Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3230302e3131302e3137362e302f32312d3234203d3e203237383831.roa
File:                     3230302e3131302e3137362e302f32312d3234203d3e203237383831.roa (raw, json)
Hash identifier:          c1MXdJf6Z7ygP+RN8WtiipiX46h5ieBLcXx2hl0Rldw=
Subject key identifier:   B2:4F:57:D0:FB:15:C3:85:F1:60:AA:B7:57:E7:F1:7E:A7:02:FA:F0
Certificate issuer:       /CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
Certificate serial:       422E0CAE8BB7D70452236D8E09BF54E016365B0C
Authority key identifier: DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3230302e3131302e3137362e302f32312d3234203d3e203237383831.roa
Signing time:             Mon 06 Oct 2025 20:49:42 +0000
ROA not before:           Mon 06 Oct 2025 20:44:42 +0000
ROA not after:            Mon 05 Oct 2026 20:49:42 +0000
asID:                     27881
IP address blocks:        200.110.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2e:0c:ae:8b:b7:d7:04:52:23:6d:8e:09:bf:54:e0:16:36:5b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DECCD2773167F746E0E146E321731A3F7D19EEEC
        Validity
            Not Before: Oct  6 20:44:42 2025 GMT
            Not After : Oct  5 20:49:42 2026 GMT
        Subject: CN=B24F57D0FB15C385F160AAB757E7F17EA702FAF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:45:e4:75:16:b9:47:9d:71:60:10:7f:94:
                    6c:3b:0d:e2:ea:7c:5a:97:e0:65:cc:a9:01:fc:fb:
                    c5:7a:7c:c8:68:67:cc:b0:9a:08:8d:cc:98:7d:e8:
                    bb:0f:30:f7:e0:41:06:bf:9f:7f:36:65:ce:82:6c:
                    9a:86:f7:12:b4:3f:24:1f:86:51:58:e9:aa:a6:bc:
                    8a:50:19:75:bd:f2:e8:28:3e:9e:27:aa:62:d7:f1:
                    e7:97:be:64:a2:ae:87:21:3d:7f:24:86:74:c0:46:
                    0c:57:b9:3e:73:5b:b1:bb:78:2a:21:dd:9b:a2:e7:
                    65:19:f1:73:9d:fc:3e:87:5b:21:ae:3a:42:03:94:
                    9d:23:63:1a:11:26:27:06:cd:ba:2e:1f:42:cf:50:
                    ed:62:49:17:62:92:67:78:29:04:b7:3d:e5:92:db:
                    13:c8:33:1e:07:6b:a1:c7:c1:26:49:45:2c:96:59:
                    67:19:61:7a:37:e8:42:bd:75:d3:54:50:56:18:32:
                    ad:2c:e1:fa:21:88:02:99:6b:a4:85:c1:9a:ac:df:
                    62:26:31:eb:c7:91:cd:a3:20:f9:7c:cd:9d:9b:28:
                    ca:4b:c1:44:ff:b0:ee:68:96:9f:17:1b:7c:7f:f9:
                    25:bd:d9:c0:7b:69:e6:f1:5e:89:46:88:56:e4:90:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4F:57:D0:FB:15:C3:85:F1:60:AA:B7:57:E7:F1:7E:A7:02:FA:F0
            X509v3 Authority Key Identifier:
                keyid:DE:CC:D2:77:31:67:F7:46:E0:E1:46:E3:21:73:1A:3F:7D:19:EE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DECCD2773167F746E0E146E321731A3F7D19EEEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B242FAF8BF750D082D9833088BE87F76601AEEB568E18399C1CEECCC2EDFC7E/0/3230302e3131302e3137362e302f32312d3234203d3e203237383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:73:ef:1d:54:32:0c:a9:4a:c2:c8:c6:af:98:e3:6b:67:1d:
         4f:49:59:b3:1c:8e:d7:03:20:0e:cb:ec:d3:9d:27:27:eb:3e:
         8e:9b:73:50:01:f4:9f:c5:ae:c0:cc:01:67:60:e9:57:5a:50:
         d2:ae:8d:25:31:97:74:05:85:20:48:fa:d6:9d:81:2f:52:61:
         91:df:62:bc:8f:38:f4:57:d6:ac:e7:b1:2f:98:c3:e4:d6:54:
         cb:b3:0a:cd:24:93:41:2c:01:2f:03:07:16:c5:37:20:6f:90:
         14:6f:61:3b:cc:dd:0c:8d:f7:58:a0:0e:7b:20:ab:3e:b7:5e:
         a8:a9:6c:f0:79:cf:50:6b:51:6a:2c:14:7a:83:3e:41:b7:06:
         51:c1:01:a8:eb:41:b3:22:b5:91:53:53:bf:a4:71:66:4d:2d:
         04:3e:dc:e6:c9:c8:2f:71:16:c5:eb:61:0c:e4:b3:1b:e8:ef:
         59:a7:ab:7f:99:e4:e3:61:9b:17:80:26:c1:71:a9:6f:32:fd:
         61:88:72:bf:fc:e6:c6:0c:82:a1:62:b2:84:46:dc:a1:1f:b7:
         0e:30:87:42:2c:9f:ce:a1:cf:5d:52:0c:42:39:d3:1c:37:89:
         e0:71:7d:1a:08:61:77:1e:a0:c0:27:98:1c:5a:22:b7:59:bd:
         b1:f2:d5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:55:30 2025 by rpki-client