Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139382e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3139382e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          J7HzhJPmq6GD4xJUiryR0HFadeAfOWhuuGrAMbomzBY=
Subject key identifier:   69:4C:F8:79:18:A8:64:C6:C6:CC:C9:4A:74:84:95:47:DC:CC:1E:0F
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       7A51CE07C96AA1FB651EAB2E50CC51FF5D3A2AC3
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139382e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 06 Oct 2025 21:55:07 +0000
ROA not before:           Mon 06 Oct 2025 21:50:07 +0000
ROA not after:            Mon 05 Oct 2026 21:55:07 +0000
asID:                     41347
IP address blocks:        200.13.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:51:ce:07:c9:6a:a1:fb:65:1e:ab:2e:50:cc:51:ff:5d:3a:2a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Oct  6 21:50:07 2025 GMT
            Not After : Oct  5 21:55:07 2026 GMT
        Subject: CN=694CF87918A864C6C6CCC94A74849547DCCC1E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:d1:2e:24:f8:c0:c0:41:9b:7e:8a:16:3a:
                    5f:f4:e6:35:7d:06:b6:d6:19:53:71:86:ef:ba:32:
                    cd:e5:1c:13:15:62:f5:89:f2:cf:c2:9a:43:d9:e2:
                    0e:a7:f1:c0:68:27:82:1c:9b:25:aa:64:3d:94:bd:
                    a5:3e:34:10:ae:09:ba:de:23:db:80:2a:69:32:9d:
                    b6:0a:22:38:21:60:0c:89:22:88:54:d7:80:46:08:
                    81:00:a4:4d:8d:c8:36:8d:2e:46:6e:3c:f3:6b:fc:
                    f9:3e:67:57:36:d9:97:1f:8e:51:81:9e:1f:a7:57:
                    01:dc:e3:29:af:08:09:f8:36:f4:98:8f:22:4f:ed:
                    6d:5c:24:ca:f5:c4:57:8a:b2:77:eb:f9:b4:7c:c3:
                    0e:df:77:c4:52:1f:20:22:4c:cf:75:a3:5a:94:1f:
                    7a:be:bc:a6:0b:55:fc:8c:4a:65:09:84:5e:79:30:
                    d7:ce:85:03:8c:30:9c:1f:b2:ca:99:bd:5a:bb:49:
                    f0:76:c4:16:30:66:0b:51:28:77:e7:b0:4c:f9:1f:
                    bf:24:94:84:4d:cb:66:19:58:78:d3:cb:4d:30:a9:
                    e5:48:cc:74:3f:e0:1a:1b:56:57:36:11:d3:b3:6e:
                    a8:8f:be:06:2b:e5:fa:ac:0a:52:78:fc:8d:38:90:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4C:F8:79:18:A8:64:C6:C6:CC:C9:4A:74:84:95:47:DC:CC:1E:0F
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139382e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ee:57:99:a4:bb:d6:d0:86:28:29:75:bf:21:11:9c:16:81:
         fa:24:fc:97:ff:c6:ab:a9:e1:13:9b:67:37:62:87:63:55:a4:
         e4:c6:f0:74:c3:6e:96:d4:33:8f:c6:62:71:dc:1c:56:e9:2c:
