Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/3230302e33362e3135392e302f32342d3234203d3e20323731383739.roa
File:                     3230302e33362e3135392e302f32342d3234203d3e20323731383739.roa (raw, json)
Hash identifier:          a+WL1Tzck2mH2oJapuBeuDDD68+EX/IRs+ee+XJh0fo=
Subject key identifier:   A4:84:A3:3D:36:FF:EF:11:09:8B:9B:20:E9:AB:AD:69:C3:DD:69:05
Certificate issuer:       /CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437
Certificate serial:       04867324F55B725C0243E40DA8A914B97D6DA043
Authority key identifier: 92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/3230302e33362e3135392e302f32342d3234203d3e20323731383739.roa
Signing time:             Tue 26 Aug 2025 00:41:02 +0000
ROA not before:           Tue 26 Aug 2025 00:36:02 +0000
ROA not after:            Tue 25 Aug 2026 00:41:02 +0000
asID:                     271879
IP address blocks:        200.36.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:86:73:24:f5:5b:72:5c:02:43:e4:0d:a8:a9:14:b9:7d:6d:a0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921EE12BA5D853FB5CAD767EF47D2E0E62A2D437
        Validity
            Not Before: Aug 26 00:36:02 2025 GMT
            Not After : Aug 25 00:41:02 2026 GMT
        Subject: CN=A484A33D36FFEF11098B9B20E9ABAD69C3DD6905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:28:91:e7:4c:b4:7e:33:85:fc:5f:88:01:
                    7c:5a:65:3c:e4:04:cc:87:cf:82:b6:8a:1e:5c:fb:
                    00:8d:8f:53:61:18:39:f1:00:d7:7e:c3:bd:42:07:
                    ba:09:ab:25:07:83:ea:7b:b0:da:14:ee:d2:83:de:
                    f8:06:80:74:d6:8f:4a:58:a9:8f:21:97:fa:3c:53:
                    f7:98:1a:9f:6c:5b:cd:89:73:ae:67:1f:79:f3:bc:
                    f6:6f:e2:f4:09:53:bc:b2:19:d6:b9:61:a6:af:70:
                    57:16:a8:81:e6:b2:21:2d:e7:a6:f5:dc:cd:06:81:
                    d4:86:a9:7a:38:8b:33:da:01:72:55:ac:ec:b5:ef:
                    9f:86:f3:ff:7e:fe:fb:cd:d1:97:15:ce:b8:5d:fe:
                    dc:d0:d3:e3:a8:ae:f0:97:00:91:85:6b:58:62:d9:
                    98:aa:a9:a6:e2:ff:96:b5:fa:95:08:20:5f:ca:02:
                    80:07:af:ec:73:be:22:10:ed:2f:73:71:04:4e:d2:
                    0a:72:33:f1:c5:42:63:88:04:9a:56:45:ff:02:a4:
                    c1:fd:53:47:e5:f9:01:90:b9:3b:07:12:38:c2:dd:
                    bd:74:03:38:47:ac:c3:42:20:dc:49:6b:b2:59:a9:
                    d8:f6:53:a5:f5:55:56:0c:c9:47:17:b2:6e:e4:e3:
                    f5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:84:A3:3D:36:FF:EF:11:09:8B:9B:20:E9:AB:AD:69:C3:DD:69:05
            X509v3 Authority Key Identifier:
                keyid:92:1E:E1:2B:A5:D8:53:FB:5C:AD:76:7E:F4:7D:2E:0E:62:A2:D4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921EE12BA5D853FB5CAD767EF47D2E0E62A2D437.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CEE6A499802F08368698010BB5F172F52680D2631E4BE244AE1DC14BF8F267B/0/3230302e33362e3135392e302f32342d3234203d3e20323731383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:29:64:de:4c:23:1a:02:26:9a:71:66:ae:35:6f:4e:4a:
         f0:ba:7f:ff:db:79:e2:93:b7:10:83:77:ab:c8:f8:54:cd:f1:
         23:2c:0b:77:7a:40:cf:ec:e4:c3:cd:32:33:26:24:33:39:d1:
         cc:bc:08:d6:69:36:a5:c0:fe:34:25:4e:85:48:e6:ad:4a:1d:
         b0:58:28:a5:b0:bf:41:77:d1:5b:ed:3b:15:4e:30:d0:d0:9a:
         f7:fa:82:a5:77:49:9c:a7:c9:92:53:c7:7b:45:61:47:46:75:
         69:b9:fc:7b:37:70:bc:af:ac:be:3d:f5:d3:87:3d:2f:cd:0c:
         2d:0c:dd:98:5b:2f:1c:2d:5f:e5:8a:9e:59:f7:af:0c:b1:26:
         f3:2b:0f:55:37:12:95:28:9f:c1:6d:4d:04:49:70:77:e4:4e:
         35:1b:57:c3:90:8c:9b:4d:b9:9b:92:ae:c8:77:70:6e:f9:ef:
         1c:c9:49:c1:b8:29:0e:6b:31:f5:9b:67:8e:8f:a8:cf:73:f8:
         32:78:c9:87:63:72:06:12:1a:97:37:76:0c:26:7f:1f:97:0e:
         41:90:f8:04:dc:46:fe:dd:7c:5c:b5:b4:fe:48:20:ff:8c:08:
         41:a1:cc:a5:eb:3d:87:79:1b:e1:7b:12:52:29:e2:32:1c:6a:
         e2:f5:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:06:33 2025 by rpki-client