Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230302e3132332e33372e302f32342d3234203d3e203238313033.roa
File:                     3230302e3132332e33372e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          sD4qpD34yeATI4VYXvC6xHTzhgiT0qk02iPgkmuPhn0=
Subject key identifier:   A8:7D:DC:53:79:7C:F5:3D:03:E5:E2:BC:71:8E:3B:C9:40:6E:82:D1
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       63A4F5ADB8856EBE4E90A7C974AB11696D9F36D8
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230302e3132332e33372e302f32342d3234203d3e203238313033.roa
Signing time:             Tue 07 Oct 2025 22:20:00 +0000
ROA not before:           Tue 07 Oct 2025 22:15:00 +0000
ROA not after:            Tue 06 Oct 2026 22:20:00 +0000
asID:                     28103
IP address blocks:        200.123.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 22:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a4:f5:ad:b8:85:6e:be:4e:90:a7:c9:74:ab:11:69:6d:9f:36:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Oct  7 22:15:00 2025 GMT
            Not After : Oct  6 22:20:00 2026 GMT
        Subject: CN=A87DDC53797CF53D03E5E2BC718E3BC9406E82D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:b5:06:86:7f:6f:25:f4:0d:4d:e7:ed:c7:
                    8f:08:27:99:b5:c0:c4:bb:91:4c:66:99:49:c9:f1:
                    0b:e5:2d:05:82:33:c7:77:0b:41:7e:02:a1:39:e7:
                    eb:26:73:ce:e2:a0:16:e9:97:6c:42:cf:04:2e:f7:
                    7c:9e:bc:45:7a:35:41:af:47:d5:b3:73:2f:1d:29:
                    6a:9b:09:bb:d1:94:ba:2f:f3:bd:87:78:9c:c6:ea:
                    5c:3c:ad:b5:5b:31:39:98:03:aa:6e:b0:47:e2:5f:
                    a2:41:7f:c2:db:b1:d7:8a:b1:25:ee:3d:a3:03:6c:
                    59:dd:13:f9:ec:b8:e0:cc:68:0e:f2:b6:84:22:9d:
                    37:c9:bd:a2:10:c9:82:fe:26:19:8a:77:77:a7:81:
                    62:8a:31:39:a2:aa:31:05:8f:b1:ff:89:2b:e2:f6:
                    d2:98:03:15:d7:c1:e2:74:07:fa:9e:1b:28:ad:6d:
                    f3:f2:e9:28:2e:68:c6:29:0a:4f:28:32:ee:f4:6c:
                    34:d2:9e:44:b9:f2:dc:e6:43:11:a9:b8:c6:c9:f4:
                    6f:73:03:38:f0:bb:12:ce:de:2f:86:49:3e:8e:91:
                    8f:be:f0:9d:95:9a:3d:a5:30:53:dd:80:0c:c6:66:
                    d6:dc:c6:33:da:e6:aa:44:22:cb:2a:b6:47:fa:a1:
                    44:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7D:DC:53:79:7C:F5:3D:03:E5:E2:BC:71:8E:3B:C9:40:6E:82:D1
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3230302e3132332e33372e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:58:94:71:83:7c:a7:39:11:4d:64:ea:9f:77:27:91:54:59:
         ed:c6:0d:23:dc:94:22:74:1f:ef:a6:47:4d:94:7c:88:c7:6d:
         e4:07:76:bb:3c:c8:f4:43:fa:b1:77:2d:c9:11:62:13:58:ba:
         94:5d:61:7a:17:ff:1b:3e:56:37:53:52:a1:bb:32:5d:95:a2:
         42:21:38:68:55:7b:e2:74:3c:09:72:b8:0a:42:59:80:80:9b:
         39:c5:fb:be:06:00:c6:bb:ab:b0:2b:23:84:33:c9:58:5c:db:
         e9:2c:50:81:b9:d1:f4:64:38:de:77:12:10:3f:3c:f4:a0:72:
         92:56:78:49:b6:95:e7:e2:3b:ef:af:bd:e7:0d:d4:e0:4f:7f:
         cc:cc:68:e0:ee:e9:98:d4:15:f3:8f:5b:99:4c:ed:5c:7d:ce:
         2b:6b:7e:9b:58:22:be:ac:6d:c4:62:09:cc:9f:c9:b4:e8:76:
         37:9c:0b:53:2a:78:cd:90:6c:9b:c8:d1:8f:74:ff:67:c1:f1:
         3c:20:04:83:41:e0:5d:b9:d5:fc:3a:43:44:11:07:4a:da:ad:
         53:51:17:fb:3f:18:b5:c2:8f:c0:f3:f9:4c:0e:69:8a:c9:8b:
         20:03:6e:2c:58:67:e7:bd:2c:57:09:7a:63:8b:69:d0:d3:79:
         9e:a0:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:24:13 2025 by rpki-client