Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3232342e302f31392d3234203d3e203237373633.roa
File:                     3230302e32352e3232342e302f31392d3234203d3e203237373633.roa (raw, json)
Hash identifier:          pmdx7H2dfnc2k1td4kSepgkRN7iOuH9X30Ogtc/eiiE=
Subject key identifier:   9B:43:D2:32:E8:22:30:5C:DD:2D:56:0C:60:F7:E3:B0:4A:83:28:B3
Certificate issuer:       /CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
Certificate serial:       36F6D74AEA5C456DCFF1F535810582CD3FE00E5B
Authority key identifier: 68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3232342e302f31392d3234203d3e203237373633.roa
Signing time:             Wed 07 Oct 2026 21:39:08 +0000
ROA not before:           Wed 07 Oct 2026 21:34:08 +0000
ROA not after:            Wed 06 Oct 2027 21:39:08 +0000
asID:                     27763
IP address blocks:        200.25.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f6:d7:4a:ea:5c:45:6d:cf:f1:f5:35:81:05:82:cd:3f:e0:0e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937
        Validity
            Not Before: Oct  7 21:34:08 2026 GMT
            Not After : Oct  6 21:39:08 2027 GMT
        Subject: CN=9B43D232E822305CDD2D560C60F7E3B04A8328B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:97:9d:dc:5e:d3:7a:36:c7:40:df:1c:c6:
                    f9:bd:e5:45:14:06:f1:0b:55:b1:3d:33:08:b9:16:
                    9e:07:c8:fd:97:6d:e1:79:f7:d6:82:c1:f1:e6:ea:
                    cb:0c:2e:5a:e1:97:b7:c9:95:d6:65:a5:3f:c5:55:
                    e2:1d:87:51:f7:9e:06:b2:e4:71:74:29:cb:24:ab:
                    cc:23:24:f1:d8:40:9c:be:b0:b2:23:0c:af:50:e7:
                    9c:44:3a:75:78:b8:9a:a4:1b:fc:c2:15:79:f4:b8:
                    f2:43:af:cd:98:cc:ff:bf:98:76:c6:d5:f1:13:07:
                    0d:d6:e4:b7:1f:70:11:6f:2b:fc:2e:65:ff:79:46:
                    ee:0f:e3:1c:f8:83:30:f2:da:a1:0b:27:ee:45:d9:
                    77:eb:f0:b4:f4:89:e1:8a:45:2e:79:10:fa:cf:ee:
                    68:fa:f8:33:09:bf:07:e2:c3:42:87:d5:fd:94:ef:
                    fb:9d:83:99:20:b9:b7:f3:db:c7:f7:bf:0b:5e:85:
                    68:51:f1:43:d2:61:cc:2d:81:d5:cc:d2:df:cd:99:
                    de:ef:10:b9:9b:13:77:7e:d2:cb:ef:88:6e:c3:f2:
                    49:71:df:b2:89:44:19:be:6d:ba:e2:9d:2f:8b:04:
                    43:8e:e3:9a:da:62:59:78:c1:98:df:c7:af:08:a2:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:D2:32:E8:22:30:5C:DD:2D:56:0C:60:F7:E3:B0:4A:83:28:B3
            X509v3 Authority Key Identifier:
                keyid:68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/3230302e32352e3232342e302f31392d3234203d3e203237373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:90:08:63:b5:dc:c4:f5:ae:93:9b:11:48:7c:fb:c9:b8:d4:
