Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203532343638.roa
File:                     3230302e33332e3132352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          C8Lh1zM/aSu2HuT6IqPsjRbcXVoL7gFqOpXK462w6cY=
Subject key identifier:   D6:B6:89:60:8C:46:42:B7:56:80:58:69:D8:3E:86:9C:D2:DE:47:AA
Certificate issuer:       /CN=4352D0B4346D5D44265C096102BC7A3DA168ED26
Certificate serial:       76F1525D88BCC8686A6A3E4805C69FDE32EB74F0
Authority key identifier: 43:52:D0:B4:34:6D:5D:44:26:5C:09:61:02:BC:7A:3D:A1:68:ED:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203532343638.roa
Signing time:             Mon 29 Sep 2025 17:20:00 +0000
ROA not before:           Mon 29 Sep 2025 17:15:00 +0000
ROA not after:            Mon 28 Sep 2026 17:20:00 +0000
asID:                     52468
IP address blocks:        200.33.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Oct 2025 23:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f1:52:5d:88:bc:c8:68:6a:6a:3e:48:05:c6:9f:de:32:eb:74:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4352D0B4346D5D44265C096102BC7A3DA168ED26
        Validity
            Not Before: Sep 29 17:15:00 2025 GMT
            Not After : Sep 28 17:20:00 2026 GMT
        Subject: CN=D6B689608C4642B756805869D83E869CD2DE47AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:b5:3c:4d:fe:4a:b2:a7:d1:ec:47:ce:c4:
                    ca:58:c1:0e:0a:61:72:e3:27:3b:70:15:2f:2a:2a:
                    d6:70:a5:e1:39:94:fb:1f:b5:cd:ab:97:14:4d:0e:
                    63:0a:84:1b:06:d2:34:52:10:bc:83:c8:c2:75:19:
                    c5:7e:eb:35:e4:ab:b1:08:ec:f7:77:3f:d4:be:f9:
                    6b:e5:c9:1e:35:45:30:e3:c0:54:a5:6d:8c:60:5c:
                    8e:de:72:6c:22:4e:15:a9:0b:5d:df:68:d1:45:8d:
                    73:57:19:3b:a8:1c:fc:bb:45:3a:10:a7:81:9f:8d:
                    f9:0a:83:9b:45:23:5b:20:8d:95:eb:c5:77:ce:17:
                    39:5e:c1:e9:58:58:2d:ad:c2:30:b0:d7:7e:d9:70:
                    33:75:ad:46:ae:27:1a:44:ad:3d:ca:94:92:39:f5:
                    9e:4d:3e:eb:10:88:aa:00:08:a0:ad:ad:3a:55:c7:
                    d8:15:7b:52:83:6d:57:57:cb:4d:1a:12:6a:d3:85:
                    9a:77:d7:dd:2a:62:2a:1b:53:b9:ad:15:5c:d5:f1:
                    82:01:a1:94:e5:ff:3f:3e:4a:93:8c:3c:2a:b7:c6:
                    b0:b8:27:5c:86:d3:b5:69:9d:2c:0c:76:87:05:ff:
                    5f:d2:7a:e7:89:b5:f2:bb:9a:2d:b3:27:25:3a:ac:
                    da:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B6:89:60:8C:46:42:B7:56:80:58:69:D8:3E:86:9C:D2:DE:47:AA
            X509v3 Authority Key Identifier:
                keyid:43:52:D0:B4:34:6D:5D:44:26:5C:09:61:02:BC:7A:3D:A1:68:ED:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4352D0B4346D5D44265C096102BC7A3DA168ED26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94A7B1A695E307F8588C9F2A5E003D56148194BFAD5C50DAC42B1D98196DCC6A/0/3230302e33332e3132352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:f5:fd:26:a3:8f:b7:b2:b6:e6:ef:16:da:b7:28:da:81:9b:
         9c:ea:fb:ab:8a:88:23:85:69:25:f3:d9:1e:e4:eb:eb:f3:67:
         95:49:30:d8:24:d6:03:ee:4f:0a:fe:fb:65:31:91:4e:6c:dd:
         77:c5:04:b1:a6:41:fa:22:87:e3:29:60:5b:fd:76:4e:67:9a:
         26:2f:b3:b4:47:ff:a4:bb:9c:5e:30:af:56:d4:32:c8:7d:2a:
         c5:2b:31:53:1e:6f:8e:91:f6:9c:e2:aa:a9:51:89:ef:36:7e:
         d3:92:0b:b1:54:20:12:31:e7:b9:06:9e:3d:02:13:4f:70:88:
         3a:09:7c:9f:92:2c:5c:e6:53:ca:71:b6:2f:07:ea:1e:c5:5e:
         87:87:37:5c:5f:5e:a3:90:45:d2:f8:d9:1e:8f:64:56:62:43:
         81:f6:47:47:73:6f:64:14:88:3f:39:ac:2a:c7:91:07:3b:92:
         fd:bc:1b:ec:7b:46:5b:b2:7e:1a:78:e4:24:b2:c6:41:54:6d:
         82:c7:fd:6c:4a:69:5c:e8:53:e5:c1:83:19:d2:67:5d:ae:28:
         d8:47:a4:6a:f3:f1:f9:9d:d8:d6:aa:4d:e2:f7:0c:0e:69:40:
         06:28:0f:31:0a:5e:f6:fb:ec:58:9a:8a:08:47:11:3f:01:27:
         08:44:4f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 19:45:41 2025 by rpki-client