Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231302e302f32342d3234203d3e20323733323430.roa
File:                     3230302e3131352e3231302e302f32342d3234203d3e20323733323430.roa (raw, json)
Hash identifier:          lNv5MZcsmTJO5fLnJIudiAVfT2Va7PZ3fXSz5qKVnqA=
Subject key identifier:   9A:22:30:41:0A:C0:99:C7:F8:29:2B:7C:F6:FF:19:80:0E:DB:CC:8F
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       20C540C2E74C41262B27C4D4683B3F0077F4D9EE
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231302e302f32342d3234203d3e20323733323430.roa
Signing time:             Thu 12 Jun 2025 16:21:56 +0000
ROA not before:           Thu 12 Jun 2025 16:16:56 +0000
ROA not after:            Thu 11 Jun 2026 16:21:56 +0000
asID:                     273240
IP address blocks:        200.115.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:40:c2:e7:4c:41:26:2b:27:c4:d4:68:3b:3f:00:77:f4:d9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Jun 12 16:16:56 2025 GMT
            Not After : Jun 11 16:21:56 2026 GMT
        Subject: CN=9A2230410AC099C7F8292B7CF6FF19800EDBCC8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:66:6d:ec:be:7c:2d:d8:f1:8d:eb:36:78:
                    6a:2f:3e:86:f9:52:93:12:a7:d2:83:04:52:77:1b:
                    39:79:81:fc:1e:4e:da:62:b2:a9:e1:6b:88:86:f3:
                    2a:86:68:f2:0b:5b:c9:81:ca:27:53:d5:9d:55:d1:
                    a7:4f:40:98:94:2e:30:1b:ba:bf:09:b0:80:5c:62:
                    13:aa:9b:c8:6c:26:74:62:4d:97:32:b5:f2:55:1a:
                    d9:a5:87:d0:05:c5:08:07:27:14:00:12:06:33:c2:
                    e4:7c:42:1f:60:a6:2d:6c:46:1e:eb:fb:d6:e6:8d:
                    20:a6:38:00:ca:bf:d1:58:fe:4d:18:a7:23:9c:a6:
                    1d:98:16:68:12:41:39:05:4a:ea:73:b6:67:1f:1f:
                    46:b9:b5:4a:bc:ce:92:55:de:4f:1d:ec:84:0e:f7:
                    b1:a0:cb:a5:5c:6e:96:e5:d1:b2:19:f4:e9:05:92:
                    8e:b4:80:98:cb:ad:a1:6b:6e:a8:40:18:73:bf:c1:
                    cd:50:db:b4:c0:e2:4c:cc:75:e1:63:ce:b4:53:cb:
                    f4:50:af:e6:8f:1d:50:dd:99:20:fb:78:ff:2e:ea:
                    59:36:9a:97:44:10:16:39:3e:31:6e:04:a5:7f:23:
                    3d:64:93:11:2d:99:1d:c5:12:70:9e:59:4a:4e:24:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:22:30:41:0A:C0:99:C7:F8:29:2B:7C:F6:FF:19:80:0E:DB:CC:8F
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231302e302f32342d3234203d3e20323733323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:98:73:f4:29:f5:16:a2:0f:0c:65:38:69:2f:36:80:78:66:
         78:af:95:36:78:27:b8:19:26:00:be:58:25:16:b5:1e:f1:b0:
         9a:28:bc:79:d7:a1:03:d3:d2:c6:6f:23:2e:17:95:ca:36:3e:
         41:5e:36:6d:05:a9:58:38:26:e1:69:fc:51:5a:3c:41:37:25:
         e9:7c:ad:26:bf:8b:19:7a:ee:53:af:17:3f:29:70:14:59:95:
         df:98:11:b2:c2:a3:35:79:9f:d9:76:83:d0:db:e7:94:7e:9a:
         40:f6:26:af:3c:1e:fa:dd:c0:be:e6:4e:37:42:fc:46:9a:71:
         90:36:c6:90:24:10:38:f3:b9:e6:4f:05:ed:5c:b6:e8:38:c8:
         56:eb:bc:7f:5b:e9:19:c5:5a:eb:db:12:a5:f3:97:18:6f:3e:
         73:f3:dd:22:d8:63:e2:f5:1b:23:9a:a7:09:e9:0f:98:9e:d7:
         c2:b7:85:46:0a:1f:d6:b1:46:ee:d8:ef:d3:a4:f1:67:c6:eb:
         7d:fd:a3:5a:d9:ee:91:7d:10:da:f2:91:b4:44:7d:84:e7:05:
         48:54:c4:0b:34:c1:c7:25:ac:75:8c:5b:e0:58:5c:69:e1:ed:
         0b:fd:e0:b4:3e:6f:cc:2f:7c:6d:14:38:ae:74:0a:cc:c6:c0:
         dd:0c:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:10:35 2025 by rpki-client