Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3138382e302f32342d3234203d3e20323637373937.roa
File:                     3230302e392e3138382e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          DCY74RYaPNAfonAV8pIKY2nYjX5CxcA2iNx29MhOT1g=
Subject key identifier:   0B:21:CD:6E:A9:17:00:9C:E0:DA:B2:70:8B:3F:47:DB:C1:A0:45:5A
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       4A958CA5251947C594C4354C09D05C974165E81E
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3138382e302f32342d3234203d3e20323637373937.roa
Signing time:             Wed 24 Sep 2025 22:05:00 +0000
ROA not before:           Wed 24 Sep 2025 22:00:00 +0000
ROA not after:            Wed 23 Sep 2026 22:05:00 +0000
asID:                     267797
IP address blocks:        200.9.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:95:8c:a5:25:19:47:c5:94:c4:35:4c:09:d0:5c:97:41:65:e8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Sep 24 22:00:00 2025 GMT
            Not After : Sep 23 22:05:00 2026 GMT
        Subject: CN=0B21CD6EA917009CE0DAB2708B3F47DBC1A0455A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:2b:41:09:40:d3:22:c6:d1:a8:ab:61:22:
                    d8:da:69:50:6b:74:8c:6f:b3:73:82:df:10:74:ab:
                    7b:99:d1:1a:1b:86:1d:d2:32:85:4d:50:0c:ff:fb:
                    56:fe:76:48:c4:58:2c:05:de:2b:a3:a2:86:bc:74:
                    64:02:fd:ed:00:29:fe:b0:68:c4:ba:71:fa:10:ef:
                    06:da:e6:0b:fd:19:ff:32:28:78:10:13:97:38:ba:
                    4a:0c:8a:08:33:0a:27:66:53:53:da:65:1e:90:23:
                    56:b2:69:bd:bc:ba:63:4c:ea:39:6a:b7:71:cc:98:
                    a6:57:47:62:f1:16:f3:85:1a:f6:96:74:66:23:d8:
                    0c:db:17:25:e4:d1:c4:ba:27:c7:03:e1:d1:05:5a:
                    c0:b3:31:10:25:50:a2:40:ca:0f:2a:c4:9d:29:09:
                    d5:22:73:aa:d3:0b:15:d4:3f:36:c8:72:d0:db:5c:
                    7f:57:d7:6b:05:37:98:a4:ad:91:78:5d:0c:c4:aa:
                    2e:f8:68:8f:50:f0:15:92:2a:c1:d5:b1:e8:b5:d8:
                    c9:46:b7:04:c6:29:75:e3:d6:79:24:db:21:ec:9b:
                    85:83:71:fb:ac:89:a6:d3:a3:f7:15:3f:8a:d0:c3:
                    82:46:29:2a:6a:80:54:2e:12:79:39:65:b4:e5:11:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:21:CD:6E:A9:17:00:9C:E0:DA:B2:70:8B:3F:47:DB:C1:A0:45:5A
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3230302e392e3138382e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:3a:d2:bc:3f:92:50:e9:75:11:40:c7:0d:8a:c9:3e:9c:
         af:a3:51:2e:8f:4e:dd:4e:00:9a:3d:16:01:d4:48:e6:42:63:
         26:35:a8:42:47:98:69:8f:db:ea:6b:dc:8f:dd:75:30:f1:ef:
         d5:4d:78:e0:8a:22:79:c1:15:7a:10:63:af:b2:3b:a8:e0:b1:
         9d:d5:86:d9:02:e7:e6:a2:00:88:e8:82:57:76:fa:e1:12:82:
         3e:25:98:fb:33:7d:30:04:5b:7d:da:1e:9a:d0:77:a2:f1:b4:
         14:da:85:5c:c4:8f:61:d5:b7:6b:a6:eb:ca:80:53:a1:30:58:
         e6:e2:dd:a1:1a:95:df:92:05:8c:17:80:3f:e8:45:cd:68:bf:
         06:05:0d:bc:8e:ff:8c:5f:51:ee:24:41:2c:8b:7b:98:7b:46:
         5b:0f:4a:92:ef:c0:ed:6a:15:a9:47:2f:86:da:cd:91:6d:68:
         38:ba:13:1a:01:65:cf:ec:7e:f4:7d:e5:06:a3:76:52:36:21:
         6c:c5:4d:4d:58:16:d8:c7:4e:71:11:f9:ef:17:cf:c7:63:3b:
         9e:a1:a9:ff:87:03:4a:5c:23:a1:e2:08:cb:68:32:5c:07:38:
         4b:28:9f:de:22:53:64:1a:7e:17:a6:f0:fb:e0:46:9d:f3:a3:
         fa:91:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:37:51 2025 by rpki-client