Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3135312e302f32342d3234203d3e20323730303633.roa
File:                     3230302e38312e3135312e302f32342d3234203d3e20323730303633.roa (raw, json)
Hash identifier:          +SewL0fScocs+kLg9JogKIqJXTAveSTkUQee3nIgdfM=
Subject key identifier:   C1:46:92:8D:DD:50:AC:09:1B:D5:F0:35:14:78:3D:A5:05:0D:9D:FC
Certificate issuer:       /CN=9EA657B7464CA681E408DD78432AA090F1846959
Certificate serial:       5D3FCC50F307A479531CC0D0A470E66BBF8B521A
Authority key identifier: 9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3135312e302f32342d3234203d3e20323730303633.roa
Signing time:             Tue 07 Oct 2025 23:25:02 +0000
ROA not before:           Tue 07 Oct 2025 23:20:02 +0000
ROA not after:            Tue 06 Oct 2026 23:25:02 +0000
asID:                     270063
IP address blocks:        200.81.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3f:cc:50:f3:07:a4:79:53:1c:c0:d0:a4:70:e6:6b:bf:8b:52:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA657B7464CA681E408DD78432AA090F1846959
        Validity
            Not Before: Oct  7 23:20:02 2025 GMT
            Not After : Oct  6 23:25:02 2026 GMT
        Subject: CN=C146928DDD50AC091BD5F03514783DA5050D9DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:f7:a3:95:48:f6:69:5d:a7:63:b7:a7:57:
                    d0:90:5e:8e:ec:eb:23:e9:da:be:9a:5f:4f:67:61:
                    bb:fa:5e:28:e4:3a:81:5a:88:b8:ab:91:3d:d3:75:
                    98:85:6c:4a:9a:c6:20:b2:cd:30:59:7e:60:4f:cc:
                    fb:09:0d:09:ab:4e:bc:5d:22:62:28:0a:1a:87:81:
                    fa:be:31:1d:54:1c:b0:b5:6f:26:8b:0a:93:8a:19:
                    fb:1c:62:ec:07:0d:7d:a3:5a:d1:84:72:5c:3a:ec:
                    cd:11:89:ac:47:42:26:d9:e1:1e:d8:89:02:09:c4:
                    18:9a:61:6f:9f:73:3f:98:f0:41:2a:8e:60:00:f9:
                    b3:d5:3a:3f:d4:64:b8:61:c0:0e:90:71:e0:c7:d0:
                    52:0a:9b:22:10:ed:5b:c6:1c:57:bc:02:63:de:f6:
                    4d:f1:98:c4:83:86:4e:63:52:f5:7f:b9:1d:be:83:
                    7d:05:88:fb:50:c4:8d:7a:4e:b7:41:02:b5:a2:8f:
                    11:48:f1:7b:db:c6:0a:b9:ba:f0:c0:6f:33:7c:c3:
                    60:49:84:60:c7:ec:b7:49:73:58:b3:7f:4a:a9:8b:
                    4e:fc:b3:7d:48:3f:b9:11:42:d3:33:9f:ca:a2:93:
                    46:09:e4:fa:42:47:61:07:f2:3c:42:ee:9c:7a:32:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:46:92:8D:DD:50:AC:09:1B:D5:F0:35:14:78:3D:A5:05:0D:9D:FC
            X509v3 Authority Key Identifier:
                keyid:9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3135312e302f32342d3234203d3e20323730303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:51:d0:46:24:b3:1d:cd:0a:07:c0:03:4a:d5:37:36:69:9d:
         77:83:5b:ea:5f:6e:1e:2f:e5:0a:3a:0b:91:78:91:c0:90:29:
         ce:1f:60:71:f7:00:72:ce:e2:cb:23:a5:28:5c:15:45:67:10:
         66:1a:d5:d7:69:c8:6c:e9:6d:1f:c2:41:d3:e9:e3:27:e8:8a:
         7b:42:a7:2f:0e:a0:17:1d:cf:8b:bb:5a:dd:a6:17:02:e1:bf:
         8d:8e:ec:e4:ee:6d:70:8f:b7:6c:38:50:b4:dc:bf:95:35:12:
         65:2a:92:68:58:19:ed:5c:3f:57:84:b3:16:50:d2:1c:ab:96:
         ae:9d:e3:34:d1:48:d1:58:fb:f6:f6:6c:4b:52:1b:ff:be:80:
         dc:e5:12:77:31:25:7b:d4:7e:cd:2b:ff:ad:af:9a:7f:cd:ef:
         67:ae:7f:51:87:ac:49:18:da:ca:dd:6c:f4:f9:6c:38:af:2f:
         24:3f:d2:c0:f8:cd:f1:cc:19:71:ad:35:30:ee:f5:97:a7:92:
         e8:0d:48:82:6b:83:56:ec:b9:ef:17:20:7c:86:9a:16:aa:3e:
         73:6c:cf:ca:6d:04:10:ce:7b:58:3e:14:f6:24:87:7b:b0:74:
         ff:90:85:35:e4:6f:d3:84:3f:57:8f:22:73:1b:43:f0:c5:c1:
         89:ae:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:37:55 2025 by rpki-client