Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e20323039323432.roa
File:                     3230302e37332e36372e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier:          otPDtzU651WEj4wVLitRcaoGEa49E2ALZkpOaCCqWUk=
Subject key identifier:   CF:81:38:21:5B:F5:D8:8B:C8:AC:0F:F7:92:6A:D5:DE:DA:5C:C7:97
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       22C34621AB10B2B0A9FAA65245B34A9F23BF9450
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e20323039323432.roa
Signing time:             Wed 24 Sep 2025 19:48:28 +0000
ROA not before:           Wed 24 Sep 2025 19:43:28 +0000
ROA not after:            Wed 23 Sep 2026 19:48:28 +0000
asID:                     209242
IP address blocks:        200.73.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c3:46:21:ab:10:b2:b0:a9:fa:a6:52:45:b3:4a:9f:23:bf:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Sep 24 19:43:28 2025 GMT
            Not After : Sep 23 19:48:28 2026 GMT
        Subject: CN=CF8138215BF5D88BC8AC0FF7926AD5DEDA5CC797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:95:79:57:93:dd:20:4c:93:2e:ac:b4:1e:
                    c9:c1:ad:55:cf:76:3c:6e:09:b5:27:b2:ae:a4:8f:
                    1e:c3:b7:b4:80:67:66:b8:93:09:c5:75:0a:81:5e:
                    30:fa:33:b1:89:03:83:1c:b5:8c:a1:de:b2:5f:7a:
                    ad:1d:85:ef:22:c2:34:d3:1b:6e:ae:91:7e:5c:5b:
                    5d:23:13:d7:03:25:84:14:ce:74:d3:ff:8e:01:40:
                    ec:74:40:40:06:35:fa:e5:21:07:8a:f1:bb:9e:6c:
                    10:84:fe:e7:cc:26:22:f2:2c:2a:4d:7b:b9:b4:69:
                    a8:07:0a:a6:ff:43:a2:40:51:e1:ce:20:9c:92:6e:
                    bf:2f:82:4e:c6:76:9a:b0:c0:ce:84:a2:fc:c5:21:
                    b2:e0:2e:19:29:30:42:20:ff:ee:95:17:c5:eb:3e:
                    07:21:eb:d9:fd:bd:b2:25:48:0d:6d:e3:8f:c9:59:
                    7c:4c:08:7a:72:c7:81:25:51:30:71:8e:17:92:9b:
                    be:73:85:f3:f4:5a:df:dd:ce:fd:44:fd:7c:73:35:
                    0b:26:4e:c6:b6:ec:5e:2a:1c:5f:bd:e1:6b:d6:89:
                    75:cf:41:3c:3c:43:1e:45:75:67:76:64:cc:a5:cd:
                    04:2a:04:c8:e1:7c:aa:6e:a3:34:22:76:d0:dc:3d:
                    23:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:81:38:21:5B:F5:D8:8B:C8:AC:0F:F7:92:6A:D5:DE:DA:5C:C7:97
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e36372e302f32342d3234203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a3:2f:7d:be:f8:aa:21:87:4d:e4:2f:1c:fe:13:e9:08:ea:
         74:f9:6f:25:c6:d7:ba:9a:0f:86:05:aa:88:c9:87:f6:37:30:
         10:05:e0:78:ba:a1:94:e1:4b:9a:b1:2d:83:d6:2c:f9:8b:72:
         e6:35:d5:b9:cd:1f:6c:ba:89:f6:92:90:a1:1b:a2:75:99:75:
         fe:7b:24:84:d0:ab:e5:7a:4e:03:c6:95:ec:22:14:d8:c0:20:
         fa:12:94:80:07:62:25:57:ae:a9:66:a7:a8:c5:8a:f7:f9:2f:
         88:1c:5f:9d:88:d9:e3:8d:c9:e0:d1:09:d3:28:bf:02:ba:c1:
         69:5b:08:fb:80:de:3a:2b:35:23:ee:5a:02:9e:c9:12:44:88:
         1e:eb:de:ce:72:16:e2:08:2f:d1:55:89:b5:57:66:89:2f:af:
         2f:ea:5e:0b:d9:df:8f:27:89:76:fc:5f:e6:39:47:5d:83:70:
         04:ec:91:91:fa:88:cd:46:70:e9:6e:b5:95:4d:f0:bf:20:89:
         50:99:d8:8c:3f:c2:af:35:38:aa:41:eb:aa:19:b0:e1:a8:65:
         9f:6d:bd:e3:16:e8:8b:69:92:b7:ee:b7:cb:9b:f5:36:f7:16:
         93:dc:10:0c:fc:b3:28:ef:b0:2c:62:be:a2:2b:c9:b2:06:09:
         2e:a2:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:31:19 2025 by rpki-client