Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3232312e302f32342d3234203d3e203431333437.roa
File:                     3230302e31332e3232312e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          uE9/iIRbEM4PfaDr5Ly0BAGWD4BqmRCYua81Hh4LHRo=
Subject key identifier:   EE:8E:0C:60:42:35:2B:0E:65:0D:A8:DE:5B:89:CB:53:B4:38:48:E7
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       560275347A3ACFACC94CB78FC2BAB6F2703C4568
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3232312e302f32342d3234203d3e203431333437.roa
Signing time:             Mon 06 Oct 2025 21:55:01 +0000
ROA not before:           Mon 06 Oct 2025 21:50:01 +0000
ROA not after:            Mon 05 Oct 2026 21:55:01 +0000
asID:                     41347
IP address blocks:        200.13.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:02:75:34:7a:3a:cf:ac:c9:4c:b7:8f:c2:ba:b6:f2:70:3c:45:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Oct  6 21:50:01 2025 GMT
            Not After : Oct  5 21:55:01 2026 GMT
        Subject: CN=EE8E0C6042352B0E650DA8DE5B89CB53B43848E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:68:5a:42:45:5f:fb:52:89:66:59:c9:75:bb:
                    9f:2c:d2:df:47:ec:cc:80:40:26:a6:27:18:27:9f:
                    7c:51:3e:8a:a6:68:ca:25:ad:d5:06:73:bf:84:2e:
                    b0:af:75:64:f7:75:25:45:3e:bb:ee:e3:0c:92:a0:
                    ab:91:6f:b7:82:99:47:1b:1d:da:20:64:44:03:3f:
                    07:ff:a7:36:4e:55:4c:97:ed:25:eb:2e:2e:e0:fb:
                    9b:94:22:c2:81:58:79:aa:35:35:da:31:90:a6:b3:
                    36:a7:44:28:92:58:b2:0e:f2:7e:f0:8d:f7:23:fa:
                    7a:1c:d4:d7:92:72:6f:52:44:6c:cd:d3:63:2e:c4:
                    7e:90:bf:8d:43:2f:15:95:cf:34:95:44:53:7e:c2:
                    e3:fa:ad:b7:a3:81:cb:69:b9:26:c4:fe:ee:14:45:
                    f6:35:fc:cd:cf:e6:6f:70:49:d2:04:c1:c4:d1:fd:
                    ed:f3:52:ba:19:76:54:24:68:68:c2:52:6d:1b:ef:
                    f7:6d:3f:8c:2b:78:85:58:5c:92:9a:41:93:09:08:
                    2c:29:e6:a8:62:62:4c:93:df:10:f6:d7:c5:68:e2:
                    9d:51:cd:62:df:b1:d4:49:2a:4c:c5:c8:24:eb:ce:
                    c9:c5:c1:f4:a4:71:01:82:b0:67:77:4b:d9:f5:84:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8E:0C:60:42:35:2B:0E:65:0D:A8:DE:5B:89:CB:53:B4:38:48:E7
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3232312e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:43:1e:1f:5a:2d:aa:6a:3b:44:9b:ef:92:56:2a:0e:66:
         d1:fa:7c:72:d9:06:4a:83:4c:56:4e:7f:ba:c9:41:72:2c:11:
         e5:d0:e4:e2:14:d5:fc:c5:ad:d6:4e:1c:0b:0d:c0:2f:b3:db:
