Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3233203d3e203130373533.roa
File:                     3230302e332e3134382e302f32322d3233203d3e203130373533.roa (raw, json)
Hash identifier:          Kxa2mg0uDbJ0q76S3ru9CQkU3FyXBMqXiNss8puXp5I=
Subject key identifier:   E8:E1:E2:98:0A:65:11:F1:9D:4F:F9:17:3B:0D:3B:18:2F:37:77:52
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       5123FFF1E268DD1FB58F741DE38643C0F81CC17C
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3233203d3e203130373533.roa
Signing time:             Fri 26 Sep 2025 15:15:00 +0000
ROA not before:           Fri 26 Sep 2025 15:10:00 +0000
ROA not after:            Fri 25 Sep 2026 15:15:00 +0000
asID:                     10753
IP address blocks:        200.3.148.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:23:ff:f1:e2:68:dd:1f:b5:8f:74:1d:e3:86:43:c0:f8:1c:c1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Sep 26 15:10:00 2025 GMT
            Not After : Sep 25 15:15:00 2026 GMT
        Subject: CN=E8E1E2980A6511F19D4FF9173B0D3B182F377752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:ec:3a:0c:41:79:55:26:79:ce:16:8c:5f:
                    eb:2c:0b:27:07:1a:e0:6d:c7:f0:42:02:95:29:3e:
                    07:48:76:f5:ff:ac:89:83:89:4c:4a:ef:fb:b5:06:
                    c1:ca:b5:3e:72:b9:37:db:74:5f:bb:b1:d6:eb:74:
                    ba:c6:fd:45:58:d9:bc:6b:61:12:4c:93:c7:26:5b:
                    53:25:cd:d5:cf:52:e3:42:84:f1:46:af:84:35:16:
                    b7:ac:16:a3:04:b0:44:40:26:70:9f:75:7c:e5:0a:
                    b3:ac:a2:76:93:d2:4d:af:68:cc:57:c2:62:bd:3e:
                    9b:b7:77:db:b7:3c:13:f9:b3:37:8b:89:fa:c7:52:
                    22:f6:d2:df:3d:25:8f:bd:9f:45:f7:e0:64:29:eb:
                    a2:dc:45:d6:16:16:b6:24:71:7a:11:d2:1c:56:fb:
                    a5:3d:fc:1e:bb:b1:8e:2a:62:58:90:80:5e:ca:85:
                    bc:6a:02:f3:a5:70:75:f6:0d:d9:c8:01:4e:1d:b4:
                    b4:2f:7b:65:4e:e7:11:3e:a8:31:9b:e9:0e:40:fb:
                    9e:82:7e:7f:f8:44:05:96:68:bc:fa:98:66:6c:39:
                    2f:78:a2:67:c4:45:55:da:30:3e:f9:40:0d:a5:d6:
                    da:d5:0d:dd:e1:79:da:d8:55:60:5a:0b:97:10:0d:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E1:E2:98:0A:65:11:F1:9D:4F:F9:17:3B:0D:3B:18:2F:37:77:52
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3233203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:9b:ba:5a:df:25:47:67:4f:73:8e:69:e3:57:a8:b6:f3:e7:
         8c:05:2c:a1:48:e3:96:e2:d3:4f:9f:57:85:6e:9e:d4:c2:ae:
         f1:39:d3:6a:34:8a:d6:32:c6:f0:4d:82:cb:b3:7a:99:c2:20:
