Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3234203d3e20323732303037.roa
File:                     3230302e332e3134382e302f32322d3234203d3e20323732303037.roa (raw, json)
Hash identifier:          ryP7ln0ZzaFG+zOjCMqfPRNPBqMBhjtGr5xwxNCuYpo=
Subject key identifier:   F7:7F:CB:99:CF:63:C7:40:12:EE:1A:50:D6:83:FD:98:B6:6F:A1:52
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       2878B079D5836493EC36677EE97A1317B2EE09F0
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3234203d3e20323732303037.roa
Signing time:             Mon 29 Sep 2025 16:20:00 +0000
ROA not before:           Mon 29 Sep 2025 16:15:00 +0000
ROA not after:            Mon 28 Sep 2026 16:20:00 +0000
asID:                     272007
IP address blocks:        200.3.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:78:b0:79:d5:83:64:93:ec:36:67:7e:e9:7a:13:17:b2:ee:09:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Sep 29 16:15:00 2025 GMT
            Not After : Sep 28 16:20:00 2026 GMT
        Subject: CN=F77FCB99CF63C74012EE1A50D683FD98B66FA152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:0c:f5:11:c7:4c:7e:50:27:5d:ac:6d:23:
                    fa:9f:f1:5c:08:da:84:c8:81:7b:22:73:a4:d3:e9:
                    60:17:38:47:fb:f7:4e:cd:a1:41:b4:74:7b:78:1d:
                    4f:56:b3:b1:e2:0a:a0:16:b3:54:fe:21:27:76:d2:
                    bc:e6:68:9c:4c:e1:11:8a:fc:96:dc:fb:58:de:f4:
                    d8:65:4b:9c:d7:b9:b9:b7:72:46:65:36:66:8f:ba:
                    47:ad:6b:c9:04:2b:76:ab:9a:0b:ce:30:ca:a6:e3:
                    d0:71:27:89:8b:5e:28:54:09:6a:ab:88:cf:1b:ee:
                    8d:eb:a5:c3:c7:2e:25:f2:2b:d3:74:c6:ea:11:e0:
                    b2:83:34:e5:41:a6:17:fd:09:1f:66:27:b7:ce:b2:
                    89:8a:c8:cb:6a:2a:e7:fe:06:ad:38:14:3f:bc:c0:
                    d3:e5:50:fd:67:a1:c3:1c:f4:5e:4f:72:34:71:88:
                    ec:cb:b5:ad:7a:e1:08:2d:cc:82:57:cb:d8:ee:eb:
                    2c:52:c6:3a:5a:83:0b:9d:00:9a:ab:97:d9:5c:11:
                    23:90:43:4a:f3:bb:ca:94:84:fa:41:c6:95:7b:59:
                    f9:2a:21:f2:31:6e:f6:32:c5:43:0c:0a:25:8c:7c:
                    5e:a0:19:4a:7e:8b:05:ca:db:90:8a:2c:54:ed:cb:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7F:CB:99:CF:63:C7:40:12:EE:1A:50:D6:83:FD:98:B6:6F:A1:52
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3230302e332e3134382e302f32322d3234203d3e20323732303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:03:b1:20:0f:2c:0f:2e:7c:c2:51:28:b1:8f:e6:b6:9e:02:
         44:de:2e:f9:8d:7c:4a:5c:fa:b7:26:54:6c:be:0d:fc:0d:3c:
         62:16:2b:d9:f8:17:a8:35:38:f9:6a:da:e5:aa:48:e9:3f:bb:
         78:ee:d9:74:b1:ae:a9:49:4c:64:53:22:f2:8d:e5:3f:08:6b:
         2d:e4:d3:ed:11:bf:6a:0c:79:06:74:6a:73:27:97:88:dc:a5:
         3c:a5:f5:2a:6e:79:91:eb:2f:fb:c5:df:d9:19:76:35:f0:e4:
         5f:a6:bf:27:3e:44:73:e6:80:af:84:2c:56:41:17:43:5e:62:
         38:7a:c6:7d:87:5c:a7:f3:a9:65:2b:47:ba:3d:d9:c9:51:98:
         fe:a4:37:96:b6:5d:9c:5a:65:bf:27:f5:82:c9:d6:25:4b:85:
         5e:9b:7a:1d:ff:be:cd:5d:64:ca:49:f0:09:59:0d:7d:0f:8a:
         7d:8c:b5:fb:7b:f4:e1:d4:7d:a2:1c:1b:fb:5a:9e:e0:4a:7b:
         51:99:3f:a3:9b:6b:04:2b:32:05:f1:23:1c:6c:4c:aa:9c:fb:
         d7:87:8b:32:7d:9b:ee:77:83:c0:8b:d1:72:ac:d8:ef:b7:5e:
         6a:ce:de:43:e0:29:74:a9:fe:36:e7:d1:30:f6:8e:78:60:3e:
         d2:69:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:29:39 2025 by rpki-client