Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139332e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3139332e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          p9X59C37Rn7+wNSOt08MD6y0mebnCvnqhLGWB0VdZkE=
Subject key identifier:   AD:08:15:00:44:2A:A1:35:33:DE:1F:F0:00:9E:75:F9:69:F6:EC:C3
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       38AEB20AA149D7BA810A9B4AC356369F7BCD2DCE
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139332e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 06 Oct 2025 21:55:02 +0000
ROA not before:           Mon 06 Oct 2025 21:50:02 +0000
ROA not after:            Mon 05 Oct 2026 21:55:02 +0000
asID:                     41347
IP address blocks:        200.13.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ae:b2:0a:a1:49:d7:ba:81:0a:9b:4a:c3:56:36:9f:7b:cd:2d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Oct  6 21:50:02 2025 GMT
            Not After : Oct  5 21:55:02 2026 GMT
        Subject: CN=AD081500442AA13533DE1FF0009E75F969F6ECC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:3d:37:7f:f5:12:20:d3:ec:98:db:04:73:
                    eb:68:ef:c6:35:96:88:c3:13:b6:22:8c:59:5b:58:
                    52:da:b0:6a:e0:8f:39:f0:e9:32:ba:16:ca:cf:ba:
                    96:34:ad:2a:11:ef:cc:47:3b:c7:e6:33:df:7f:05:
                    a5:86:8c:65:60:90:d3:c8:70:80:cb:51:18:51:7b:
                    4a:4a:24:8b:54:e4:9f:37:ee:3e:fe:0a:08:22:54:
                    a3:52:b8:46:ff:7a:2f:a0:ff:8d:2f:a8:f6:0c:03:
                    af:ae:e8:af:39:fd:ea:38:ab:9b:c9:8f:5e:e1:8d:
                    44:e0:e8:f2:aa:1e:ef:83:5b:23:2a:6e:0b:51:af:
                    4f:e0:77:e2:bc:9a:b8:65:66:c5:84:df:b5:08:e7:
                    ef:93:34:dc:3b:f7:d9:c2:9c:38:4b:30:d2:7d:27:
                    b4:c9:dc:33:42:d4:6d:46:17:3f:73:82:f8:d9:75:
                    11:ad:42:09:b0:46:70:38:ea:0c:cb:5e:cd:b7:8e:
                    01:9f:3a:30:f0:7d:0f:3c:12:5e:b9:3e:47:39:e7:
                    4c:b2:df:a1:a2:6d:c8:fa:3f:02:57:ad:3c:4d:e7:
                    ef:d8:0c:4d:54:f5:21:fc:f1:e5:ff:e7:9b:f3:85:
                    75:be:f3:ec:6f:b0:84:3e:48:da:9b:af:b5:df:1c:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:08:15:00:44:2A:A1:35:33:DE:1F:F0:00:9E:75:F9:69:F6:EC:C3
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139332e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:b5:75:7d:52:e5:b3:dc:41:74:97:3a:09:36:de:63:ee:
         e8:10:79:cf:8e:a6:b1:64:d9:3a:17:fc:df:aa:07:8a:40:2f:
         dc:87:ad:6a:66:0a:78:ef:15:ba:71:b7:05:e4:63:fe:5d:b2:
         93:9b:33:d5:61:c6:91:2e:a8:5c:70:4a:8f:bd:91:8f:61:75:
         91:7d:12:b9:fc:a1:2e:c3:77:62:99:3b:ae:da:2a:c3:4c:7d:
         16:af:9f:be:e3:cf:b5:5e:34:f9:56:3e:3c:61:98:0d:65:1c:
         61:64:3b:b5:48:83:cb:71:12:f9:18:03:d1:ec:6d:9e:4d:a8:
         3b:c5:15:27:01:8a:99:2f:2b:e5:bb:f6:64:82:56:0e:49:f4:
         c0:4d:55:6f:24:e1:a0:33:1e:df:dd:04:ee:53:7d:ef:d6:5a:
         5c:be:fb:17:3d:f2:23:0d:46:7b:4c:2d:3c:1b:34:e2:6d:2b:
         31:f3:c9:7c:2a:06:a3:0e:f0:98:b9:7b:04:76:b7:29:6d:86:
         23:e8:28:23:51:d7:0b:32:c0:a7:12:f3:83:b5:78:af:0f:3a:
         58:b6:a9:73:7e:a9:ab:3b:37:0a:9b:6a:41:68:e9:48:ba:f8:
         1f:41:e9:77:11:f6:7a:79:e8:2e:95:01:81:ee:45:83:0c:d0:
         3e:30:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:52 2025 by rpki-client