         de:59:dd:2d:e1:af:94:b7:ce:44:08:9e:65:1a:ed:55:8f:d5:
         27:b3:ca:a4:17:f7:21:6c:b2:7e:00:0f:1a:af:0b:21:67:2c:
         29:69:8f:cb:58:ea:23:53:3f:16:40:f1:38:56:37:64:8d:c9:
         96:b7:fb:a4:78:5f:fe:9b:2b:61:0d:50:9f:69:40:4c:c0:b8:
         e6:4a:5f:b9:7d:94:b9:c0:56:45:9a:71:00:2e:df:dc:e0:c5:
         80:21:32:a3:50:67:0f:f7:34:56:f5:24:36:b3:31:d4:d7:4a:
         a6:1e:be:58:ab:cc:27:dd:f1:ba:76:94:32:a8:be:1d:73:61:
         8c:a6:e9:dc:1e:cc:6c:af:e6:8b:b5:37:31:c6:a0:0f:2b:11:
         2a:2d:c4:65:f6:1d:63:af:af:02:35:22:49:45:37:f5:b1:25:
         8a:0d:5f:33:b2:59:89:a6:91:60:e0:fb:6d:89:ee:29:e6:45:
         34:fd:57:43:17:8e:c0:06:6a:6f:0c:a9:e3:17:5e:c1:a6:1d:
         a7:58:10:48
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUSP/8eJo3R+1j3Qd44ZDwPgcwXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ2MDkwM0I4Mzc1RkM1QzJDQjg5MTYzNUUwRUE4N0I1
MERBMzU5NTAeFw0yNTA5MjYxNTEwMDBaFw0yNjA5MjUxNTE1MDBaMDMxMTAvBgNV
BAMTKEU4RTFFMjk4MEE2NTExRjE5RDRGRjkxNzNCMEQzQjE4MkYzNzc3NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVxew6DEF5VSZ5zhaMX+ssCycH
GuBtx/BCApUpPgdIdvX/rImDiUxK7/u1BsHKtT5yuTfbdF+7sdbrdLrG/UVY2bxr
YRJMk8cmW1MlzdXPUuNChPFGr4Q1FresFqMEsERAJnCfdXzlCrOsonaT0k2vaMxX
wmK9Ppu3d9u3PBP5szeLifrHUiL20t89JY+9n0X34GQp66LcRdYWFrYkcXoR0hxW
+6U9/B67sY4qYliQgF7KhbxqAvOlcHX2DdnIAU4dtLQve2VO5xE+qDGb6Q5A+56C
fn/4RAWWaLz6mGZsOS94omfERVXaMD75QA2l1trVDd3hedrYVWBaC5cQDSgXAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU6OHimAplEfGdT/kXOw07GC83d1IwHwYDVR0j
BBgwFoAUDWCQO4N1/FwsuJFjXg6oe1DaNZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Q0U1Q0Q5RTQyRjk4QUM3OTdENjVFOTZBOUQwOUUzMUY1
RkJDNTg4NEQxRjgwMkZBRTgwQ0Y4RkQ1MEZERjlELzAvMEQ2MDkwM0I4Mzc1RkM1
QzJDQjg5MTYzNUUwRUE4N0I1MERBMzU5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDYwOTAzQjgzNzVGQzVDMkNC
ODkxNjM1RTBFQTg3QjUwREEzNTk1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUNFNUNEOUU0MkY5OEFDNzk3RDY1RTk2QTlEMDlFMzFGNUZCQzU4ODRE
MUY4MDJGQUU4MENGOEZENTBGREY5RC8wLzMyMzAzMDJlMzMyZTMxMzQzODJlMzAy
ZjMyMzIyZDMyMzMyMDNkM2UyMDMxMzAzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIA5QwDQYJ
KoZIhvcNAQELBQADggEBAJmbulrfJUdnT3OOaeNXqLbz54wFLKFI45bi00+fV4Vu
ntTCrvE502o0itYyxvBNgsuzepnCIN5Z3S3hr5S3zkQInmUa7VWP1SezyqQX9yFs
sn4ADxqvCyFnLClpj8tY6iNTPxZA8ThWN2SNyZa3+6R4X/6bK2ENUJ9pQEzAuOZK
X7l9lLnAVkWacQAu39zgxYAhMqNQZw/3NFb1JDazMdTXSqYevlirzCfd8bp2lDKo
vh1zYYym6dwezGyv5ou1NzHGoA8rESotxGX2HWOvrwI1IklFN/WxJYoNXzOyWYmm
kWDg+22J7inmRTT9V0MXjsAGam8MqeMXXsGmHadYEEg=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:19:28 2025 by rpki-client