Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234322e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234322e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          52pxClqT9RhiXmUTQ0zXz9vq390FRJkw9RuUPP7dG9Y=
Subject key identifier:   A3:C3:63:79:75:4F:1F:B5:61:00:30:F5:EB:AB:45:00:67:F5:B9:1F
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       68ED8D55852DD78B5423D7E156FDF0CB2B866C99
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234322e302f32342d3239203d3e203634313230.roa
Signing time:             Thu 24 Jul 2025 00:26:30 +0000
ROA not before:           Thu 24 Jul 2025 00:21:30 +0000
ROA not after:            Thu 23 Jul 2026 00:26:30 +0000
asID:                     64120
IP address blocks:        200.49.242.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 Aug 2025 00:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ed:8d:55:85:2d:d7:8b:54:23:d7:e1:56:fd:f0:cb:2b:86:6c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Jul 24 00:21:30 2025 GMT
            Not After : Jul 23 00:26:30 2026 GMT
        Subject: CN=A3C36379754F1FB5610030F5EBAB450067F5B91F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:d3:7d:d3:bc:72:ed:71:a6:ee:fa:82:04:
                    45:29:4a:33:c1:77:09:e1:80:53:96:0e:06:e5:ec:
                    6f:1b:65:4c:6c:08:7f:bb:32:71:7f:95:fb:f2:b5:
                    a7:fa:e9:81:89:ac:bd:46:82:07:6f:fe:64:98:42:
                    21:28:93:cf:07:e0:51:42:fa:ce:2c:f1:34:b5:1d:
                    01:9b:23:09:7d:3c:31:6a:9f:2c:9b:b2:1f:86:12:
                    0a:63:92:b1:60:a1:b3:56:bb:57:ce:8e:e2:be:7e:
                    5f:f9:13:c3:59:84:cd:db:a7:69:e4:fb:cb:d9:af:
                    fc:76:f6:c5:61:a3:9b:76:94:91:57:db:64:a6:58:
                    5b:2b:34:95:fb:e9:45:a2:86:93:bc:cf:02:3c:42:
                    ec:5e:7a:0c:99:d0:f3:71:5b:01:21:88:b2:6b:a3:
                    e6:0f:57:b6:a5:1a:98:d7:25:a0:cf:bd:74:0e:10:
                    c1:a4:25:74:e8:cb:72:14:5c:c2:0c:02:4f:ec:e5:
                    d4:ef:90:4c:43:00:80:ba:d7:20:2e:9e:79:5a:cb:
                    c7:89:b6:87:5c:38:96:09:4d:9e:a3:c3:e6:ee:69:
                    bf:39:c9:e9:9c:4d:37:ea:41:71:6f:f2:0c:6a:14:
                    48:2e:a4:1b:37:86:18:d5:af:d2:f8:40:c8:14:8f:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C3:63:79:75:4F:1F:B5:61:00:30:F5:EB:AB:45:00:67:F5:B9:1F
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234322e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:98:05:e6:7f:4d:83:e7:4a:60:dd:09:7e:cb:81:f4:c9:84:
         b3:d5:d6:86:26:7b:b5:af:7c:08:af:22:ab:7f:4f:43:d6:ab:
         7a:1c:a8:cd:44:80:7f:e2:d0:40:f3:99:3b:8b:f5:9a:82:91:
         87:79:81:cd:ff:b9:bb:0e:17:02:45:4c:25:ea:f5:85:ab:31:
         bf:66:a8:95:1b:d8:00:c9:c7:e8:f5:d5:a6:ec:4c:03:58:ca:
         19:9a:b0:b7:5b:cf:71:ed:85:a8:71:af:d5:35:d6:fd:ca:12:
         39:ec:6f:90:67:63:f6:d2:41:01:ab:6a:c9:16:50:af:07:2c:
         47:a5:46:12:03:0b:ef:21:ab:75:b7:e9:b8:79:3e:7f:fe:79:
         c5:36:71:f8:d1:a2:b0:bf:cb:42:ca:1e:ea:0c:4c:a1:85:d1:
         8d:26:b8:92:4d:33:63:ae:04:f5:e8:83:64:68:bc:df:cd:a4:
         8d:49:e4:09:bb:1d:e8:23:76:81:f8:a2:8c:d7:00:84:cd:57:
         27:a6:eb:5b:4e:7e:41:03:ee:cc:3f:2c:60:5e:e3:16:f3:de:
         3b:c1:7b:5a:1d:a7:6d:97:cb:d6:19:62:27:0b:cd:bb:ae:bc:
         1e:d7:ed:8b:d2:89:8a:98:5d:5c:b0:ce:5b:01:41:82:12:e9:
         10:aa:2a:f9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaO2NVYUt14tUI9fhVv3wyyuGbJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRCQ0ZDNkU4QUQzQkE3NDAyM0NCMkVCQUY3QjY1OTk1
QUNENEJCQTAeFw0yNTA3MjQwMDIxMzBaFw0yNjA3MjMwMDI2MzBaMDMxMTAvBgNV
BAMTKEEzQzM2Mzc5NzU0RjFGQjU2MTAwMzBGNUVCQUI0NTAwNjdGNUI5MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClEtN907xy7XGm7vqCBEUpSjPB
dwnhgFOWDgbl7G8bZUxsCH+7MnF/lfvytaf66YGJrL1Gggdv/mSYQiEok88H4FFC
+s4s8TS1HQGbIwl9PDFqnyybsh+GEgpjkrFgobNWu1fOjuK+fl/5E8NZhM3bp2nk
+8vZr/x29sVho5t2lJFX22SmWFsrNJX76UWihpO8zwI8QuxeegyZ0PNxWwEhiLJr
o+YPV7alGpjXJaDPvXQOEMGkJXToy3IUXMIMAk/s5dTvkExDAIC61yAunnlay8eJ
todcOJYJTZ6jw+buab85yemcTTfqQXFv8gxqFEgupBs3hhjVr9L4QMgUj4gvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUo8NjeXVPH7VhADD166tFAGf1uR8wHwYDVR0j
BBgwFoAUxLz8borTunQCPLLrr3tlmVrNS7owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDYwMzU3QzMxQTQwNUUwQTRBMTBGOEZDQUU5MjFFNTgw
NTM4Q0NBQ0IwN0UwREE4OEExNkQ0QjczNEI3REY4LzAvQzRCQ0ZDNkU4QUQzQkE3
NDAyM0NCMkVCQUY3QjY1OTk1QUNENEJCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEJDRkM2RThBRDNCQTc0MDIz
Q0IyRUJBRjdCNjU5OTVBQ0Q0QkJBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTA2MDM1N0MzMUE0MDVFMEE0QTEwRjhGQ0FFOTIxRTU4MDUzOENDQUNC
MDdFMERBODhBMTZENEI3MzRCN0RGOC8wLzMyMzAzMDJlMzQzOTJlMzIzNDMyMmUz
MDJmMzIzNDJkMzIzOTIwM2QzZTIwMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgx8jAN
BgkqhkiG9w0BAQsFAAOCAQEABZgF5n9Ng+dKYN0JfsuB9MmEs9XWhiZ7ta98CK8i
q39PQ9arehyozUSAf+LQQPOZO4v1moKRh3mBzf+5uw4XAkVMJer1hasxv2aolRvY
AMnH6PXVpuxMA1jKGZqwt1vPce2FqHGv1TXW/coSOexvkGdj9tJBAatqyRZQrwcs
R6VGEgML7yGrdbfpuHk+f/55xTZx+NGisL/LQsoe6gxMoYXRjSa4kk0zY64E9eiD
ZGi8382kjUnkCbsd6CN2gfiijNcAhM1XJ6brW05+QQPuzD8sYF7jFvPeO8F7Wh2n
bZfL1hliJwvNu668Htfti9KJiphdXLDOWwFBghLpEKoq+Q==
-----END CERTIFICATE-----
Generated at Wed Jul 30 18:45:43 2025 by rpki-client