Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e20323732303037.roa
File:                     3230302e332e3135322e302f32322d3233203d3e20323732303037.roa (raw, json)
Hash identifier:          K4uentlugC+DJPa5NQV09hC4qDuagvoU5lRiXj4sReA=
Subject key identifier:   DC:B8:13:EA:B4:8C:DC:03:C3:08:76:53:3D:FB:1F:8D:C7:D7:73:07
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       15813ABCD70505414C703AE303FDE558894B489B
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e20323732303037.roa
Signing time:             Fri 26 Sep 2025 15:15:02 +0000
ROA not before:           Fri 26 Sep 2025 15:10:02 +0000
ROA not after:            Fri 25 Sep 2026 15:15:02 +0000
asID:                     272007
IP address blocks:        200.3.152.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Oct 2025 12:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:81:3a:bc:d7:05:05:41:4c:70:3a:e3:03:fd:e5:58:89:4b:48:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Sep 26 15:10:02 2025 GMT
            Not After : Sep 25 15:15:02 2026 GMT
        Subject: CN=DCB813EAB48CDC03C30876533DFB1F8DC7D77307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fe:38:bb:af:fd:3c:df:9a:ad:30:57:9b:28:
                    5e:c5:bc:e0:de:ea:98:a5:85:40:81:e7:70:fd:4b:
                    bf:88:e9:33:62:69:6e:73:04:be:5f:73:fa:a4:cd:
                    06:01:13:df:d5:4e:80:8e:8d:16:e0:c0:94:75:97:
                    64:91:c1:a3:51:0b:85:e5:82:da:88:0a:a8:bb:26:
                    2f:0c:f5:22:38:85:b3:38:81:e7:7e:7a:82:a0:b3:
                    ba:06:03:a2:53:c3:71:03:1e:2e:15:77:dd:5a:bb:
                    59:ac:da:48:4f:fb:1f:35:b8:05:bb:55:3c:68:00:
                    22:20:74:36:1a:8e:e3:42:b9:53:22:47:99:3b:37:
                    1d:bc:e8:56:ad:bf:f7:de:7a:c5:a0:a6:73:c9:3e:
                    32:ac:17:f8:12:87:0c:90:4d:bf:ff:40:00:bd:97:
                    85:8e:e0:91:c0:40:9b:1f:d0:42:e9:e2:98:97:25:
                    3f:21:ef:a2:4a:a8:52:8b:db:07:70:61:3f:39:43:
                    8a:37:90:8f:43:ae:b3:9f:32:c7:31:0b:07:82:8c:
                    15:87:1c:b8:5d:06:0e:20:2a:9a:00:54:97:35:33:
                    73:97:78:6e:fa:3d:9e:a5:91:6e:f2:7c:83:5e:1c:
                    46:13:af:1f:2f:e7:b8:5a:00:11:dd:5f:fb:e4:4f:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B8:13:EA:B4:8C:DC:03:C3:08:76:53:3D:FB:1F:8D:C7:D7:73:07
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3135322e302f32322d3233203d3e20323732303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:f9:ce:14:78:e0:58:79:ce:12:c4:f0:60:42:a5:dd:49:5c:
         9a:be:b5:00:01:2c:7e:a6:00:88:46:cb:86:8b:9a:cf:1a:46:
         54:14:7b:d6:90:3f:66:8b:5f:a0:ab:cd:68:71:7b:d3:25:4b:
         d5:e6:00:58:f1:c9:8a:78:4f:ca:41:a6:fa:e5:e8:80:d9:04:
         dd:1f:f2:1d:7f:12:66:e7:f8:fb:09:8a:db:a6:5b:82:3d:ec:
         ab:da:cd:fd:8a:7c:41:96:b7:fb:83:73:8b:65:13:7a:51:9a:
         22:90:0d:a2:1d:33:0a:1a:a8:be:58:56:4c:e3:c1:98:13:46:
         7f:5e:d4:47:79:41:9c:6b:fc:3a:2a:43:30:fa:ae:a5:70:37:
         af:9a:31:ed:da:7a:72:65:91:13:f0:f8:23:51:3f:44:95:a1:
         c4:71:5c:28:44:ac:e8:4c:de:38:a8:69:0e:b7:b0:51:2e:53:
         d9:9c:be:cf:c5:c0:f5:a3:77:62:50:88:bc:27:02:88:91:4d:
         61:57:bc:ed:41:c5:5e:6b:d9:44:9f:57:36:b6:3b:f0:1a:6c:
         78:14:a8:4e:3d:23:24:c4:3b:42:30:7a:e8:20:6b:be:04:0b:
         9b:a8:56:2b:10:66:a7:b1:2e:4d:d8:95:36:a5:04:13:f5:17:
         16:80:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:15:21 2025 by rpki-client