Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e36332e302f32342d3234203d3e203631343834.roa
File:                     3230302e3132362e36332e302f32342d3234203d3e203631343834.roa (raw, json)
Hash identifier:          NjxoL/zkUGfJhki2uno2ucnlGbcGPqhak1QIjCT1uKw=
Subject key identifier:   17:31:37:B9:55:B5:61:0C:ED:F6:90:F9:DD:65:A6:46:4F:45:FD:A5
Certificate issuer:       /CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
Certificate serial:       69824B26D8E570117986A35ADCD966BDEDF0D63A
Authority key identifier: 27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e36332e302f32342d3234203d3e203631343834.roa
Signing time:             Fri 12 Sep 2025 12:50:00 +0000
ROA not before:           Fri 12 Sep 2025 12:45:00 +0000
ROA not after:            Fri 11 Sep 2026 12:50:00 +0000
asID:                     61484
IP address blocks:        200.126.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:82:4b:26:d8:e5:70:11:79:86:a3:5a:dc:d9:66:bd:ed:f0:d6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2715E315912653B65F97CF9C4C541B5DC2AFD832
        Validity
            Not Before: Sep 12 12:45:00 2025 GMT
            Not After : Sep 11 12:50:00 2026 GMT
        Subject: CN=173137B955B5610CEDF690F9DD65A6464F45FDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:52:54:ab:f2:c1:3a:50:4b:13:e8:74:41:
                    70:1c:54:51:54:aa:fa:b5:74:b2:fb:de:09:91:57:
                    61:67:bb:42:8f:8c:e9:95:93:03:14:c0:22:5c:99:
                    82:07:97:28:62:12:62:02:2e:1f:a1:3e:16:ac:93:
                    14:aa:f4:36:be:36:d8:79:a1:32:1b:d6:28:e2:82:
                    9d:88:af:36:2f:5c:2b:15:3b:ec:5e:ed:02:4b:89:
                    b3:8e:de:a9:4f:f1:2a:a8:04:c6:48:33:90:83:c2:
                    98:72:58:63:39:9f:dc:85:c7:e6:b3:ff:9d:88:36:
                    66:8b:05:df:dd:16:72:f5:83:0d:70:94:2d:10:05:
                    16:70:07:5d:aa:1c:66:b0:13:68:c9:97:90:5d:17:
                    d6:2e:67:bf:f7:f8:33:34:35:9c:ce:f1:21:e5:33:
                    71:f0:30:fc:2d:bd:d3:99:74:3b:70:88:55:df:16:
                    d1:d0:60:dc:f3:14:1b:71:d6:d6:12:4d:f7:7e:30:
                    74:a9:41:60:1b:6b:91:12:98:48:28:de:68:9e:23:
                    f0:52:48:bc:97:57:e6:ad:11:6e:71:8b:41:8c:b9:
                    91:40:22:fe:56:9c:d0:6e:c6:fa:1f:d7:79:3f:17:
                    d6:e9:35:4c:44:bf:2b:33:41:d9:9a:dc:bf:4f:ea:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:31:37:B9:55:B5:61:0C:ED:F6:90:F9:DD:65:A6:46:4F:45:FD:A5
            X509v3 Authority Key Identifier:
                keyid:27:15:E3:15:91:26:53:B6:5F:97:CF:9C:4C:54:1B:5D:C2:AF:D8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2715E315912653B65F97CF9C4C541B5DC2AFD832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D1DEFBFED354189B6B89C1C6D10B40F464D3D8A72E245889F1938F21B83024D/0/3230302e3132362e36332e302f32342d3234203d3e203631343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:2d:58:53:a3:94:d6:2d:af:db:a4:f3:0a:66:36:3b:45:83:
         c8:e8:b7:fe:f9:fd:b9:0b:a8:d2:b6:81:0d:e5:7d:b6:36:49:
         7e:7d:c9:ee:00:81:4c:84:94:57:06:d6:b1:a8:5c:98:2b:f0:
         a0:4f:ce:59:cf:8e:1c:f6:82:4a:f8:9e:8e:fc:29:85:7a:38:
         86:d8:af:55:76:c1:f4:02:b6:69:f8:37:84:47:f4:96:ba:d6:
         26:bf:51:ca:61:10:48:16:2e:3a:2e:05:be:1e:83:5f:26:38:
         94:63:d5:4b:ca:c1:5f:e3:d1:cf:22:48:cf:6c:e1:1c:03:5b:
         18:65:12:4b:64:88:f5:6b:a7:04:14:49:a0:f2:e2:60:57:a7:
         df:d6:ef:44:cc:05:6f:f8:f5:19:82:11:56:a4:84:54:ed:0e:
         11:93:4e:08:b3:11:f8:fd:9c:65:50:c4:93:98:c6:bc:b7:d2:
         d8:08:7f:42:cc:36:bf:58:a7:df:67:57:fd:16:7d:7d:e8:77:
         44:3a:55:d6:35:bf:9c:73:cb:f5:5a:d5:b5:38:e3:c5:4a:ae:
         d5:e6:0a:3a:21:c2:05:83:e4:b9:83:c1:d9:d4:b1:71:5f:87:
         41:59:ab:89:42:27:27:14:b6:1d:95:d0:34:08:14:2b:e7:8e:
         02:01:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:33:03 2025 by rpki-client