Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32332d3233203d3e20323730303633.roa
File:                     3230302e38312e3134382e302f32332d3233203d3e20323730303633.roa (raw, json)
Hash identifier:          SoEBzNhwMPka7K17GyAaG98b7FCrWTPa9dZ5Xd7XojI=
Subject key identifier:   DF:45:6A:7A:79:19:E6:91:6E:12:43:05:4E:FD:7B:9D:0F:A2:15:12
Certificate issuer:       /CN=9EA657B7464CA681E408DD78432AA090F1846959
Certificate serial:       7C05FB7A34E7968BAE274BDE399423AF7FA43A60
Authority key identifier: 9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32332d3233203d3e20323730303633.roa
Signing time:             Tue 07 Oct 2025 23:25:00 +0000
ROA not before:           Tue 07 Oct 2025 23:20:00 +0000
ROA not after:            Tue 06 Oct 2026 23:25:00 +0000
asID:                     270063
IP address blocks:        200.81.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:05:fb:7a:34:e7:96:8b:ae:27:4b:de:39:94:23:af:7f:a4:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA657B7464CA681E408DD78432AA090F1846959
        Validity
            Not Before: Oct  7 23:20:00 2025 GMT
            Not After : Oct  6 23:25:00 2026 GMT
        Subject: CN=DF456A7A7919E6916E1243054EFD7B9D0FA21512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:87:71:30:30:45:91:7a:0f:a7:57:8b:d9:
                    bc:7c:8e:f8:7c:07:4e:1d:50:27:4f:c4:db:8a:f8:
                    00:c5:cd:b9:8d:c4:e7:59:14:d7:11:73:08:12:a4:
                    ec:37:f5:70:cb:6e:df:f8:24:d2:9f:02:2a:5b:3e:
                    15:d1:56:5c:dc:05:2a:1d:b9:05:de:a1:e5:4f:e4:
                    4f:9e:13:d9:1f:61:75:ac:cd:cf:a7:e5:43:e0:ef:
                    fd:e5:97:e2:16:77:c6:78:da:19:9f:55:2e:ec:9d:
                    2f:5c:e1:a1:f9:ac:95:e2:0b:67:7f:fa:59:42:f1:
                    31:15:d8:88:0a:50:a4:00:7d:de:09:74:cc:63:44:
                    4e:15:1d:05:3e:85:d8:e7:5a:10:59:ee:53:7a:41:
                    89:ea:9a:f4:33:48:94:bb:77:5e:6d:9e:0c:65:1e:
                    b6:60:69:42:96:a9:e9:d0:9a:b5:34:38:99:2d:c5:
                    a3:f7:ad:c3:74:04:70:fd:a4:9e:51:e0:3d:8e:da:
                    f9:df:26:67:20:61:ca:7a:db:9f:22:b1:b9:d4:e2:
                    fb:af:fc:7c:16:53:6a:18:c1:37:4d:20:1d:89:b9:
                    0f:43:a8:2d:eb:fd:bd:4f:89:c6:81:eb:ab:a2:11:
                    7d:0e:54:8b:2a:d2:45:52:d4:79:2b:fd:5b:cc:45:
                    db:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:45:6A:7A:79:19:E6:91:6E:12:43:05:4E:FD:7B:9D:0F:A2:15:12
            X509v3 Authority Key Identifier:
                keyid:9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32332d3233203d3e20323730303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:ff:d0:a9:de:fd:1e:ec:58:e0:7a:0c:d8:d5:cc:85:6e:55:
         59:d3:94:fd:bf:25:30:b2:a5:69:bf:c0:2a:40:6f:84:1d:3c:
         df:36:ef:aa:22:4d:68:76:86:fd:96:f5:f7:2a:1c:16:c2:40:
         30:5a:40:82:65:5d:17:5a:a2:45:21:0d:82:58:6e:f5:8d:3e:
         44:c0:8b:16:53:50:95:cf:f3:82:6a:cd:17:b0:c5:93:16:0f:
         bf:8d:ef:84:5f:51:d3:23:bb:b9:e2:db:b8:95:4a:3c:9e:f3:
         75:d7:3e:bd:25:b7:dd:30:0c:96:8f:aa:a7:8e:9f:20:16:ab:
         a3:c1:43:f9:d8:67:a0:d3:2a:ce:26:7d:5e:e6:aa:4c:65:22:
         a3:b3:1c:5b:dc:d7:08:09:8b:ae:24:c5:e8:9c:0c:e7:2d:00:
         06:73:19:53:8a:95:10:dd:81:0e:3e:fe:4c:cd:1c:10:18:66:
         fb:3f:0e:6c:84:f9:e9:44:ce:91:43:b7:33:d7:2a:b9:68:26:
         ee:19:52:28:41:83:20:ae:74:95:08:7e:59:c3:e2:f3:36:eb:
         36:53:9d:f5:7f:e4:75:54:49:f2:7a:25:40:56:47:1c:4b:1c:
         64:ec:cf:c4:78:f2:b1:b3:62:9c:fd:b8:89:90:24:b4:b6:de:
         2f:2a:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:37:54 2025 by rpki-client