Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139352e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3139352e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          dJxoTXA/wX2rkT7545rhEU0auuwgt/X79lDXjHKYDWc=
Subject key identifier:   80:B7:5D:85:2C:F8:90:E8:91:65:7F:86:A5:57:56:93:A6:93:25:2B
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       1CCDED005234CBA955F419CBF011D41E2E9D0E7D
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139352e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 06 Oct 2025 21:55:01 +0000
ROA not before:           Mon 06 Oct 2025 21:50:01 +0000
ROA not after:            Mon 05 Oct 2026 21:55:01 +0000
asID:                     41347
IP address blocks:        200.13.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cd:ed:00:52:34:cb:a9:55:f4:19:cb:f0:11:d4:1e:2e:9d:0e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Oct  6 21:50:01 2025 GMT
            Not After : Oct  5 21:55:01 2026 GMT
        Subject: CN=80B75D852CF890E891657F86A5575693A693252B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:a5:44:19:f6:0b:cb:d1:e1:53:35:58:85:
                    e4:00:61:77:9f:15:08:44:d7:b0:a3:17:db:67:b2:
                    2f:c6:c9:1d:e8:e9:fb:9d:86:7c:d1:3b:fc:40:1d:
                    a6:6c:b0:3b:9f:76:9c:52:d4:7c:64:94:e9:3a:ce:
                    4e:18:79:b1:aa:9b:b1:ca:62:e2:e1:5d:f6:6b:c4:
                    41:fa:df:75:ff:61:7b:45:98:07:e4:4c:52:33:fa:
                    52:47:7f:32:21:11:54:70:19:50:37:20:fb:48:5a:
                    0f:64:56:10:59:ee:c0:78:a6:2c:cf:58:56:25:c5:
                    9f:11:a4:7d:64:69:d5:75:dd:2f:13:39:f9:ec:ec:
                    db:dd:1c:9a:1b:9b:54:0a:ed:b7:ee:0d:1a:40:15:
                    28:a2:f4:1b:d8:ea:ee:b9:1a:37:c3:ca:44:6b:94:
                    b1:86:e8:e0:47:90:9d:b1:dd:b0:70:d5:5b:d3:81:
                    2c:2b:9f:8b:2b:c0:b0:d3:55:81:99:5d:d2:37:3e:
                    9a:c7:64:93:f9:87:bf:a0:f8:2d:87:0b:d2:5c:91:
                    36:ee:fb:b7:6e:57:b4:5b:e2:70:1c:08:b6:80:33:
                    68:48:91:36:1d:b8:50:2e:05:af:83:f3:c4:41:b8:
                    a4:71:5f:72:82:69:1a:c1:fe:01:f5:d6:6a:89:db:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B7:5D:85:2C:F8:90:E8:91:65:7F:86:A5:57:56:93:A6:93:25:2B
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139352e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:5d:a5:e0:8a:f3:62:66:85:bb:64:b2:a5:b1:1a:15:57:b7:
         01:1c:78:ad:9d:70:98:93:2e:6c:41:a4:12:cc:41:5b:16:3e:
         a0:f0:7c:50:7b:77:1c:41:c3:06:07:91:e2:40:0f:ce:50:ba:
