Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230302e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3230302e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          1+eiHi2emUZVsHtyO7rqqG7JNoZixmOPf1PlL6YY6xU=
Subject key identifier:   92:8E:C7:0F:CB:DB:2F:E8:54:A5:C6:94:CD:A8:EF:66:FE:BF:61:46
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       4D25ED857AFB917F9763384A9F97A741DBA956C1
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230302e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 06 Oct 2025 21:55:06 +0000
ROA not before:           Mon 06 Oct 2025 21:50:06 +0000
ROA not after:            Mon 05 Oct 2026 21:55:06 +0000
asID:                     41347
IP address blocks:        200.13.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:25:ed:85:7a:fb:91:7f:97:63:38:4a:9f:97:a7:41:db:a9:56:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Oct  6 21:50:06 2025 GMT
            Not After : Oct  5 21:55:06 2026 GMT
        Subject: CN=928EC70FCBDB2FE854A5C694CDA8EF66FEBF6146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:74:ba:81:cd:4d:db:50:2b:a4:b8:ac:83:96:
                    fc:51:09:d5:1a:62:67:88:d4:1c:bb:78:9c:8d:fb:
                    cf:13:a6:b3:cb:11:07:3e:cd:bd:e2:a8:ac:24:34:
                    ef:30:51:b3:cb:8e:72:03:a0:25:59:6b:80:73:8d:
                    de:8f:aa:d3:4b:a3:72:a4:6c:e1:75:79:bb:da:a8:
                    2f:44:e1:f7:13:28:6f:13:d0:5b:4e:48:44:0c:bb:
                    bc:68:8a:70:6f:cb:57:f5:88:f0:af:da:23:9c:6f:
                    2c:30:48:49:3a:f5:c4:27:08:db:9e:21:66:5e:c8:
                    e9:6f:8d:18:33:d7:18:0d:c8:10:7c:c3:f5:c0:ef:
                    1f:3b:cc:10:9f:0b:de:57:12:c9:2c:4d:d4:b1:d1:
                    ff:fc:ee:45:a9:3e:1c:16:2c:fa:af:27:50:21:28:
                    ca:10:d6:d2:32:d6:3d:d9:9c:12:d8:f4:36:51:ba:
                    f9:9f:69:27:c3:4c:3f:ce:35:61:38:bf:44:32:04:
                    ff:73:4d:dc:c6:35:5d:a7:a8:0a:5d:33:e2:4b:4a:
                    81:b0:4d:d0:c8:30:ea:32:d4:b0:2c:bc:26:98:e6:
                    46:e2:4b:9c:93:8f:d1:0c:f3:c3:8b:2b:ec:22:57:
                    03:d2:1a:c2:aa:7d:cf:84:80:5a:eb:44:bb:74:af:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8E:C7:0F:CB:DB:2F:E8:54:A5:C6:94:CD:A8:EF:66:FE:BF:61:46
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230302e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:9f:3d:57:67:2e:3f:d0:c8:ba:4b:e8:18:a1:8d:e5:94:b0:
         2f:0a:7b:d6:f2:a1:fc:b5:7b:b6:27:b4:c9:6d:4e:93:dd:09:
         09:c5:14:9d:f3:52:de:14:7e:75:75:70:9f:fc:a4:29:c5:f3:
