAmiEIssBxZdRYFCG+WN9+WB0C5jWCaoOgkcNqoPN+
hmQa8f7clKqDhsXncikNwdKpCQ/T51axYBEyZ52+WWy1nqBwKDwDrWabvZjMjMRw
uGo0/WRxQvo8+RHoxYlnIds88R9HvKE90/Fjkj9g+YNiwd++CYDbkRj64VaPokky
PkVgsMhlEi1awmuxDTs0bq2mBwnkkn3G1N87LBqiGzAUXBy42YigixVaZfguJsft
BIKm27RJONFsGtXDAqN3oplwuM8Oe6yOHXftn0cMu/GWGJBR9A2LpBBqniEtn52O
Fchc42Z0DsCZFtrNewwljctJQy70fAoUkvlWAm7senRlVA==
-----END CERTIFICATE-----
Generated at Sat Nov 1 19:43:17 2025 by rpki-client