         47:4b:a8:2d:b7:3a:36:37:49:fa:c2:b4:4a:ab:8f:38:6f:ae:
         fa:f3:00:1c:5c:36:c4:85:d4:84:ad:f5:7f:05:ff:27:cd:38:
         97:e4:a5:8c:b6:3d:14:d5:95:52:b6:e9:8f:34:b9:3b:4f:86:
         37:c1:28:f2:86:ae:a4:91:72:15:f1:3d:e7:73:3d:03:8c:ae:
         ee:34:9b:42:7d:5c:77:40:fe:eb:49:7e:40:a9:97:84:86:74:
         9a:c8:14:1d:5a:32:28:79:7c:1d:cd:be:ca:e4:7b:ea:16:57:
         97:c2:81:38:db:fc:b1:5e:44:dc:37:6d:38:93:6e:f6:a4:8a:
         ed:d6:93:dd:a6:e5:78:e3:e1:74:0f:19:35:67:2d:90:a1:06:
         42:fe:a6:bf:a9:db:d4:01:da:e4:36:e7:77:9e:29:8a:28:2c:
         3e:8e:81:04:e3:97:2e:ed:38:bf:31:2b:40:f8:8f:cf:59:aa:
         4f:50:bd:69:f9:0f:42:d9:91:7c:83:65:0b:69:90:8d:8d:6f:
         1a:73:cb:98
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHM3tAFI0y6lV9BnL8BHUHi6dDn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFMTlFMkQ0RUU4RjNFQUQwQzE0NjYwQjJBODY0NkFD
OUYyMEFGNTAeFw0yNTEwMDYyMTUwMDFaFw0yNjEwMDUyMTU1MDFaMDMxMTAvBgNV
BAMTKDgwQjc1RDg1MkNGODkwRTg5MTY1N0Y4NkE1NTc1NjkzQTY5MzI1MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxaVEGfYLy9HhUzVYheQAYXef
FQhE17CjF9tnsi/GyR3o6fudhnzRO/xAHaZssDufdpxS1HxklOk6zk4YebGqm7HK
YuLhXfZrxEH633X/YXtFmAfkTFIz+lJHfzIhEVRwGVA3IPtIWg9kVhBZ7sB4pizP
WFYlxZ8RpH1kadV13S8TOfns7NvdHJobm1QK7bfuDRpAFSii9BvY6u65GjfDykRr
lLGG6OBHkJ2x3bBw1VvTgSwrn4srwLDTVYGZXdI3PprHZJP5h7+g+C2HC9JckTbu
+7duV7Rb4nAcCLaAM2hIkTYduFAuBa+D88RBuKRxX3KCaRrB/gH11mqJ21QRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgLddhSz4kOiRZX+GpVdWk6aTJSswHwYDVR0j
BBgwFoAUNuGeLU7o8+rQwUZgsqhkasnyCvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRjdCQTc1MDU1Rjc5OTc1OEYzRjRDRTgxMUJBREJBMjQ5
MUJGMUUzMjM4NEZCQjNBRjhBMzlFN0ZCNTA2QzJCLzAvMzZFMTlFMkQ0RUU4RjNF
QUQwQzE0NjYwQjJBODY0NkFDOUYyMEFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNkUxOUUyRDRFRThGM0VBRDBD
MTQ2NjBCMkE4NjQ2QUM5RjIwQUY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkY3QkE3NTA1NUY3OTk3NThGM0Y0Q0U4MTFCQURCQTI0OTFCRjFFMzIz
ODRGQkIzQUY4QTM5RTdGQjUwNkMyQi8wLzMyMzAzMDJlMzEzMzJlMzEzOTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMTMzMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgNwzAN
BgkqhkiG9w0BAQsFAAOCAQEAOV2l4IrzYmaFu2SypbEaFVe3ARx4rZ1wmJMubEGk
EsxBWxY+oPB8UHt3HEHDBgeR4kAPzlC6R0uoLbc6NjdJ+sK0SquPOG+u+vMAHFw2
xIXUhK31fwX/J804l+SljLY9FNWVUrbpjzS5O0+GN8Eo8oaupJFyFfE953M9A4yu
7jSbQn1cd0D+60l+QKmXhIZ0msgUHVoyKHl8Hc2+yuR76hZXl8KBONv8sV5E3Ddt
OJNu9qSK7daT3ableOPhdA8ZNWctkKEGQv6mv6nb1AHa5Dbnd54piigsPo6BBOOX
Lu04vzErQPiPz1mqT1C9afkPQtmRfINlC2mQjY1vGnPLmA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:52 2025 by rpki-client