Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03C9D364769BA49B1E2B335D42114F19E8FDDFC91DC29E863E3919574952E1A2/0/3230302e32342e3234302e302f32312d3234203d3e203237393334.roa
File:                     3230302e32342e3234302e302f32312d3234203d3e203237393334.roa (raw, json)
Hash identifier:          jO06ElfpW+LGSQ4jKRNbyCOsI5faFhZbKBOXmDpkM9w=
Subject key identifier:   81:2B:6A:58:EB:C4:07:B2:CD:66:52:BE:EC:88:FB:2B:3F:C2:16:25
Certificate issuer:       /CN=5F367E8A82904D119CC1DD96FA7CA1B048524DA5
Certificate serial:       6A1D89721E88D5E768669C108522A2DB84FBC0BA
Authority key identifier: 5F:36:7E:8A:82:90:4D:11:9C:C1:DD:96:FA:7C:A1:B0:48:52:4D:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F367E8A82904D119CC1DD96FA7CA1B048524DA5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03C9D364769BA49B1E2B335D42114F19E8FDDFC91DC29E863E3919574952E1A2/0/3230302e32342e3234302e302f32312d3234203d3e203237393334.roa
Signing time:             Thu 25 Sep 2025 13:15:00 +0000
ROA not before:           Thu 25 Sep 2025 13:10:00 +0000
ROA not after:            Thu 24 Sep 2026 13:15:00 +0000
asID:                     27934
IP address blocks:        200.24.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03C9D364769BA49B1E2B335D42114F19E8FDDFC91DC29E863E3919574952E1A2/0/5F367E8A82904D119CC1DD96FA7CA1B048524DA5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03C9D364769BA49B1E2B335D42114F19E8FDDFC91DC29E863E3919574952E1A2/0/5F367E8A82904D119CC1DD96FA7CA1B048524DA5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F367E8A82904D119CC1DD96FA7CA1B048524DA5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Oct 2025 22:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1d:89:72:1e:88:d5:e7:68:66:9c:10:85:22:a2:db:84:fb:c0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F367E8A82904D119CC1DD96FA7CA1B048524DA5
        Validity
            Not Before: Sep 25 13:10:00 2025 GMT
            Not After : Sep 24 13:15:00 2026 GMT
        Subject: CN=812B6A58EBC407B2CD6652BEEC88FB2B3FC21625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:98:d6:bf:8b:89:8e:cc:f1:d8:14:37:bd:
                    e9:db:b7:a8:fe:43:4a:5f:db:6f:92:4b:0a:f5:bb:
                    cd:6b:5b:e3:23:62:d7:63:97:fa:45:3d:09:d2:55:
                    2d:71:02:82:ce:04:92:61:04:99:0e:2b:3f:a0:c6:
                    b0:35:bf:5d:20:cc:90:68:b0:91:8c:0d:30:f5:6c:
                    5a:17:de:dc:68:ae:ff:6f:80:9e:44:02:27:87:fc:
                    97:fd:d1:37:0d:6a:b6:4f:38:41:fe:90:0f:c7:f6:
                    6d:40:c6:d8:86:5f:5f:24:81:1a:aa:32:e6:e5:52:
                    2e:28:a7:87:0e:1a:ea:63:da:fa:16:46:54:b7:39:
                    eb:7a:fe:75:1c:61:a3:48:a7:e1:96:3f:c5:bb:fe:
                    de:f1:ee:57:14:69:92:e6:67:58:b9:1e:af:4e:e4:
                    18:cb:2f:e8:48:1c:d5:b7:b7:ef:12:e9:7f:ea:72:
                    39:7c:32:b1:2a:06:62:89:4c:1d:29:6f:af:0c:31:
                    99:68:4a:b5:92:6e:73:58:7b:59:cd:90:9d:bf:2c:
                    6c:92:c3:34:a6:a6:fc:bf:38:d7:f8:69:8f:5d:d6:
                    d5:a9:0b:bd:5c:82:2a:03:2a:f2:1f:57:56:b6:82:
                    50:2c:5e:c0:1d:02:08:92:87:7c:e2:f6:cd:40:0b:
                    17:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2B:6A:58:EB:C4:07:B2:CD:66:52:BE:EC:88:FB:2B:3F:C2:16:25
            X509v3 Authority Key Identifier:
                keyid:5F:36:7E:8A:82:90:4D:11:9C:C1:DD:96:FA:7C:A1:B0:48:52:4D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03C9D364769BA49B1E2B335D42114F19E8FDDFC91DC29E863E3919574952E1A2/0/5F367E8A82904D119CC1DD96FA7CA1B048524DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F367E8A82904D119CC1DD96FA7CA1B048524DA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03C9D364769BA49B1E2B335D42114F19E8FDDFC91DC29E863E3919574952E1A2/0/3230302e32342e3234302e302f32312d3234203d3e203237393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:9d:c3:55:0b:b4:32:bf:5c:eb:4d:c7:26:5c:c6:93:28:
         46:21:6e:8b:72:18:a1:12:70:11:5e:83:de:39:e5:83:e2:98:
         5b:55:88:6f:d8:a0:c0:43:43:a5:b4:34:65:6e:ce:ec:99:6d:
         d3:27:ab:df:8f:f3:de:0e:fe:a4:c4:f3:69:21:32:bd:a0:54:
         21:7d:d1:df:25:c2:4d:56:59:18:ef:fd:47:ad:67:ed:91:de:
         29:9c:38:75:3f:17:7d:76:db:d1:38:0f:63:b9:6d:cc:a3:c5:
         ea:7e:e7:4a:9d:1c:4a:0c:66:58:d6:79:54:3d:12:36:16:6c:
         be:34:bf:ee:5d:6c:1f:0b:2a:fa:71:5d:d2:77:e5:4e:25:66:
         f5:65:33:b9:77:94:0c:f8:35:73:09:cb:46:15:02:1f:5c:94:
         85:cc:67:bc:26:aa:0a:16:c5:6d:fc:d5:78:09:c5:60:48:f2:
         72:29:5c:44:e2:54:50:d2:c8:0b:12:e8:ec:e7:2f:0c:bc:bb:
         7e:10:0e:13:67:2d:7e:2a:47:2e:f7:57:d5:2e:d8:72:0a:39:
         c0:d8:2d:8b:48:79:38:ba:ff:a5:c3:a2:5c:27:29:19:63:12:
         4e:57:77:e5:b7:20:dc:a4:1f:b3:fa:77:d2:49:5a:67:f1:20:
         c8:85:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:39:57 2025 by rpki-client