Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3234203d3e203139393035.roa
File:                     3230302e36312e33382e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier:          2CanQwP+Jnbb7GBpxM62mhygtdQDKdad93pT9hMRYkM=
Subject key identifier:   59:F2:EF:99:BA:8A:70:4A:2D:84:70:76:E5:4B:92:96:6B:A2:36:0E
Certificate issuer:       /CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
Certificate serial:       1D4FAF4AA5F671D771F3B53C23D58A198BBBA2A3
Authority key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3234203d3e203139393035.roa
Signing time:             Wed 17 Sep 2025 02:46:59 +0000
ROA not before:           Wed 17 Sep 2025 02:41:59 +0000
ROA not after:            Wed 16 Sep 2026 02:46:59 +0000
asID:                     19905
IP address blocks:        200.61.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 23:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4f:af:4a:a5:f6:71:d7:71:f3:b5:3c:23:d5:8a:19:8b:bb:a2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575
        Validity
            Not Before: Sep 17 02:41:59 2025 GMT
            Not After : Sep 16 02:46:59 2026 GMT
        Subject: CN=59F2EF99BA8A704A2D847076E54B92966BA2360E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:e1:49:71:3c:3b:e6:6b:50:82:7f:20:f3:
                    32:63:70:11:29:bb:ac:ef:40:c4:1e:b5:c0:1d:20:
                    c3:45:f1:0b:35:4a:ac:91:00:a7:1d:da:48:c4:98:
                    7f:fe:b2:0f:df:bd:56:66:fd:9a:71:16:90:d8:50:
                    da:99:ac:df:c3:13:6b:b5:fc:ce:33:13:34:4a:f9:
                    cb:13:79:1e:14:3c:3e:7a:d7:e8:33:4c:73:8c:00:
                    8e:86:cc:16:90:ff:ef:4a:c2:89:71:18:3d:51:d8:
                    19:3e:c6:a4:55:0c:59:31:e7:85:ae:44:2f:e5:99:
                    0f:23:81:f8:80:ce:33:4b:04:3b:97:83:77:5d:84:
                    76:46:2f:fe:d6:e8:a1:f7:5c:f3:40:dd:fd:bf:54:
                    05:46:e0:d9:b1:a3:cf:c3:33:d3:e8:6c:2a:14:f7:
                    d1:aa:5a:72:a9:58:a1:12:a9:09:2c:be:7b:47:9f:
                    ff:ef:bb:af:f1:0a:81:eb:75:a4:f5:a6:e8:1a:5f:
                    42:06:81:d7:f2:f4:9a:35:b4:e6:1c:5f:7b:87:c1:
                    a0:7a:7c:ea:d1:35:17:23:b4:16:ad:61:94:95:27:
                    94:a6:12:33:39:eb:e0:f7:eb:70:a8:f1:cf:c2:3f:
                    9f:ff:56:7f:ae:a1:62:56:c0:ce:7c:d1:72:6a:6c:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F2:EF:99:BA:8A:70:4A:2D:84:70:76:E5:4B:92:96:6B:A2:36:0E
            X509v3 Authority Key Identifier:
                keyid:BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/3230302e36312e33382e302f32342d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:75:ec:70:31:03:b9:60:4a:83:90:62:72:c0:47:e5:19:23:
         86:27:37:ee:d4:06:60:59:9d:7c:31:d9:ac:ee:c8:2e:79:12:
         cf:7f:9b:7e:97:90:eb:16:41:e7:bb:6d:27:b2:7a:67:5b:31:
         5f:83:1f:16:f7:ed:a3:2d:0f:d8:44:dd:87:2c:89:16:a8:62:
         c2:aa:3b:51:96:72:0a:6b:02:53:29:75:19:50:fe:2a:dc:33:
         6d:44:05:aa:7d:54:98:eb:94:0f:c3:7a:47:c7:4f:1b:86:4f:
         d9:2a:5c:13:f1:08:62:af:da:a3:ff:11:8d:70:66:e7:d3:1e:
         51:32:8f:a2:de:e8:b4:10:4e:12:da:a7:28:19:45:cb:03:be:
         f1:d7:0a:0e:4c:30:4b:bc:e3:fd:6c:c2:c2:dc:2e:0a:b4:bc:
         c5:83:ec:a6:f6:21:fb:d0:d1:03:c3:df:89:3f:c3:75:1b:4c:
         28:7f:48:f6:5e:58:d1:99:8d:5b:32:78:e2:cd:5f:44:b4:52:
         05:8e:1a:a8:f9:f8:d6:6d:63:59:f7:2c:28:1d:4c:8d:a2:1f:
         7c:74:0f:0b:a0:2a:e8:50:66:c0:ec:74:74:ac:81:f3:01:c9:
         6f:e3:86:27:1c:ea:c1:92:d4:f8:13:c5:78:09:53:40:98:d9:
         45:bb:30:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:23:53 2025 by rpki-client