Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234312e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234312e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          4JkScT71sN8vXKVBRY5w8eHJCVrKVZT/2Zm6kSymgZc=
Subject key identifier:   DC:13:52:79:69:7A:2A:F8:97:4C:C9:44:B0:6C:81:46:18:36:1F:D2
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       0CFFFAAB608F8938315DACE6C0A361569775A449
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234312e302f32342d3239203d3e203634313230.roa
Signing time:             Sat 12 Jul 2025 00:25:06 +0000
ROA not before:           Sat 12 Jul 2025 00:20:06 +0000
ROA not after:            Sat 11 Jul 2026 00:25:06 +0000
asID:                     64120
IP address blocks:        200.49.241.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 04:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ff:fa:ab:60:8f:89:38:31:5d:ac:e6:c0:a3:61:56:97:75:a4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Jul 12 00:20:06 2025 GMT
            Not After : Jul 11 00:25:06 2026 GMT
        Subject: CN=DC135279697A2AF8974CC944B06C814618361FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:d9:6f:e2:46:c3:6d:a6:88:00:0d:f5:87:
                    34:be:56:34:47:59:0d:cb:2c:90:0e:43:6f:3c:79:
                    cb:46:04:1c:3b:43:e5:ef:11:0f:52:9e:9a:cb:b7:
                    da:4d:ae:bb:5d:16:30:26:8a:e7:22:02:0a:53:24:
                    bf:d6:d8:c9:2d:81:03:06:68:3d:b5:f6:b2:40:31:
                    1f:bd:22:13:98:1e:d6:63:c6:7f:9f:4d:fb:0e:68:
                    4f:9e:00:35:8a:0e:ef:2b:ee:f1:7d:ad:80:a3:5d:
                    e0:fc:2a:5c:db:63:a2:d0:52:2f:2c:ae:e6:d4:6c:
                    11:fb:99:cd:91:06:ca:61:d3:59:2a:d4:0e:af:21:
                    75:a4:0c:6b:68:68:39:93:0a:97:db:a0:c5:95:2e:
                    4d:4e:7b:f3:13:be:06:86:8d:d3:41:2b:53:e1:54:
                    b0:c9:02:c0:dc:13:e4:cb:e5:e6:61:7d:9e:df:a7:
                    26:97:ce:53:6d:73:dd:a9:e2:10:6e:22:79:49:1c:
                    81:41:63:40:ee:31:6a:ce:84:f1:c3:d1:63:40:2d:
                    36:bf:74:26:23:c3:42:d5:98:de:e8:ce:2d:8f:f5:
                    82:64:71:ab:96:6d:39:08:26:ed:41:ea:56:a5:a7:
                    b1:11:4b:7a:8a:dc:9e:db:75:9e:e1:e4:e0:a1:34:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:13:52:79:69:7A:2A:F8:97:4C:C9:44:B0:6C:81:46:18:36:1F:D2
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234312e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b9:98:79:aa:ba:83:cb:41:11:36:c4:47:37:59:58:75:3e:
         81:f2:eb:a8:3e:52:a3:bb:1d:58:b5:66:49:23:e1:88:c7:92:
         a0:c8:4c:03:f7:55:83:a8:77:d7:e5:61:27:e6:16:dc:2a:93:
         5c:f9:d3:7a:ed:76:51:2e:5e:40:0b:49:58:c4:6e:db:a4:16:
         c3:7f:ec:83:12:82:a6:66:19:ed:fb:8b:2c:11:10:78:d5:59:
         07:33:0c:c0:98:27:66:6d:ac:6b:eb:96:ca:b9:0f:e0:17:01:
         22:6e:d0:b7:8b:2f:9e:36:e2:c0:44:e9:14:76:3a:1d:95:f2:
         63:75:a5:d6:e7:bc:ae:7b:1d:fb:bf:32:94:79:10:f7:ee:d6:
         69:97:33:ab:53:0e:01:14:0b:7c:60:00:81:41:75:c3:aa:f8:
         34:a4:64:a6:74:8b:52:05:b9:14:33:c1:62:33:bd:a9:88:03:
         c1:01:df:13:04:5b:76:fc:6b:42:1d:e6:27:28:6a:48:e7:41:
         3a:52:55:48:6b:a2:51:7b:29:00:81:da:7d:a8:66:13:01:89:
         3b:de:61:c0:74:f6:93:7c:da:04:63:59:80:3f:97:95:8d:36:
         45:af:84:71:22:52:a7:78:48:3b:7d:db:83:9c:86:42:df:ca:
         52:15:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:52:22 2025 by rpki-client