Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234332e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234332e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          ZgvKS8WCQ+sPX04dqNeHm9QmDe1Yi/Inm+O5UW//1fE=
Subject key identifier:   C0:C3:BC:FB:F6:F8:3F:B8:28:B3:FB:F4:DB:6F:D9:48:FA:05:80:9F
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       02C2770CCD87133F75DF9A2A96B25F6705321676
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234332e302f32342d3239203d3e203634313230.roa
Signing time:             Thu 24 Jul 2025 00:26:30 +0000
ROA not before:           Thu 24 Jul 2025 00:21:30 +0000
ROA not after:            Thu 23 Jul 2026 00:26:30 +0000
asID:                     64120
IP address blocks:        200.49.243.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 14:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c2:77:0c:cd:87:13:3f:75:df:9a:2a:96:b2:5f:67:05:32:16:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Jul 24 00:21:30 2025 GMT
            Not After : Jul 23 00:26:30 2026 GMT
        Subject: CN=C0C3BCFBF6F83FB828B3FBF4DB6FD948FA05809F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:dc:3b:cf:df:7e:88:05:0c:69:95:07:8b:
                    bc:aa:12:77:73:da:b0:0e:7d:d7:8c:c6:0b:47:66:
                    25:e8:e6:c7:18:8a:8f:71:10:b0:12:f1:94:d7:e1:
                    57:8e:b4:4b:c7:53:46:49:26:a1:46:47:c1:0c:e5:
                    e9:e9:e3:1a:6f:3c:c5:d5:f8:c2:51:1b:84:10:25:
                    b9:fd:26:c8:4d:b6:c2:22:ae:4b:a5:2a:b2:27:c6:
                    a0:d8:8b:71:bb:39:de:e3:91:50:ce:d5:44:69:de:
                    22:11:15:67:d1:58:4f:ce:a1:c2:14:71:07:6d:e3:
                    67:80:92:dc:fd:e8:34:8d:f4:68:b9:50:de:ef:16:
                    4d:93:d3:81:25:f8:53:4d:35:aa:f2:e3:31:e1:75:
                    aa:7b:ef:74:28:50:82:85:48:1f:d6:14:e5:08:4c:
                    6e:d9:3f:94:a4:25:e8:50:de:f4:84:50:3d:55:07:
                    9b:c1:8a:ab:7d:dd:0b:46:93:4e:74:f0:c1:fb:f0:
                    84:40:26:fc:be:49:df:30:ab:d8:7f:bf:91:5b:0a:
                    52:35:47:23:41:a0:8a:b1:c6:b6:12:cd:2c:7b:a3:
                    90:53:49:1f:04:9a:f5:34:4d:7d:d3:8f:89:e4:e0:
                    c1:f3:0a:3a:db:79:f1:69:b7:50:39:41:eb:70:12:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C3:BC:FB:F6:F8:3F:B8:28:B3:FB:F4:DB:6F:D9:48:FA:05:80:9F
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234332e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:68:7a:2e:03:ec:33:81:2c:21:80:79:c2:a5:76:c1:62:38:
         8a:92:11:15:ab:10:51:d6:ff:bd:11:69:99:e9:2c:f5:97:9c:
