Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234302e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234302e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          8pi6GkUYdX8Y6anN93vRlHt8y0OHlKyIgeht2MHBquQ=
Subject key identifier:   14:2B:33:2E:2D:5F:EC:68:40:89:F2:4B:6C:FA:88:20:80:BE:C5:AF
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       59E01299542034E293C7F843C75ABD3C19F9C8A6
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234302e302f32342d3239203d3e203634313230.roa
Signing time:             Sat 12 Jul 2025 00:25:06 +0000
ROA not before:           Sat 12 Jul 2025 00:20:06 +0000
ROA not after:            Sat 11 Jul 2026 00:25:06 +0000
asID:                     64120
IP address blocks:        200.49.240.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 14:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e0:12:99:54:20:34:e2:93:c7:f8:43:c7:5a:bd:3c:19:f9:c8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Jul 12 00:20:06 2025 GMT
            Not After : Jul 11 00:25:06 2026 GMT
        Subject: CN=142B332E2D5FEC684089F24B6CFA882080BEC5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:06:c7:84:2b:d8:23:44:ba:80:c8:d1:b3:
                    96:41:56:9d:e4:9e:3e:1e:be:72:5a:9e:39:21:19:
                    d2:54:bc:f9:47:4f:13:2c:68:50:f6:33:80:df:17:
                    dc:1d:39:35:e8:f2:06:10:7f:9b:98:c6:96:5b:ef:
                    51:01:82:09:64:00:0a:8f:82:e1:7a:29:12:25:52:
                    d7:55:49:eb:6a:8a:15:24:a5:3e:5b:e1:c7:b1:e7:
                    b6:fe:5e:46:30:1a:6a:8a:44:ce:37:c8:c7:e0:f9:
                    4a:df:d7:bb:61:38:46:42:45:8d:ac:de:d7:bc:50:
                    c1:27:2d:d4:92:b9:1b:87:d9:11:ed:77:ad:d1:a2:
                    57:cd:51:15:2b:2a:48:6a:98:12:47:95:2e:e8:53:
                    fe:18:5c:ef:14:86:db:a0:be:f2:fe:b2:60:72:60:
                    a0:aa:c0:66:7f:1b:bb:be:04:49:9a:79:93:8f:d5:
                    38:3d:90:13:16:10:33:76:68:2a:e9:2b:4f:2a:7a:
                    65:13:b3:54:50:20:af:4a:b3:07:80:2d:fc:61:1b:
                    b7:d6:0a:fc:8f:1e:7c:0d:07:cb:49:53:5c:dc:4a:
                    da:63:1b:60:5b:df:e6:6e:45:9a:90:8c:d1:c9:1a:
                    51:10:e6:36:25:3d:27:08:e1:1f:60:29:a6:07:dc:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2B:33:2E:2D:5F:EC:68:40:89:F2:4B:6C:FA:88:20:80:BE:C5:AF
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234302e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:1f:bd:be:44:43:5c:49:5e:55:b4:55:67:ff:a5:a7:5d:98:
         4c:a4:1a:0d:0f:8e:0f:75:4b:88:24:8e:49:56:3e:03:6b:63:
         e8:e6:24:07:9c:f1:3a:81:6b:42:e2:ea:6d:f7:1e:7e:1f:d1:
         66:55:fd:56:1f:be:45:d6:23:c3:c1:15:37:74:60:c2:72:44:
         cb:d5:b9:01:02:5e:64:f7:13:34:cd:c3:ab:f7:61:c3:6b:85:
         5b:fb:25:01:63:1e:ba:11:38:41:f0:3b:c2:f7:f0:91:d5:b2:
         06:67:ee:c0:d5:1a:41:bf:60:65:1e:d7:7b:f2:21:ef:1d:c2:
         4b:1f:a4:84:45:62:76:c4:75:d4:33:f5:ca:1a:5e:91:b4:6a:
         f3:7d:c0:7b:2b:dd:0b:45:48:fc:56:78:d2:0f:0c:06:06:23:
         8d:1d:48:68:18:f9:81:3d:1b:5b:a8:64:79:b6:01:1e:b7:17:
         ea:68:37:1a:b9:7e:0f:c3:c8:65:df:02:49:1d:bb:26:49:a8:
         4c:7d:01:e3:c7:0d:ab:ae:44:49:ba:d9:5a:23:71:c3:32:51:
         f0:5f:93:96:d1:55:c7:d6:b8:c9:aa:68:e5:82:d5:89:f9:61:
         df:fa:c1:e0:c0:e2:6c:32:8e:2b:fd:76:2d:25:96:56:04:0f:
         e2:00:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 20:42:13 2025 by rpki-client