Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139372e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3139372e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          OhXpbqw/TG07vJr68iCjHYVsJN6a0FFgJNK2vdMaslE=
Subject key identifier:   2E:EE:FA:EF:B7:E7:17:B2:D6:C6:2D:F1:5C:E1:B4:D2:6E:A0:6E:96
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       5BFE97620B5F059247226850D81FCF6574D566D9
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139372e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 06 Oct 2025 21:55:06 +0000
ROA not before:           Mon 06 Oct 2025 21:50:06 +0000
ROA not after:            Mon 05 Oct 2026 21:55:06 +0000
asID:                     41347
IP address blocks:        200.13.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fe:97:62:0b:5f:05:92:47:22:68:50:d8:1f:cf:65:74:d5:66:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Oct  6 21:50:06 2025 GMT
            Not After : Oct  5 21:55:06 2026 GMT
        Subject: CN=2EEEFAEFB7E717B2D6C62DF15CE1B4D26EA06E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:6d:39:3b:15:75:0a:20:b1:32:58:30:77:
                    56:bc:75:db:72:9b:1d:c3:ef:ef:5b:b3:41:02:24:
                    d2:51:d4:c4:b8:6e:5d:0c:ba:e5:84:4c:1f:e0:05:
                    84:82:27:1d:2c:1e:0a:3a:c9:aa:08:aa:d4:ba:9b:
                    ca:49:3d:a7:57:a3:0e:e5:3a:5e:49:d3:2c:c4:6e:
                    87:08:15:07:64:ce:de:a9:2e:79:e9:23:4b:6d:a4:
                    5d:1d:89:7f:b1:d3:1a:f3:10:6d:76:65:ca:bc:1f:
                    a5:e8:ae:dc:8e:13:37:34:28:2c:1e:89:31:78:17:
                    57:ba:b5:c1:da:3d:a9:be:6d:60:86:3e:70:5c:0c:
                    1f:17:ed:53:4e:c9:3e:ce:69:b6:f7:7e:4c:b0:74:
                    ff:56:e9:4c:99:bf:38:93:20:2d:e9:bb:a6:91:66:
                    46:dc:8b:8e:ff:98:10:12:b8:d0:6c:e7:b7:d4:3b:
                    15:02:6a:2d:e2:9a:47:21:ed:e3:54:f1:09:22:7f:
                    bd:26:19:07:ac:de:1a:d9:20:e0:2e:dd:cd:59:0d:
                    e7:b7:74:c7:cb:65:9d:ef:2e:3b:06:ea:9c:32:99:
                    84:d9:7e:f7:b1:e0:05:5d:c2:3c:ed:b6:19:db:b1:
                    ad:cc:14:8f:56:1d:b2:4c:52:60:c5:47:65:ae:c2:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EE:FA:EF:B7:E7:17:B2:D6:C6:2D:F1:5C:E1:B4:D2:6E:A0:6E:96
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139372e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:fc:f5:1f:04:c7:79:3b:4b:12:84:89:6d:0f:73:cf:79:46:
         44:f1:a4:6a:a8:03:a5:10:c5:44:20:20:7f:80:3e:24:02:fe:
         5f:1c:32:85:94:bd:93:40:99:cd:27:e9:af:c6:44:a2:86:c4:
         4c:08:27:32:46:f3:65:5a:3a:70:87:3f:ab:80:43:1c:95:d5:
         f1:4a:86:03:ac:28:e6:1b:5b:5a:d5:d6:5f:5a:1c:76:f7:34:
         42:9e:f8:d2:e8:5f:d3:dc:c0:09:a0:0e:d7:54:c4:01:2e:d1:
         c4:b7:2a:a9:f3:b6:bd:4f:b8:53:e8:ea:29:2a:d7:13:2f:3e:
         0e:f3:7c:b5:69:4d:62:4b:ee:0d:42:ae:59:39:10:2a:17:58:
         8b:c4:6d:f1:1a:2c:1c:c9:9b:c6:4c:90:60:e3:0d:4b:54:87:
         d1:95:75:16:64:d3:f9:85:ce:d1:ab:b1:a7:5d:b3:80:ce:ff:
         6f:a1:6c:00:2f:91:34:fa:d9:72:4b:76:d9:6c:1a:c5:2c:91:
         09:86:a1:57:b1:c4:93:76:f1:99:6e:e3:30:d8:0b:12:8b:45:
         e2:02:95:27:ce:ed:3d:9d:7d:4a:90:de:d1:cb:3c:e6:5c:32:
         0b:42:e0:14:18:6a:79:79:4d:e9:d9:f0:3d:a4:0d:96:b8:9e:
         d1:3a:8c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:53 2025 by rpki-client