         16:d6:1b:72:1a:a4:8f:22:62:4e:34:e2:d5:d8:79:90:2f:42:
         ad:99:18:ef:6b:e3:73:87:2f:92:4f:9d:65:7d:d3:5b:8f:c7:
         d3:01:88:c4:72:82:40:05:fe:f7:0e:ff:41:99:12:32:90:71:
         bf:af:b0:07:f9:16:5d:ef:19:39:65:15:2e:d2:03:64:bb:46:
         f6:38:71:cb:a3:16:c3:2d:27:4d:9f:29:b6:29:83:55:9c:7d:
         5c:70:ea:67:a1:9c:61:6f:e3:83:49:db:96:3f:2a:9f:7d:c3:
         3b:c8:ce:5a:c7:92:28:54:bd:f2:ff:48:a5:a6:b0:bc:ae:57:
         43:72:bb:fb:91:e6:6b:bf:f5:2f:ee:8a:ea:bf:28:ec:ef:c4:
         27:b0:aa:a6:30:6e:ec:47:f9:74:5d:37:a8:b8:7f:22:7b:a5:
         ef:9e:bb:95:61:0a:ed:33:bf:49:f9:3f:11:96:28:2b:7b:08:
         2c:a8:9e:4e:d4:dc:92:09:1f:fa:3b:80:ca:b7:71:6c:b2:86:
         32:ad:f1:d9:5d:59:5f:bf:df:05:44:f7:5c:33:56:0b:ab:05:
         5f:4e:9c:67
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAsJ3DM2HEz9135oqlrJfZwUyFnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRCQ0ZDNkU4QUQzQkE3NDAyM0NCMkVCQUY3QjY1OTk1
QUNENEJCQTAeFw0yNTA3MjQwMDIxMzBaFw0yNjA3MjMwMDI2MzBaMDMxMTAvBgNV
BAMTKEMwQzNCQ0ZCRjZGODNGQjgyOEIzRkJGNERCNkZEOTQ4RkEwNTgwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsINw7z99+iAUMaZUHi7yqEndz
2rAOfdeMxgtHZiXo5scYio9xELAS8ZTX4VeOtEvHU0ZJJqFGR8EM5enp4xpvPMXV
+MJRG4QQJbn9JshNtsIirkulKrInxqDYi3G7Od7jkVDO1URp3iIRFWfRWE/OocIU
cQdt42eAktz96DSN9Gi5UN7vFk2T04El+FNNNary4zHhdap773QoUIKFSB/WFOUI
TG7ZP5SkJehQ3vSEUD1VB5vBiqt93QtGk0508MH78IRAJvy+Sd8wq9h/v5FbClI1
RyNBoIqxxrYSzSx7o5BTSR8EmvU0TX3Tj4nk4MHzCjrbefFpt1A5QetwEhbTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwMO8+/b4P7gos/v022/ZSPoFgJ8wHwYDVR0j
BBgwFoAUxLz8borTunQCPLLrr3tlmVrNS7owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDYwMzU3QzMxQTQwNUUwQTRBMTBGOEZDQUU5MjFFNTgw
NTM4Q0NBQ0IwN0UwREE4OEExNkQ0QjczNEI3REY4LzAvQzRCQ0ZDNkU4QUQzQkE3
NDAyM0NCMkVCQUY3QjY1OTk1QUNENEJCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEJDRkM2RThBRDNCQTc0MDIz
Q0IyRUJBRjdCNjU5OTVBQ0Q0QkJBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTA2MDM1N0MzMUE0MDVFMEE0QTEwRjhGQ0FFOTIxRTU4MDUzOENDQUNC
MDdFMERBODhBMTZENEI3MzRCN0RGOC8wLzMyMzAzMDJlMzQzOTJlMzIzNDMzMmUz
MDJmMzIzNDJkMzIzOTIwM2QzZTIwMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgx8zAN
BgkqhkiG9w0BAQsFAAOCAQEAVGh6LgPsM4EsIYB5wqV2wWI4ipIRFasQUdb/vRFp
meks9ZecFtYbchqkjyJiTjTi1dh5kC9CrZkY72vjc4cvkk+dZX3TW4/H0wGIxHKC
QAX+9w7/QZkSMpBxv6+wB/kWXe8ZOWUVLtIDZLtG9jhxy6MWwy0nTZ8ptimDVZx9
XHDqZ6GcYW/jg0nblj8qn33DO8jOWseSKFS98v9IpaawvK5XQ3K7+5Hma7/1L+6K
6r8o7O/EJ7CqpjBu7Ef5dF03qLh/Inul7567lWEK7TO/Sfk/EZYoK3sILKieTtTc
kgkf+juAyrdxbLKGMq3x2V1ZX7/fBUT3XDNWC6sFX06cZw==
-----END CERTIFICATE-----
Generated at Thu Jul 24 20:42:14 2025 by rpki-client