Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230362e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3230362e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          fvWy3g8BpaLuF4GB8doa47HJddNi4YovvbLV8TNnfpw=
Subject key identifier:   B8:92:25:60:B3:F8:21:CC:AD:8E:DE:76:C7:F8:55:38:88:AA:68:64
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       429BE89CF55B600A16D630ED88C72CB6661AB1D2
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230362e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 06 Oct 2025 21:55:06 +0000
ROA not before:           Mon 06 Oct 2025 21:50:06 +0000
ROA not after:            Mon 05 Oct 2026 21:55:06 +0000
asID:                     41347
IP address blocks:        200.13.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9b:e8:9c:f5:5b:60:0a:16:d6:30:ed:88:c7:2c:b6:66:1a:b1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Oct  6 21:50:06 2025 GMT
            Not After : Oct  5 21:55:06 2026 GMT
        Subject: CN=B8922560B3F821CCAD8EDE76C7F8553888AA6864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:73:7c:2c:33:b6:53:89:56:b0:bf:ff:31:
                    3d:b2:48:3a:7e:22:67:2e:ad:5f:79:8f:37:11:e9:
                    0f:28:07:62:49:07:3e:f9:23:f7:65:de:c3:3f:7b:
                    02:d1:f7:c0:ff:b1:ab:10:9b:b8:45:ef:a1:88:cf:
                    00:73:fa:ec:de:b2:a9:8f:d8:e8:3c:9b:60:35:ff:
                    04:47:78:68:61:f8:85:b6:8a:96:a0:05:24:82:0e:
                    30:6d:13:87:1e:91:04:1e:58:dc:4e:ae:90:db:db:
                    2d:cb:5f:65:05:f5:a1:b0:7f:7e:dd:4a:50:77:fe:
                    80:c4:4e:20:6a:10:1c:34:94:37:3a:5c:ba:7f:e2:
                    c7:2a:ad:e1:2b:a0:42:c6:89:27:39:79:19:78:30:
                    3f:17:3a:59:1e:cd:4f:27:21:0a:58:b5:f0:f5:97:
                    4c:f4:e6:49:41:89:2a:6c:0a:d7:96:e1:be:3c:c0:
                    11:c7:b0:b5:d4:be:4b:9f:b5:e2:3d:dd:aa:9e:40:
                    d2:f0:a7:9d:c7:ac:a3:14:0a:5d:06:f6:2f:72:0b:
                    c1:7d:4c:8e:d7:a8:57:8e:44:6d:f2:86:c7:83:3d:
                    8e:ce:0c:c1:5d:e1:1f:ce:cb:57:b3:4d:d1:3c:d6:
                    77:9f:99:16:fc:37:c5:dc:8d:0f:5e:cd:79:49:96:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:92:25:60:B3:F8:21:CC:AD:8E:DE:76:C7:F8:55:38:88:AA:68:64
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3230362e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:5f:e8:6e:03:20:93:09:23:65:e9:15:2f:b3:8c:ea:b7:07:
         60:48:07:04:e5:5d:30:ed:22:cf:1d:52:b6:e7:46:e4:89:57:
         2b:0e:45:61:6b:6a:9f:7e:e4:15:eb:f6:d8:b4:a8:9e:ed:e0:
         95:82:6d:95:7c:5f:44:6d:25:9a:4e:84:a6:d5:6f:b9:90:36:
         41:29:ce:35:f5:06:0f:a6:b6:81:68:99:08:5d:e2:0a:cb:31:
         92:03:48:c8:97:88:fb:8d:2e:bb:d4:2e:33:cf:63:98:d8:53:
         ed:73:03:30:5b:90:19:ed:e7:64:1e:cf:ca:ea:f8:32:ae:22:
         e3:8c:8d:25:8e:a8:c5:4b:54:78:c3:29:f2:ca:3f:eb:04:7c:
         82:34:d1:c3:ab:26:87:9e:a2:af:4f:27:ca:0d:3b:c3:78:b6:
         c4:7f:d6:ef:2f:a7:14:47:72:97:4f:8a:19:12:f4:f5:9c:04:
         11:f9:3e:c5:cc:a7:71:31:2c:8d:81:e5:ab:de:f0:47:92:cf:
         2f:55:bd:56:bd:14:f0:6e:01:8f:d5:15:7a:3c:4c:22:99:98:
         c0:d7:ef:23:da:23:76:a7:9b:3f:4e:d4:0c:5f:90:e1:42:30:
         3e:87:0a:cf:88:91:6d:96:26:93:05:4a:d9:99:c5:fa:29:e6:
         4c:da:ca:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:51 2025 by rpki-client