Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/3230302e3233332e34372e302f32342d3234203d3e20323730303332.roa
File:                     3230302e3233332e34372e302f32342d3234203d3e20323730303332.roa (raw, json)
Hash identifier:          G2+TvPsptW4IJGqauYNETyLe3v9pIuH+RPsc5/EQjdM=
Subject key identifier:   14:B5:FC:E3:06:FA:AC:D4:C4:AD:DA:87:E3:3E:D8:1E:D8:DA:43:BA
Certificate issuer:       /CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B
Certificate serial:       64F4EBED6A00C448923BEBE3F1988EA0CDB80FF0
Authority key identifier: 25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/3230302e3233332e34372e302f32342d3234203d3e20323730303332.roa
Signing time:             Tue 01 Sep 2026 04:15:00 +0000
ROA not before:           Tue 01 Sep 2026 04:10:00 +0000
ROA not after:            Tue 31 Aug 2027 04:15:00 +0000
asID:                     270032
IP address blocks:        200.233.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f4:eb:ed:6a:00:c4:48:92:3b:eb:e3:f1:98:8e:a0:cd:b8:0f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B
        Validity
            Not Before: Sep  1 04:10:00 2026 GMT
            Not After : Aug 31 04:15:00 2027 GMT
        Subject: CN=14B5FCE306FAACD4C4ADDA87E33ED81ED8DA43BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:41:1e:3d:fd:44:0d:f0:7c:f2:1b:29:e0:
                    e5:46:c5:69:72:ee:b3:6f:f1:b5:79:56:bf:b9:0a:
                    1b:77:72:6a:3a:30:65:ad:19:5b:d5:bf:d8:1a:63:
                    f7:a1:43:e4:80:7e:50:9b:04:4a:76:34:92:0d:77:
                    5d:47:d4:7d:3c:bf:4a:ec:2d:d3:68:2c:23:25:af:
                    77:3f:fd:f1:5a:08:99:cd:5c:81:46:b0:11:6c:0c:
                    71:ce:63:0b:12:e7:7b:19:76:4d:47:1e:38:62:78:
                    21:48:13:77:55:b6:33:3e:1c:43:52:0e:de:ef:60:
                    06:57:fd:b6:bf:8e:8a:4f:76:4f:3b:e1:2c:34:8c:
                    38:e8:03:3c:7b:88:ce:30:c0:ab:c7:ed:3b:ea:de:
                    b0:68:08:55:a0:ec:e6:ce:c0:57:39:1f:c4:30:cb:
                    22:3c:3c:ec:b7:ce:43:00:93:ef:de:8c:55:d6:d3:
                    ee:92:87:79:8c:13:4d:5d:5c:72:99:07:97:90:83:
                    29:5c:48:c2:a8:6b:40:8c:8e:56:e1:b0:d2:05:b1:
                    7b:36:d1:7b:41:a8:5a:55:0a:ab:2b:fc:e8:32:21:
                    11:c1:b0:ee:14:bf:6c:d1:38:fa:3d:d9:63:9d:0c:
                    09:b0:1e:33:b7:38:1d:10:22:2c:33:ed:5f:d7:b9:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B5:FC:E3:06:FA:AC:D4:C4:AD:DA:87:E3:3E:D8:1E:D8:DA:43:BA
            X509v3 Authority Key Identifier:
                keyid:25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/3230302e3233332e34372e302f32342d3234203d3e20323730303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:2d:e7:9e:05:cc:c4:aa:95:25:4a:4c:40:10:26:fb:e7:41:
