Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32322d3232203d3e20323730303633.roa
File:                     3230302e38312e3134382e302f32322d3232203d3e20323730303633.roa (raw, json)
Hash identifier:          hJw50WRxe3FJaDc8r1AD/OJQTYVt5215v1AtDTHuwpU=
Subject key identifier:   91:5F:00:B1:B8:84:F8:2A:90:5D:E2:9C:8F:3D:B8:FB:6C:7B:D9:F0
Certificate issuer:       /CN=9EA657B7464CA681E408DD78432AA090F1846959
Certificate serial:       3F820049BA6F7EFD6B7DFF0FBD5B662C62646E0A
Authority key identifier: 9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32322d3232203d3e20323730303633.roa
Signing time:             Tue 07 Oct 2025 23:25:01 +0000
ROA not before:           Tue 07 Oct 2025 23:20:01 +0000
ROA not after:            Tue 06 Oct 2026 23:25:01 +0000
asID:                     270063
IP address blocks:        200.81.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:82:00:49:ba:6f:7e:fd:6b:7d:ff:0f:bd:5b:66:2c:62:64:6e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA657B7464CA681E408DD78432AA090F1846959
        Validity
            Not Before: Oct  7 23:20:01 2025 GMT
            Not After : Oct  6 23:25:01 2026 GMT
        Subject: CN=915F00B1B884F82A905DE29C8F3DB8FB6C7BD9F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:97:84:45:97:ad:63:ff:41:96:be:1d:c5:
                    e0:08:5f:3b:db:16:24:72:1d:c9:9d:64:69:80:02:
                    03:76:d0:3f:69:e1:6f:79:bb:aa:2b:69:5e:32:66:
                    7e:ab:f5:13:71:b9:0f:98:09:24:a4:08:c9:6d:47:
                    ad:ed:fe:34:01:92:f2:df:8f:a8:4c:ea:7d:36:cd:
                    a5:fa:c3:f3:fa:14:f2:fe:b4:37:c0:5e:89:c7:ec:
                    6d:7d:10:75:c0:ef:85:24:dd:74:33:95:ab:bd:c1:
                    ef:cc:ef:d9:88:ba:a5:4a:55:8d:71:39:a9:56:5a:
                    8d:da:5e:5c:50:3d:01:f4:af:63:de:44:4c:61:3d:
                    bf:7f:f7:88:6d:1f:54:68:b1:cd:f7:fb:f4:19:cf:
                    37:42:9b:7c:7f:68:af:5d:dc:fd:2b:d0:a0:7c:8d:
                    d4:87:48:45:c9:43:e4:7e:84:e2:3c:41:30:57:76:
                    7a:6d:93:c7:38:08:3c:c0:04:b5:88:4f:52:75:21:
                    4d:b4:11:eb:73:65:3d:5c:03:1d:9d:43:d0:19:29:
                    4b:ef:d1:64:a7:a5:47:e3:cf:23:78:f9:fd:b6:36:
                    99:8f:ad:0e:65:7e:90:ac:1e:ca:8c:3a:5b:b0:bf:
                    66:41:a9:ab:80:80:0d:53:8d:d0:97:e2:73:f8:e6:
                    9c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5F:00:B1:B8:84:F8:2A:90:5D:E2:9C:8F:3D:B8:FB:6C:7B:D9:F0
            X509v3 Authority Key Identifier:
                keyid:9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32322d3232203d3e20323730303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:23:95:09:24:54:bf:b3:c8:0b:7d:95:9b:63:39:0c:87:5b:
         0b:4a:f6:87:05:7e:80:f6:6d:05:1d:28:db:75:95:8f:35:c7:
         fe:3d:73:cc:7e:71:c8:87:bd:38:f6:c8:e5:c6:cb:d9:03:1a:
         1a:3b:37:ee:2f:23:5c:3c:2d:2c:59:30:ec:ab:59:e5:8d:b4:
         bf:8f:55:e9:96:e0:c1:97:83:74:87:b5:bd:45:9e:72:87:07:
         ea:30:40:c4:bf:9d:12:29:c2:4b:41:ce:79:9c:a1:ec:9f:a2:
         e6:32:fa:26:a2:5b:34:d2:cc:4f:7d:e1:08:bd:7a:5f:7f:62:
         d5:7d:22:5a:b6:87:2a:74:55:a4:f9:07:c1:b6:64:d1:8b:2c:
         cb:39:96:f3:bf:95:2a:f8:3d:f7:74:55:60:ca:cf:a6:44:bc:
         24:f7:14:ec:99:47:0c:44:8f:fb:bd:9c:35:f2:e7:0d:57:20:
         e5:a4:43:27:27:91:8b:67:b9:d2:24:c1:ce:b6:87:f9:e0:49:
         7c:b6:71:20:5c:d3:06:5d:1f:fe:ac:f8:4d:c6:50:c3:d3:20:
         4f:57:fd:13:eb:ac:ea:94:89:71:b1:01:c0:e9:54:5e:12:cb:
         fa:76:bc:53:f5:d3:df:b4:52:84:61:31:be:08:8c:d8:38:89:
         d4:03:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:37:55 2025 by rpki-client