         3f:fb:87:b5:14:39:e8:71:64:e1:21:55:94:b3:ab:1f:f1:63:
         5e:59:e7:21:4f:e2:85:e4:a7:c5:a5:c3:10:86:ca:db:95:04:
         82:b8:eb:22:3d:88:05:4e:77:f2:c7:93:c5:61:dd:a5:d2:c1:
         b4:f8:52:b1:d8:e5:8e:4f:c9:9d:68:a4:62:7e:e6:df:2d:b9:
         98:31:12:58:a3:a8:cc:a3:ef:a0:59:67:1d:d8:80:bc:04:63:
         a9:ed:ff:8c:0b:9d:83:06:1f:90:b1:fc:2d:19:03:2f:e1:70:
         87:da:62:a1:d0:4d:7d:3e:eb:47:9e:d0:6e:72:44:72:ab:76:
         eb:8f:32:0b:d7:cd:3d:df:36:62:d2:46:86:c9:89:f6:ca:f6:
         29:04:8a:0c:25:af:ef:56:60:b3:3a:99:81:3f:ff:83:85:8a:
         12:a0:b1:6c:1a:c7:15:b2:26:0b:1b:1d:3a:f6:54:5e:b7:87:
         13:36:82:50:8b:76:01:fa:d2:5c:55:e8:15:0e:47:16:65:f8:
         99:ee:dc:1b:25:55:3f:b9:1b:39:9e:8c:db:d0:4a:36:3c:d2:
         d5:fc:ef:8e:c4:18:c0:ef:2d:4a:93:7f:d8:6e:70:a0:0b:17:
         08:78:c1:ef
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNvbXSupcRW3P8fU1gQWCzT/gDlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFQTUzQ0M2QTQyRDlEM0ZCM0QxREYyNjE4NDY5QzFG
MzJENjkzNzAeFw0yNjEwMDcyMTM0MDhaFw0yNzEwMDYyMTM5MDhaMDMxMTAvBgNV
BAMTKDlCNDNEMjMyRTgyMjMwNUNERDJENTYwQzYwRjdFM0IwNEE4MzI4QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03ped3F7TejbHQN8cxvm95UUU
BvELVbE9Mwi5Fp4HyP2XbeF599aCwfHm6ssMLlrhl7fJldZlpT/FVeIdh1H3ngay
5HF0Kcskq8wjJPHYQJy+sLIjDK9Q55xEOnV4uJqkG/zCFXn0uPJDr82YzP+/mHbG
1fETBw3W5LcfcBFvK/wuZf95Ru4P4xz4gzDy2qELJ+5F2Xfr8LT0ieGKRS55EPrP
7mj6+DMJvwfiw0KH1f2U7/udg5kgubfz28f3vwtehWhR8UPSYcwtgdXM0t/Nmd7v
ELmbE3d+0svviG7D8klx37KJRBm+bbrinS+LBEOO45raYll4wZjfx68IoqZRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUm0PSMugiMFzdLVYMYPfjsEqDKLMwHwYDVR0j
BBgwFoAUaOpTzGpC2dP7PR3yYYRpwfMtaTcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82N0QwNTdGQjExRDNDRDk4MzQzQkYzMEZGNTA1QkU4MEVD
QUUzRjBGRDUwODI2ODUzOTU3QkI0RDRBODJGOURBLzAvNjhFQTUzQ0M2QTQyRDlE
M0ZCM0QxREYyNjE4NDY5QzFGMzJENjkzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OEVBNTNDQzZBNDJEOUQzRkIz
RDFERjI2MTg0NjlDMUYzMkQ2OTM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjdEMDU3RkIxMUQzQ0Q5ODM0M0JGMzBGRjUwNUJFODBFQ0FFM0YwRkQ1
MDgyNjg1Mzk1N0JCNEQ0QTgyRjlEQS8wLzMyMzAzMDJlMzIzNTJlMzIzMjM0MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzNzM3MzYzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcgZ4DAN
BgkqhkiG9w0BAQsFAAOCAQEAIpAIY7XcxPWuk5sRSHz7ybjUP/uHtRQ56HFk4SFV
lLOrH/FjXlnnIU/iheSnxaXDEIbK25UEgrjrIj2IBU538seTxWHdpdLBtPhSsdjl
jk/JnWikYn7m3y25mDESWKOozKPvoFlnHdiAvARjqe3/jAudgwYfkLH8LRkDL+Fw
h9piodBNfT7rR57QbnJEcqt2648yC9fNPd82YtJGhsmJ9sr2KQSKDCWv71ZgszqZ
gT//g4WKEqCxbBrHFbImCxsdOvZUXreHEzaCUIt2AfrSXFXoFQ5HFmX4me7cGyVV
P7kbOZ6M29BKNjzS1fzvjsQYwO8tSpN/2G5woAsXCHjB7w==
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:13:25 2026 by rpki-client