         2e:d1:1e:7a:a9:8a:e9:df:bc:76:a1:b7:a0:3f:dc:5f:59:9f:
         28:7e:9c:0f:7d:78:8f:61:dd:a9:5c:aa:7d:a2:d8:9d:9c:90:
         30:f1:1f:ca:f9:23:d6:73:d9:db:31:83:a7:46:f3:65:3f:8d:
         9b:99:1f:61:02:e8:85:b6:71:1f:15:2d:54:8d:2c:80:61:52:
         62:32:eb:0d:0d:39:43:e9:a0:20:32:f1:de:b5:89:85:9e:f8:
         1a:56:db:49:37:c2:58:ac:6b:8a:53:0e:a1:18:15:28:17:bc:
         02:69:a7:31:d6:9c:dc:40:6c:b8:fd:38:c6:d9:fc:72:97:06:
         e7:e9:ab:05:64:79:74:a9:ea:4b:8c:1d:96:6b:09:0a:62:98:
         ef:a8:80:49:f4:e2:5d:55:bb:c1:1e:ff:37:54:1a:18:05:0c:
         28:ab:51:c8:45:b4:4c:5a:01:33:22:7c:b4:05:51:6d:d5:89:
         1b:c2:e6:41:1d:67:f3:31:e2:9a:dc:52:86:ad:75:d4:d1:17:
         a3:ab:b6:3e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTSXthXr7kX+XYzhKn5enQdupVsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFMTlFMkQ0RUU4RjNFQUQwQzE0NjYwQjJBODY0NkFD
OUYyMEFGNTAeFw0yNTEwMDYyMTUwMDZaFw0yNjEwMDUyMTU1MDZaMDMxMTAvBgNV
BAMTKDkyOEVDNzBGQ0JEQjJGRTg1NEE1QzY5NENEQThFRjY2RkVCRjYxNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxdLqBzU3bUCukuKyDlvxRCdUa
YmeI1By7eJyN+88TprPLEQc+zb3iqKwkNO8wUbPLjnIDoCVZa4Bzjd6PqtNLo3Kk
bOF1ebvaqC9E4fcTKG8T0FtOSEQMu7xoinBvy1f1iPCv2iOcbywwSEk69cQnCNue
IWZeyOlvjRgz1xgNyBB8w/XA7x87zBCfC95XEsksTdSx0f/87kWpPhwWLPqvJ1Ah
KMoQ1tIy1j3ZnBLY9DZRuvmfaSfDTD/ONWE4v0QyBP9zTdzGNV2nqApdM+JLSoGw
TdDIMOoy1LAsvCaY5kbiS5yTj9EM88OLK+wiVwPSGsKqfc+EgFrrRLt0r2SbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUko7HD8vbL+hUpcaUzajvZv6/YUYwHwYDVR0j
BBgwFoAUNuGeLU7o8+rQwUZgsqhkasnyCvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRjdCQTc1MDU1Rjc5OTc1OEYzRjRDRTgxMUJBREJBMjQ5
MUJGMUUzMjM4NEZCQjNBRjhBMzlFN0ZCNTA2QzJCLzAvMzZFMTlFMkQ0RUU4RjNF
QUQwQzE0NjYwQjJBODY0NkFDOUYyMEFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNkUxOUUyRDRFRThGM0VBRDBD
MTQ2NjBCMkE4NjQ2QUM5RjIwQUY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkY3QkE3NTA1NUY3OTk3NThGM0Y0Q0U4MTFCQURCQTI0OTFCRjFFMzIz
ODRGQkIzQUY4QTM5RTdGQjUwNkMyQi8wLzMyMzAzMDJlMzEzMzJlMzIzMDMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMTMzMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgNyDAN
BgkqhkiG9w0BAQsFAAOCAQEASJ89V2cuP9DIukvoGKGN5ZSwLwp71vKh/LV7tie0
yW1Ok90JCcUUnfNS3hR+dXVwn/ykKcXzLtEeeqmK6d+8dqG3oD/cX1mfKH6cD314
j2HdqVyqfaLYnZyQMPEfyvkj1nPZ2zGDp0bzZT+Nm5kfYQLohbZxHxUtVI0sgGFS
YjLrDQ05Q+mgIDLx3rWJhZ74GlbbSTfCWKxrilMOoRgVKBe8AmmnMdac3EBsuP04
xtn8cpcG5+mrBWR5dKnqS4wdlmsJCmKY76iASfTiXVW7wR7/N1QaGAUMKKtRyEW0
TFoBMyJ8tAVRbdWJG8LmQR1n8zHimtxShq111NEXo6u2Pg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:50 2025 by rpki-client