Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3230392e302f32342d3234203d3e20323733323430.roa
File:                     3230302e3131352e3230392e302f32342d3234203d3e20323733323430.roa (raw, json)
Hash identifier:          S5ylxGBMLk+w7kHE2PZyRtvmvvE4Q1tIfWw7werv+pk=
Subject key identifier:   87:6B:4C:12:D8:33:31:B6:1C:D7:6F:DF:69:BA:B3:CC:94:0C:2B:D6
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       5EF0F339D047A4CDAFD218B1BCE7B9994E44B525
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3230392e302f32342d3234203d3e20323733323430.roa
Signing time:             Thu 12 Jun 2025 16:21:55 +0000
ROA not before:           Thu 12 Jun 2025 16:16:55 +0000
ROA not after:            Thu 11 Jun 2026 16:21:55 +0000
asID:                     273240
IP address blocks:        200.115.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f0:f3:39:d0:47:a4:cd:af:d2:18:b1:bc:e7:b9:99:4e:44:b5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Jun 12 16:16:55 2025 GMT
            Not After : Jun 11 16:21:55 2026 GMT
        Subject: CN=876B4C12D83331B61CD76FDF69BAB3CC940C2BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:dc:86:67:81:09:66:36:a0:5f:f3:02:1d:
                    7d:7c:23:db:89:c8:a8:fb:7d:4b:44:08:90:e2:71:
                    a1:a9:3c:08:e2:d8:89:69:24:c8:5d:c2:ec:92:2d:
                    49:bb:ed:67:bb:8f:80:dc:e2:ac:f9:0f:ab:07:bf:
                    a3:0d:7b:23:a5:56:b9:34:20:85:a5:40:3a:a1:29:
                    f8:11:0e:98:3c:b1:c6:33:34:25:87:20:9b:b4:b8:
                    a7:e5:d6:e4:24:d4:d7:87:e1:75:98:95:51:92:37:
                    84:0c:f4:c2:4c:84:c4:be:44:56:c1:d1:4c:e8:47:
                    6c:8e:53:e3:ca:1b:3a:2a:31:46:76:dd:61:a0:6b:
                    90:5c:fe:b8:38:13:79:de:4a:b4:33:79:d3:fd:df:
                    59:bb:a4:0d:34:c6:43:69:e4:5d:90:dd:c3:47:26:
                    26:d9:5c:17:b7:9e:84:83:09:2a:29:4e:e9:72:6e:
                    11:8b:3b:b9:f6:ff:d9:dd:67:3a:8e:88:08:ba:61:
                    94:74:1c:fb:c0:99:e3:37:91:48:39:f6:f6:00:6e:
                    ce:d4:38:12:3e:e0:3d:b6:ea:b4:3d:79:63:5c:38:
                    08:94:3f:c4:06:96:6e:5a:18:d2:6e:6c:bf:f2:dd:
                    05:41:63:11:26:05:e4:ce:c8:23:17:5f:c0:7c:f5:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:4C:12:D8:33:31:B6:1C:D7:6F:DF:69:BA:B3:CC:94:0C:2B:D6
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3230392e302f32342d3234203d3e20323733323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:7b:35:27:6b:b6:25:ac:37:d6:fa:88:e2:8d:4d:0a:7a:0d:
         29:f3:ac:e4:90:f2:80:3d:ba:02:ef:a3:2e:af:a1:63:55:f0:
         d5:a3:41:b6:cb:e9:7a:10:56:87:67:a3:a5:78:3f:4a:f2:b8:
         25:0c:11:cc:da:d0:8a:4c:2d:2f:75:1e:e4:e6:6b:1a:96:da:
         7d:3a:7f:db:24:ef:4d:bb:eb:e9:bb:4c:12:37:d3:38:bc:05:
         ff:7d:9b:9a:ae:cc:d0:31:81:8f:02:a7:b8:42:c7:d2:2c:ae:
         00:f7:be:58:b8:48:3c:a3:da:df:6a:31:ee:ef:67:c6:b2:31:
         b9:30:41:ba:db:79:0e:24:10:f7:b6:cd:1a:06:a1:74:b0:57:
         8e:06:59:35:41:9f:a1:b6:b3:9c:11:80:10:5e:d6:fc:89:06:
         9c:ab:b0:d1:62:d9:91:83:7c:9e:40:0b:63:e6:e0:63:76:0b:
         f3:6c:9c:35:88:2e:d6:3c:db:0e:56:3c:a4:78:cf:78:7d:18:
         e5:1c:f9:16:e1:93:84:e5:33:95:cb:89:88:01:6d:14:1c:22:
         8d:81:64:3f:a3:bf:ec:98:7b:9e:c9:ef:3e:f0:ba:19:b0:07:
         a7:e9:28:c4:bc:6c:5f:aa:53:6f:55:b5:1e:02:86:d3:65:7b:
         d2:e2:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:11:27 2025 by rpki-client