Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa
File:                     3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa (raw, json)
Hash identifier:          1gfYkrO34UI3aIJli8CjH9RLmZn9gPBgIAnsuqkgfsk=
Subject key identifier:   78:8C:BC:8F:AF:7D:70:2D:34:F9:64:33:C9:B3:38:27:F1:B4:86:88
Certificate issuer:       /CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
Certificate serial:       1C346448BA0837618C0F8F06DC6EDD59A9F07901
Authority key identifier: 93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa
Signing time:             Wed 22 Oct 2025 18:50:45 +0000
ROA not before:           Wed 22 Oct 2025 18:45:45 +0000
ROA not after:            Wed 21 Oct 2026 18:50:45 +0000
asID:                     273942
IP address blocks:        200.107.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:34:64:48:ba:08:37:61:8c:0f:8f:06:dc:6e:dd:59:a9:f0:79:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
        Validity
            Not Before: Oct 22 18:45:45 2025 GMT
            Not After : Oct 21 18:50:45 2026 GMT
        Subject: CN=788CBC8FAF7D702D34F96433C9B33827F1B48688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:05:e5:29:6f:84:fe:9d:bf:3b:d5:8b:9b:
                    9e:37:2d:65:d1:cf:68:d7:74:83:97:48:df:93:b7:
                    b8:ce:6d:41:08:b9:49:ab:25:82:b6:6c:bf:b5:ec:
                    90:48:ef:68:7f:e5:49:53:23:17:2e:17:36:c5:75:
                    82:21:9b:6a:b2:ce:4f:ac:3a:78:ef:49:fb:76:84:
                    22:56:45:90:5d:4c:b9:da:dd:0a:ea:c1:ed:1e:ef:
                    5a:02:bc:43:7a:f9:dd:ae:d2:a5:e9:d6:28:cd:1e:
                    7c:27:15:64:1d:a0:6b:28:45:29:91:f6:3a:9c:9b:
                    9e:9a:c5:37:68:4c:6e:03:62:41:f4:6a:86:dc:8c:
                    32:ad:3d:cb:37:dd:c6:2f:c3:bf:1c:9f:d9:c1:87:
                    28:40:92:15:0b:64:80:7b:27:d7:c0:1f:ba:ff:02:
                    ba:54:38:70:4e:5e:db:e3:95:ad:98:1c:84:e6:4a:
                    37:ef:a2:2a:2e:67:98:7e:ce:a7:94:65:c7:70:e1:
                    e0:90:6e:5e:88:6a:94:bf:ad:7f:9d:e7:9f:a5:25:
                    a9:09:2b:93:83:fe:fb:f7:3d:a6:b0:de:c0:fd:fa:
                    7c:cc:0c:fb:11:54:a3:d0:04:0d:74:42:1e:be:ad:
                    b8:6e:6a:4e:95:ec:20:9c:b3:f5:38:46:fd:d4:d3:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8C:BC:8F:AF:7D:70:2D:34:F9:64:33:C9:B3:38:27:F1:B4:86:88
            X509v3 Authority Key Identifier:
                keyid:93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32322d3232203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:5d:72:e7:6c:c6:73:a1:dc:c7:c0:87:e3:0a:9f:67:aa:c0:
         19:1d:e4:47:3e:b1:07:5b:28:86:3f:1d:94:7a:4c:76:ae:6a:
         fe:ba:b0:72:0e:9f:dd:ae:3c:6f:c0:1d:36:22:2c:80:63:ea:
         2c:7b:db:c7:48:92:a5:10:4c:a8:a6:88:7b:5d:d1:07:eb:c4:
         f0:0b:cc:5b:03:8d:a0:9c:61:68:51:a7:a3:c3:ac:40:f9:e1:
         1e:c8:1e:e3:32:86:6b:6f:90:0a:8c:5d:2c:2b:52:51:9a:40:
         21:c9:eb:08:73:b4:c0:f1:02:18:65:7b:76:84:e4:f7:b8:5e:
         e8:0b:2f:7a:50:f8:60:84:03:4a:f3:22:33:2e:90:84:d9:0c:
         99:29:92:25:bd:12:87:b3:4a:cf:c1:bd:3a:b4:94:de:56:44:
         15:54:d6:09:bd:63:c5:ea:4a:f1:26:fa:44:44:88:28:ee:1c:
         16:9d:9d:55:1d:c8:73:36:33:29:46:4e:37:e7:b4:d1:e2:a8:
         cb:a0:b6:fa:6c:59:de:ae:8e:58:8e:08:d2:78:d9:b6:72:40:
         31:9b:c5:f9:b1:e5:7d:13:09:fa:34:db:b9:c4:26:2f:7f:50:
         1f:2c:c2:4d:97:f4:f2:3d:49:04:cc:fd:ec:87:d6:7d:08:87:
         83:38:1c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:50:03 2025 by rpki-client