         7a:37:c1:96:98:59:7f:84:67:e9:fb:15:38:52:41:fa:ce:ff:
         38:c2:4c:1d:07:69:50:2d:c5:6a:93:59:d3:d5:e3:2a:fd:12:
         c5:a1:aa:f1:b3:69:97:88:0c:4b:b6:d5:be:f5:5c:f9:b7:09:
         82:b1:cd:9b:7b:79:48:6e:1c:56:26:74:d5:e6:8b:cb:0b:39:
         7b:ff:21:d9:0f:f3:02:6c:c9:74:0b:98:00:ad:55:56:82:ab:
         c6:05:0c:c9:27:15:2d:44:89:ef:ac:92:18:11:d3:e5:f7:0b:
         98:fe:c4:79:4c:7c:4a:ab:0d:93:b9:e6:82:ae:54:af:9a:19:
         88:26:4f:b5:53:c7:ee:86:c8:d0:37:36:d8:56:d3:3f:c1:ae:
         5e:05:f7:f3:1b:a4:52:e7:31:43:c4:ed:85:57:b4:bb:06:3a:
         3f:97:af:27:05:cb:9b:d6:eb:be:f1:0a:03:83:02:76:67:49:
         64:57:59:e2:25:8c:24:41:c0:ae:ea:19:e8:8e:cb:b7:e9:4f:
         76:4c:ad:21
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUelHOB8lqoftlHqsuUMxR/106KsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFMTlFMkQ0RUU4RjNFQUQwQzE0NjYwQjJBODY0NkFD
OUYyMEFGNTAeFw0yNTEwMDYyMTUwMDdaFw0yNjEwMDUyMTU1MDdaMDMxMTAvBgNV
BAMTKDY5NENGODc5MThBODY0QzZDNkNDQzk0QTc0ODQ5NTQ3RENDQzFFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZNEuJPjAwEGbfooWOl/05jV9
BrbWGVNxhu+6Ms3lHBMVYvWJ8s/CmkPZ4g6n8cBoJ4IcmyWqZD2UvaU+NBCuCbre
I9uAKmkynbYKIjghYAyJIohU14BGCIEApE2NyDaNLkZuPPNr/Pk+Z1c22ZcfjlGB
nh+nVwHc4ymvCAn4NvSYjyJP7W1cJMr1xFeKsnfr+bR8ww7fd8RSHyAiTM91o1qU
H3q+vKYLVfyMSmUJhF55MNfOhQOMMJwfssqZvVq7SfB2xBYwZgtRKHfnsEz5H78k
lIRNy2YZWHjTy00wqeVIzHQ/4BobVlc2EdOzbqiPvgYr5fqsClJ4/I04kCJLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUaUz4eRioZMbGzMlKdISVR9zMHg8wHwYDVR0j
BBgwFoAUNuGeLU7o8+rQwUZgsqhkasnyCvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRjdCQTc1MDU1Rjc5OTc1OEYzRjRDRTgxMUJBREJBMjQ5
MUJGMUUzMjM4NEZCQjNBRjhBMzlFN0ZCNTA2QzJCLzAvMzZFMTlFMkQ0RUU4RjNF
QUQwQzE0NjYwQjJBODY0NkFDOUYyMEFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNkUxOUUyRDRFRThGM0VBRDBD
MTQ2NjBCMkE4NjQ2QUM5RjIwQUY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkY3QkE3NTA1NUY3OTk3NThGM0Y0Q0U4MTFCQURCQTI0OTFCRjFFMzIz
ODRGQkIzQUY4QTM5RTdGQjUwNkMyQi8wLzMyMzAzMDJlMzEzMzJlMzEzOTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMTMzMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgNxjAN
BgkqhkiG9w0BAQsFAAOCAQEACe5XmaS71tCGKCl1vyERnBaB+iT8l//Gq6nhE5tn
N2KHY1Wk5MbwdMNultQzj8ZicdwcVuksejfBlphZf4Rn6fsVOFJB+s7/OMJMHQdp
UC3FapNZ09XjKv0SxaGq8bNpl4gMS7bVvvVc+bcJgrHNm3t5SG4cViZ01eaLyws5
e/8h2Q/zAmzJdAuYAK1VVoKrxgUMyScVLUSJ76ySGBHT5fcLmP7EeUx8SqsNk7nm
gq5Ur5oZiCZPtVPH7obI0Dc22FbTP8GuXgX38xukUucxQ8TthVe0uwY6P5evJwXL
m9brvvEKA4MCdmdJZFdZ4iWMJEHAruoZ6I7Lt+lPdkytIQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:51 2025 by rpki-client