Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138392e302f32342d3234203d3e203230323037.roa
File:                     3230302e32362e3138392e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier:          Qh+wLsZPKtFp5NG4vCn5F8D8h2hxZ+zrNY8cDAwCfRA=
Subject key identifier:   82:F6:34:44:F0:6E:4A:40:8D:1B:FE:C7:86:01:14:00:A3:50:35:C6
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       4FE5D5977E0117DC0B67E9B8601391C872888319
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138392e302f32342d3234203d3e203230323037.roa
Signing time:             Thu 23 Oct 2025 17:25:00 +0000
ROA not before:           Thu 23 Oct 2025 17:20:00 +0000
ROA not after:            Thu 22 Oct 2026 17:25:00 +0000
asID:                     20207
IP address blocks:        200.26.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 19:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e5:d5:97:7e:01:17:dc:0b:67:e9:b8:60:13:91:c8:72:88:83:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Oct 23 17:20:00 2025 GMT
            Not After : Oct 22 17:25:00 2026 GMT
        Subject: CN=82F63444F06E4A408D1BFEC786011400A35035C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:09:ad:e7:0b:e1:e6:31:6d:f2:71:e1:31:
                    12:5e:24:39:8e:f6:4f:b2:9b:d6:64:44:11:7e:37:
                    f8:f4:b0:bf:d2:34:f4:02:87:4d:fe:8e:10:b2:81:
                    e4:99:33:92:7c:62:21:ff:5e:5d:5b:c3:34:b9:71:
                    c4:cb:f0:3c:87:0b:a2:e7:41:4a:e5:a5:a2:a4:ba:
                    5d:c5:a6:bf:37:ce:e7:5e:bf:02:39:ae:2c:bf:c8:
                    85:2f:4e:0d:9d:b2:ed:a3:c3:bb:5f:3b:76:1b:62:
                    27:69:e4:58:d6:79:65:10:17:f1:c4:4a:f4:f4:be:
                    a8:75:ff:03:69:cd:2f:4b:be:e8:7f:9b:e8:7a:ef:
                    b0:b9:22:e4:be:55:55:db:c0:4e:f9:bf:3f:79:a6:
                    12:d7:cb:f3:a1:07:0d:10:f9:4a:8f:f7:1b:95:8d:
                    0d:d2:3c:ed:fe:0b:e6:dd:65:36:ea:1d:36:fa:75:
                    d3:1e:f6:d0:aa:86:6a:16:67:4f:06:76:a7:cb:38:
                    ce:fc:c5:a1:13:8b:35:c4:08:b4:e2:02:4c:10:94:
                    9a:d8:99:07:8b:c6:89:74:98:9f:61:74:4b:9c:e1:
                    e5:f6:e5:07:66:38:86:b4:35:38:6c:e3:07:cc:49:
                    04:64:ba:85:71:1f:59:0d:86:90:c8:1d:fe:4c:08:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:34:44:F0:6E:4A:40:8D:1B:FE:C7:86:01:14:00:A3:50:35:C6
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138392e302f32342d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:63:20:fd:a4:41:b4:2b:c7:18:3f:5d:d2:42:86:e9:d7:14:
         b8:5c:bf:ae:43:76:84:0a:14:78:12:18:fe:80:6a:cf:ee:d4:
         96:4b:a0:46:87:ff:7c:10:af:a8:e2:f9:01:96:c2:9c:f4:2d:
         1c:43:41:9e:48:b0:27:9e:5d:b3:df:e3:a1:91:70:e0:5b:46:
         0d:90:ef:13:c7:1b:8f:df:be:bb:d5:07:44:a2:9c:ae:d8:44:
         b8:5a:23:3e:a9:23:84:be:bb:30:c3:01:ea:47:65:15:0d:f1:
         57:c0:d6:fb:1f:ea:9b:c0:7a:be:b0:c9:55:75:11:f4:c4:13:
         f2:d0:e9:a6:94:65:5e:43:75:53:8e:fe:d0:92:43:fd:ee:bf:
         2d:73:9e:f1:21:e0:28:a5:45:f0:c3:1f:9a:f1:f1:27:8a:3f:
         cf:9f:30:cd:1e:6e:ec:f8:1d:67:d0:12:28:37:be:70:05:55:
         84:8b:ff:c2:51:e7:9d:8c:e4:b7:95:f0:48:38:d5:13:af:c3:
         f3:d7:42:e4:39:bc:a6:c9:a1:c5:2b:65:84:c7:b7:6f:d4:c7:
         f2:0e:3f:b2:c8:8f:53:d7:cb:2f:8b:e6:0a:d0:8a:ab:52:89:
         84:de:a0:f4:1d:a0:75:cf:77:9c:cd:97:90:ab:45:2d:16:bf:
         fd:e5:56:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 02:42:30 2025 by rpki-client