Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132332e302f32342d3234203d3e20323730323230.roa
File:                     3230302e37362e3132332e302f32342d3234203d3e20323730323230.roa (raw, json)
Hash identifier:          ZlglHRhvVxWL5WpY+6onHtfBmA/fX/Ig5jRp2L2V32E=
Subject key identifier:   F2:22:5D:72:4B:F1:C5:1D:78:24:8D:69:A6:82:52:01:C5:10:8B:43
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       3773150EB3A19C637B31C64CD5D4F4C0034BACCC
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132332e302f32342d3234203d3e20323730323230.roa
Signing time:             Tue 23 Sep 2025 18:00:00 +0000
ROA not before:           Tue 23 Sep 2025 17:55:00 +0000
ROA not after:            Tue 22 Sep 2026 18:00:00 +0000
asID:                     270220
IP address blocks:        200.76.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:73:15:0e:b3:a1:9c:63:7b:31:c6:4c:d5:d4:f4:c0:03:4b:ac:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Sep 23 17:55:00 2025 GMT
            Not After : Sep 22 18:00:00 2026 GMT
        Subject: CN=F2225D724BF1C51D78248D69A6825201C5108B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:ce:69:1c:e3:93:1e:ce:21:9d:19:da:84:
                    d1:f2:b2:9b:f5:75:f9:54:0b:fc:e5:b5:8d:ce:90:
                    70:35:99:c3:bf:68:88:30:48:08:ee:24:cf:15:50:
                    83:9a:2f:a6:56:51:1c:50:ea:5b:6b:14:9f:4e:78:
                    7c:b4:05:11:36:bf:f0:7f:1e:44:24:c3:6f:c3:fc:
                    eb:fb:fc:a9:27:11:5a:34:bf:0c:7c:48:f0:7c:77:
                    3c:21:9f:d6:52:d9:4b:e3:bd:de:72:ef:8a:89:50:
                    8a:ab:45:ac:1e:c6:43:37:a7:2a:61:9d:cc:19:c0:
                    c9:4e:5b:4c:4a:a3:2f:c2:52:e5:bf:a6:02:52:b5:
                    10:51:db:70:8e:2a:08:76:c7:e4:5a:9c:81:d4:7a:
                    85:c0:6c:ed:4c:15:fd:89:34:88:1f:11:84:27:d4:
                    4e:59:fa:97:f1:b8:7d:4f:9a:4d:69:80:5c:f0:41:
                    6c:58:83:ce:28:08:db:c9:0c:2f:14:f3:b1:d9:46:
                    2f:1e:a2:fa:1b:b1:08:3f:4d:0e:b9:49:29:88:8c:
                    36:d0:50:cc:b6:98:b8:27:ea:60:5c:15:e4:c5:5c:
                    7b:a3:1f:fe:82:7e:46:01:f9:43:68:37:f2:27:59:
                    72:cb:cd:15:c3:0a:7b:63:ba:7c:af:44:df:41:c8:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:22:5D:72:4B:F1:C5:1D:78:24:8D:69:A6:82:52:01:C5:10:8B:43
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3230302e37362e3132332e302f32342d3234203d3e20323730323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d7:0d:c2:a9:f0:55:16:63:df:06:ea:7e:4a:14:7d:a8:7c:
         a8:0a:22:1d:f5:2a:0c:2f:d1:f2:46:97:ce:fa:a9:5e:db:d2:
         71:90:f1:db:5c:f3:b1:ff:f9:54:83:9c:6d:2a:50:87:b5:1c:
         de:1f:f0:b1:19:3c:26:38:9d:da:a0:6a:f3:54:2e:18:e8:0c:
         ad:44:6e:77:f3:d2:09:15:99:ee:84:93:94:15:f3:66:2e:d2:
         a1:57:e3:4e:dc:9b:ef:33:f6:df:12:18:1f:40:45:0b:ad:14:
         4b:9a:78:a4:b0:63:ed:eb:76:1f:42:af:25:3e:3a:0e:39:ff:
         bc:cf:77:7d:e1:a9:01:94:91:ff:73:4b:c5:ab:78:bf:06:4b:
         d2:9c:07:fd:84:c2:08:8c:7d:ce:b6:06:7e:a3:d1:c5:7a:5f:
         fe:b1:9c:4a:22:c8:5b:2c:53:fd:9f:9b:90:f6:0f:9d:21:a8:
         08:ce:68:56:09:b4:bc:c0:6a:b8:85:66:b6:92:05:b3:9b:f7:
         42:fc:3c:27:c0:3f:5c:bf:45:5c:a3:d8:67:a2:8a:82:7c:a6:
         ba:97:9d:ee:57:7c:0c:3d:19:4f:c7:e8:92:c0:ac:0b:75:14:
         ab:20:02:fa:c7:62:70:3f:e9:5d:80:54:7b:09:13:fb:df:01:
         4a:50:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:19:49 2025 by rpki-client