Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139342e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3139342e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          2rY94PRMGOlk+fIODIICbpntL+yw4gSW9w6RQVLQBhA=
Subject key identifier:   69:71:38:35:CC:3F:C1:7B:01:00:74:42:1F:36:D0:27:CE:89:2D:32
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       2A92D930C8403628E9E4922EFA10646B073D4C15
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139342e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 06 Oct 2025 21:55:04 +0000
ROA not before:           Mon 06 Oct 2025 21:50:04 +0000
ROA not after:            Mon 05 Oct 2026 21:55:04 +0000
asID:                     41347
IP address blocks:        200.13.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:92:d9:30:c8:40:36:28:e9:e4:92:2e:fa:10:64:6b:07:3d:4c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Oct  6 21:50:04 2025 GMT
            Not After : Oct  5 21:55:04 2026 GMT
        Subject: CN=69713835CC3FC17B010074421F36D027CE892D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2d:43:e6:58:9e:1e:7a:86:c9:30:41:c4:da:
                    5b:44:e1:f7:f9:d0:e6:23:43:a0:76:f6:45:e6:bf:
                    21:11:ba:a3:63:6b:fa:ee:ee:10:96:7b:2d:09:05:
                    52:54:b4:9d:2d:c7:40:68:bd:d2:ee:c7:88:0b:f8:
                    0c:3a:29:6e:44:12:9d:66:7e:8a:cb:71:56:ea:aa:
                    50:f0:e8:a1:3b:2f:2a:da:df:1f:11:ff:94:b9:85:
                    26:43:fb:d1:df:90:6c:aa:1c:35:62:3b:d7:65:42:
                    4c:f0:fc:4b:b3:db:b1:59:0c:b6:59:cc:20:56:0d:
                    40:3a:68:a8:91:1e:5f:dc:06:38:fe:2c:17:0f:78:
                    30:fc:40:d8:7b:42:19:b7:35:10:88:fd:e2:08:9f:
                    57:9a:7e:bf:4c:67:1c:a9:2d:c0:0c:b6:bc:be:36:
                    3d:dd:ae:27:3c:f8:5b:f0:0f:3c:ee:f6:8b:cc:54:
                    e5:aa:e2:85:ae:2d:58:d1:9e:96:c3:69:50:9b:1e:
                    f3:de:ff:06:dc:08:04:9b:c8:1d:8d:3b:4e:c4:54:
                    f0:b3:3e:09:54:00:a2:87:09:60:9b:1d:d8:70:99:
                    c4:b2:c7:4a:d2:fa:6f:4b:bf:16:e7:35:23:b0:4d:
                    87:ec:08:10:8d:59:f5:26:be:05:b2:18:b0:7a:70:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:71:38:35:CC:3F:C1:7B:01:00:74:42:1F:36:D0:27:CE:89:2D:32
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139342e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:4d:18:58:6b:1f:e7:0d:00:0b:60:fc:f5:b6:14:8a:c5:46:
         08:a3:c5:12:46:88:0f:2b:eb:68:c4:19:7a:a6:e3:f2:1c:77:
         d7:40:2a:d6:6a:3c:23:53:21:74:fa:89:63:ea:b1:9a:0f:6e:
         af:eb:8b:65:97:5a:57:43:95:3d:04:92:e2:ba:03:2d:1e:68:
         a9:4a:bc:0a:eb:56:c3:07:65:20:0a:32:99:b2:65:e4:57:2e:
         75:2f:59:12:6e:94:c7:ad:db:7d:e9:4c:31:82:a7:eb:23:78:
         aa:cf:ea:f3:f0:98:77:2c:0e:68:00:bb:ba:52:f6:37:f9:a4:
         e2:6a:07:b6:d2:06:cf:5b:da:60:46:ec:d9:23:0f:2c:90:fa:
         ba:bf:42:df:3d:e4:cb:e2:e6:9b:fb:43:d2:ff:6f:60:3c:0f:
         22:ba:0b:75:70:9a:82:da:81:cd:ca:e8:a9:13:e1:4a:9b:82:
         d7:78:f9:85:ce:cb:24:1a:9a:cc:ad:a5:cb:21:4e:21:2b:0c:
         c6:13:3f:19:f5:82:2c:c7:de:b6:d9:7f:87:33:f8:27:d2:36:
         5d:64:1f:66:fe:af:2e:dc:08:7c:9b:2a:af:b9:2b:2d:0a:34:
         58:d5:40:3a:12:48:d4:ef:98:bc:73:38:84:03:27:88:93:22:
         e2:19:e8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:53 2025 by rpki-client