         44:54:c6:40:b6:11:b9:04:b6:6b:4c:30:f2:8f:00:e0:fb:bb:
         43:b7:4f:7e:99:e4:7f:b8:d6:0a:a8:02:9a:ba:9f:0b:62:c5:
         ba:65:ab:00:7e:df:d5:fb:d2:ea:d9:5d:57:7d:e3:9d:15:92:
         e7:7b:26:0c:25:cd:90:a0:86:95:07:0c:29:fe:a4:5a:76:01:
         52:41:51:83:40:87:9b:3c:97:c4:31:1d:d7:52:b6:4d:e3:ee:
         11:60:6c:ca:33:6c:0d:26:07:4e:de:c4:9e:e3:6c:f7:37:cd:
         78:ad:39:a1:c0:bd:7d:d9:97:c8:85:ba:c3:ac:aa:8c:49:4c:
         b1:1a:8b:cf:8e:ee:ab:e8:45:5e:71:e9:1d:d7:95:6a:64:cf:
         10:7f:dc:db:b3:ce:40:c4:c3:bc:48:15:11:bc:31:7e:3b:b4:
         d3:82:11:8d:b1:c0:31:0b:2d:40:06:86:47:8f:ce:5f:f1:cf:
         97:44:65:68:c2:98:53:24:b9:2b:3c:14:45:48:0a:d4:59:a7:
         5f:07:78:f6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVgJ1NHo6z6zJTLePwrq28nA8RWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFMTlFMkQ0RUU4RjNFQUQwQzE0NjYwQjJBODY0NkFD
OUYyMEFGNTAeFw0yNTEwMDYyMTUwMDFaFw0yNjEwMDUyMTU1MDFaMDMxMTAvBgNV
BAMTKEVFOEUwQzYwNDIzNTJCMEU2NTBEQThERTVCODlDQjUzQjQzODQ4RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnaFpCRV/7UolmWcl1u58s0t9H
7MyAQCamJxgnn3xRPoqmaMolrdUGc7+ELrCvdWT3dSVFPrvu4wySoKuRb7eCmUcb
HdogZEQDPwf/pzZOVUyX7SXrLi7g+5uUIsKBWHmqNTXaMZCmszanRCiSWLIO8n7w
jfcj+noc1NeScm9SRGzN02MuxH6Qv41DLxWVzzSVRFN+wuP6rbejgctpuSbE/u4U
RfY1/M3P5m9wSdIEwcTR/e3zUroZdlQkaGjCUm0b7/dtP4wreIVYXJKaQZMJCCwp
5qhiYkyT3xD218Vo4p1RzWLfsdRJKkzFyCTrzsnFwfSkcQGCsGd3S9n1hEfjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7o4MYEI1Kw5lDajeW4nLU7Q4SOcwHwYDVR0j
BBgwFoAUNuGeLU7o8+rQwUZgsqhkasnyCvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRjdCQTc1MDU1Rjc5OTc1OEYzRjRDRTgxMUJBREJBMjQ5
MUJGMUUzMjM4NEZCQjNBRjhBMzlFN0ZCNTA2QzJCLzAvMzZFMTlFMkQ0RUU4RjNF
QUQwQzE0NjYwQjJBODY0NkFDOUYyMEFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNkUxOUUyRDRFRThGM0VBRDBD
MTQ2NjBCMkE4NjQ2QUM5RjIwQUY1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkY3QkE3NTA1NUY3OTk3NThGM0Y0Q0U4MTFCQURCQTI0OTFCRjFFMzIz
ODRGQkIzQUY4QTM5RTdGQjUwNkMyQi8wLzMyMzAzMDJlMzEzMzJlMzIzMjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMTMzMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgN3TAN
BgkqhkiG9w0BAQsFAAOCAQEAW2FDHh9aLapqO0Sb75JWKg5m0fp8ctkGSoNMVk5/
uslBciwR5dDk4hTV/MWt1k4cCw3AL7PbRFTGQLYRuQS2a0ww8o8A4Pu7Q7dPfpnk
f7jWCqgCmrqfC2LFumWrAH7f1fvS6tldV33jnRWS53smDCXNkKCGlQcMKf6kWnYB
UkFRg0CHmzyXxDEd11K2TePuEWBsyjNsDSYHTt7EnuNs9zfNeK05ocC9fdmXyIW6
w6yqjElMsRqLz47uq+hFXnHpHdeVamTPEH/c27POQMTDvEgVEbwxfju004IRjbHA
MQstQAaGR4/OX/HPl0RlaMKYUyS5KzwURUgK1FmnXwd49g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:22:51 2025 by rpki-client