         de:c6:9e:1c:2b:25:97:24:52:ab:cf:9d:69:f7:77:2e:a1:20:
         93:35:a6:ed:f8:de:ae:d0:f8:7e:98:fd:31:91:9a:36:ee:a1:
         ec:1d:43:86:d4:7b:b4:d3:75:a5:8f:1c:13:84:70:e4:67:bd:
         e0:3e:a1:0e:26:37:49:80:21:dc:6d:c6:b6:80:d6:40:de:a4:
         48:13:16:01:c0:50:df:b3:97:ad:9b:a8:d8:4b:f4:c2:f0:8e:
         f2:9f:d0:18:d4:92:5f:91:62:74:52:32:5c:f4:c2:6d:b2:4c:
         b5:eb:38:ea:95:9a:74:43:63:eb:1c:5e:87:53:fc:1b:43:14:
         33:20:bf:21:eb:da:0e:83:2a:c3:55:b7:3b:90:33:dc:65:2e:
         a7:2d:11:f3:61:fa:1e:cc:7b:d6:07:16:a4:fa:08:2a:14:1a:
         b8:04:16:4d:ec:ac:62:a8:49:29:1f:35:9c:fd:57:d1:2a:48:
         91:df:03:7b:7c:fc:ff:05:c1:df:88:c0:0a:57:ca:26:a5:f8:
         e2:b2:f5:f2:1b:56:3d:6b:3b:0b:20:d5:ad:b0:b0:4c:7d:22:
         f2:bd:af:d2:54:9c:fe:29:5c:80:13:b1:3d:41:e0:9b:71:dc:
         1d:56:ab:b3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZPTr7WoAxEiSO+vj8ZiOoM24D/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVFMkE0MzQ5NEQxM0M2RjJBQkE2NzVEMUE1N0M0RDAw
QTEwOEIyQjAeFw0yNjA5MDEwNDEwMDBaFw0yNzA4MzEwNDE1MDBaMDMxMTAvBgNV
BAMTKDE0QjVGQ0UzMDZGQUFDRDRDNEFEREE4N0UzM0VEODFFRDhEQTQzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUEEePf1EDfB88hsp4OVGxWly
7rNv8bV5Vr+5Cht3cmo6MGWtGVvVv9gaY/ehQ+SAflCbBEp2NJINd11H1H08v0rs
LdNoLCMlr3c//fFaCJnNXIFGsBFsDHHOYwsS53sZdk1HHjhieCFIE3dVtjM+HENS
Dt7vYAZX/ba/jopPdk874Sw0jDjoAzx7iM4wwKvH7Tvq3rBoCFWg7ObOwFc5H8Qw
yyI8POy3zkMAk+/ejFXW0+6Sh3mME01dXHKZB5eQgylcSMKoa0CMjlbhsNIFsXs2
0XtBqFpVCqsr/OgyIRHBsO4Uv2zROPo92WOdDAmwHjO3OB0QIiwz7V/XuZQvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUFLX84wb6rNTErdqH4z7YHtjaQ7owHwYDVR0j
BBgwFoAUJeKkNJTRPG8qumddGlfE0AoQiyswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEVEREVFNkI2Rjg4RUExN0U2QzJDRDU2QzU1RjI5QTE5
MzdFQjg3NDVERDU2RjNFNzFCMzQwQTlGRjgzMEE2LzAvMjVFMkE0MzQ5NEQxM0M2
RjJBQkE2NzVEMUE1N0M0RDAwQTEwOEIyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUUyQTQzNDk0RDEzQzZGMkFC
QTY3NUQxQTU3QzREMDBBMTA4QjJCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRFRERFRTZCNkY4OEVBMTdFNkMyQ0Q1NkM1NUYyOUExOTM3RUI4NzQ1
REQ1NkYzRTcxQjM0MEE5RkY4MzBBNi8wLzMyMzAzMDJlMzIzMzMzMmUzNDM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzMzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOkv
MA0GCSqGSIb3DQEBCwUAA4IBAQBULeeeBczEqpUlSkxAECb750Hexp4cKyWXJFKr
z51p93cuoSCTNabt+N6u0Ph+mP0xkZo27qHsHUOG1Hu003WljxwThHDkZ73gPqEO
JjdJgCHcbca2gNZA3qRIExYBwFDfs5etm6jYS/TC8I7yn9AY1JJfkWJ0UjJc9MJt
sky16zjqlZp0Q2PrHF6HU/wbQxQzIL8h69oOgyrDVbc7kDPcZS6nLRHzYfoezHvW
Bxak+ggqFBq4BBZN7KxiqEkpHzWc/VfRKkiR3wN7fPz/BcHfiMAKV8ompfjisvXy
G1Y9azsLINWtsLBMfSLyva/SVJz+KVyAE7E9QeCbcdwdVquz
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:34:24 2026 by rpki-client