Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e3230302e302f32312d3232203d3e203237393235.roa
File:                     3230302e3131312e3230302e302f32312d3232203d3e203237393235.roa (raw, json)
Hash identifier:          MnbHmYqLOZbUSF3OTM29mZE4YRx9iThbaP4clNGnXcs=
Subject key identifier:   49:4C:32:82:C6:F1:97:3F:1F:FA:7F:CE:E3:0E:56:C4:39:B5:C2:8C
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       5E2BBB0C11753B792075AD4939D6148DB9198A3D
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e3230302e302f32312d3232203d3e203237393235.roa
Signing time:             Fri 11 Jul 2025 19:05:00 +0000
ROA not before:           Fri 11 Jul 2025 19:00:00 +0000
ROA not after:            Fri 10 Jul 2026 19:05:00 +0000
asID:                     27925
IP address blocks:        200.111.200.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 10:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2b:bb:0c:11:75:3b:79:20:75:ad:49:39:d6:14:8d:b9:19:8a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Jul 11 19:00:00 2025 GMT
            Not After : Jul 10 19:05:00 2026 GMT
        Subject: CN=494C3282C6F1973F1FFA7FCEE30E56C439B5C28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:79:02:e7:71:29:63:b5:f3:12:53:ec:e3:
                    b4:4a:46:e1:e8:68:c5:26:79:0c:b4:5a:82:52:e7:
                    2c:63:83:b3:2b:db:c0:2e:4a:ab:a8:bc:8a:1e:9e:
                    0a:1d:61:c3:95:8a:0f:cb:76:e0:ee:70:7e:75:1e:
                    fa:74:c3:86:3b:7a:36:06:b9:1f:fb:20:6a:f1:ff:
                    ee:b8:c5:d6:fd:f5:40:22:09:83:fe:8c:05:d5:c1:
                    cc:d3:5f:d7:33:ad:4f:45:f8:b1:99:99:14:68:11:
                    1e:fd:fa:03:fb:9e:39:f0:d7:7f:8a:1e:3e:09:72:
                    cc:8d:38:a6:b8:53:8b:92:d2:ff:16:a5:dc:d1:ad:
                    7f:01:84:18:cf:72:31:3d:b0:c4:c9:96:6c:5c:31:
                    e9:7c:a2:47:8d:65:a6:ee:bc:e3:e3:f3:02:d6:3d:
                    dd:fa:a9:9f:04:41:cf:55:c8:68:65:de:0a:d0:55:
                    09:72:65:82:bf:61:0b:e5:6a:bd:d2:ea:de:44:44:
                    39:9e:da:be:f3:c1:2d:e2:98:74:a1:65:64:bd:c0:
                    fc:bf:78:48:63:94:ed:da:71:e4:81:15:40:15:ea:
                    15:99:73:cf:ee:94:96:86:47:65:54:e3:b0:4a:29:
                    5b:98:8d:b9:c4:18:88:d7:89:01:2e:a1:17:28:83:
                    68:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4C:32:82:C6:F1:97:3F:1F:FA:7F:CE:E3:0E:56:C4:39:B5:C2:8C
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3230302e3131312e3230302e302f32312d3232203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.111.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:dd:44:5d:f2:ff:09:90:e0:bf:7c:18:3a:59:0d:2e:93:12:
         9a:43:e3:3f:57:2c:28:57:ec:af:07:86:84:ec:7e:52:8c:9d:
         30:34:55:db:7b:35:33:18:70:0e:0a:22:69:29:dd:ba:ba:f6:
         62:b7:11:15:95:a4:05:24:c7:56:fa:85:47:f9:c4:ba:44:de:
         be:f3:31:c3:89:98:f0:17:0a:b6:03:e4:b0:f5:17:65:b5:b8:
         6e:d9:22:7d:bc:d2:75:4a:6a:7b:c3:24:a6:b6:4c:1f:60:7d:
         d3:51:6d:f9:eb:17:9f:c9:3e:40:22:ff:97:ea:f9:60:2d:ff:
         06:1d:3d:2d:35:c5:57:f4:2e:21:42:53:bd:a1:23:e2:7e:db:
         3c:ec:ce:f5:cf:46:3d:09:9a:5c:8c:c7:09:a3:ec:88:e4:c9:
         9b:64:2b:3d:c3:a1:37:b0:bf:de:aa:75:92:74:01:1f:bb:c4:
         50:57:a9:17:6b:63:40:95:77:49:4d:bf:4f:b8:33:ee:71:4d:
         6d:88:21:74:bb:de:6a:24:7f:89:53:53:96:d2:bf:21:6e:91:
         6c:3e:63:a3:ca:75:83:49:97:c7:24:04:83:9d:c4:d2:51:80:
         61:af:cb:bb:76:5c:70:a5:02:19:33:bb:f2:61:62:cb:75:04:
         de:53:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:49:13 2025 by rpki-client