Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3230302e3130372e3139322e302f32312d3234203d3e203237383839.roa
File:                     3230302e3130372e3139322e302f32312d3234203d3e203237383839.roa (raw, json)
Hash identifier:          730gQjHjMcLxx+gjo3WiRmB7xQ2XMPJc5Ey6FIeuuRU=
Subject key identifier:   B5:6A:3A:3B:08:E1:07:3A:A2:E6:22:98:CA:DF:B6:CF:84:13:91:36
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       211639C3FAE0E0C01E1FE5BC95D042FEAF9F5ED4
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3230302e3130372e3139322e302f32312d3234203d3e203237383839.roa
Signing time:             Fri 12 Sep 2025 21:40:00 +0000
ROA not before:           Fri 12 Sep 2025 21:35:00 +0000
ROA not after:            Fri 11 Sep 2026 21:40:00 +0000
asID:                     27889
IP address blocks:        200.107.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 15:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:16:39:c3:fa:e0:e0:c0:1e:1f:e5:bc:95:d0:42:fe:af:9f:5e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Sep 12 21:35:00 2025 GMT
            Not After : Sep 11 21:40:00 2026 GMT
        Subject: CN=B56A3A3B08E1073AA2E62298CADFB6CF84139136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:a0:7d:e2:e8:ca:0b:cc:78:08:1b:60:f1:
                    00:30:db:81:87:6e:f2:97:d1:b1:5d:d0:8a:24:f4:
                    9b:a1:ee:ef:e8:ed:b1:ec:29:be:bd:39:2e:82:8d:
                    7d:32:fa:a7:c0:09:df:2f:79:be:42:09:75:58:5e:
                    b3:be:66:be:f3:db:f4:41:79:1d:9b:14:4d:62:12:
                    62:42:e7:41:00:1d:0b:41:d3:64:99:1d:ec:ff:ed:
                    38:86:0d:8b:18:05:bb:bf:ab:ee:a8:b6:14:05:c3:
                    27:2f:a6:8c:d8:10:cc:47:d9:fc:ab:f2:2e:54:db:
                    08:73:82:3f:6b:99:61:43:54:21:9e:17:f3:63:4e:
                    65:70:92:53:9a:c9:ad:32:a0:84:94:19:2c:8b:e1:
                    64:47:d7:4c:a4:81:0f:d6:b9:7f:c0:91:5a:82:71:
                    e0:03:fa:87:5d:2f:07:71:1a:fd:15:08:92:06:03:
                    90:b0:2e:cb:ac:2c:de:65:47:96:e1:b6:be:55:20:
                    86:d2:11:0d:de:7c:90:8c:46:21:6e:4b:67:28:0b:
                    30:b3:8c:1f:cb:dc:a9:27:c7:b3:94:8b:79:7a:97:
                    4e:e0:42:a4:ad:e0:2f:61:ff:00:6d:09:90:45:16:
                    7b:3d:56:9c:3f:5c:f0:8a:8c:42:c6:f1:9a:30:6c:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6A:3A:3B:08:E1:07:3A:A2:E6:22:98:CA:DF:B6:CF:84:13:91:36
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3230302e3130372e3139322e302f32312d3234203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:45:46:3b:40:47:93:ab:92:15:5a:41:d6:93:8d:b8:80:2c:
         c4:d7:aa:fb:02:90:54:99:cd:23:f6:26:5a:e5:44:f6:63:fb:
         df:62:48:f7:8f:9e:57:68:e1:36:30:9e:64:a8:56:f1:22:20:
         ab:34:88:b9:79:65:5b:9e:75:c9:ba:a6:26:a6:fd:2c:8e:47:
         c7:0d:27:61:0d:9d:21:3b:e1:e7:5f:04:5a:55:eb:f6:d7:0c:
         99:3a:5c:05:cb:7d:ee:10:38:24:86:35:d5:fc:b6:39:d3:f7:
         68:05:de:c2:f2:f9:c0:de:a7:c3:2b:44:84:ff:2a:92:c1:eb:
         c3:44:0f:fa:a7:e9:87:f7:4e:f3:f7:36:d6:73:b7:9c:89:5f:
         a2:f1:39:c0:81:38:90:38:d9:15:79:95:78:7a:9c:6a:f1:41:
         7e:7d:48:3e:1a:25:f8:60:53:1a:0c:de:16:09:c4:b4:51:cd:
         09:57:d8:1f:09:89:f7:57:c1:d0:6d:3c:79:eb:0b:68:1a:5d:
         e3:f1:4b:9d:4e:24:da:28:3b:fe:cb:74:03:29:dd:a4:7d:58:
         85:3c:e1:75:6e:e7:d4:66:32:42:0d:c4:51:4a:e8:be:8b:0c:
         08:08:3f:50:dd:d1:29:23:5c:c0:e0:98:5f:f2:41:21:58:58:
         fc:ea:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 04:00:20 2025 by rpki-client