Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/3230302e3131322e3232342e302f32342d3234203d3e20323734313737.roa
File:                     3230302e3131322e3232342e302f32342d3234203d3e20323734313737.roa (raw, json)
Hash identifier:          8QeSyaH6aQhu8U5tjmG/eHstjmpz8vmiZgq46RiNRm8=
Subject key identifier:   35:F7:2E:6A:99:6C:4A:AE:31:AF:67:2E:E1:00:6B:41:E1:9F:46:A2
Certificate issuer:       /CN=B0DD5D703412D70F06EE23B9D325EBBC109544C7
Certificate serial:       4B2EC0D4E3AF6500A83E8491A8109216A7086CC1
Authority key identifier: B0:DD:5D:70:34:12:D7:0F:06:EE:23:B9:D3:25:EB:BC:10:95:44:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/3230302e3131322e3232342e302f32342d3234203d3e20323734313737.roa
Signing time:             Mon 04 Aug 2025 17:05:00 +0000
ROA not before:           Mon 04 Aug 2025 17:00:00 +0000
ROA not after:            Mon 03 Aug 2026 17:05:00 +0000
asID:                     274177
IP address blocks:        200.112.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2e:c0:d4:e3:af:65:00:a8:3e:84:91:a8:10:92:16:a7:08:6c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DD5D703412D70F06EE23B9D325EBBC109544C7
        Validity
            Not Before: Aug  4 17:00:00 2025 GMT
            Not After : Aug  3 17:05:00 2026 GMT
        Subject: CN=35F72E6A996C4AAE31AF672EE1006B41E19F46A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:7a:4b:6f:30:ac:56:d9:f3:86:dd:98:c6:
                    f0:17:06:e1:dc:e6:95:52:ce:0a:10:bf:d8:ab:62:
                    ca:d8:98:67:52:51:e2:62:e9:32:52:c8:d4:6b:87:
                    c2:81:31:27:4c:0e:7a:b9:58:9e:bb:f5:da:f7:8d:
                    f4:38:c5:d4:cd:57:fb:54:f5:44:25:f2:8b:f8:47:
                    80:33:a9:19:1f:36:f7:04:c8:a0:dd:8c:14:99:e5:
                    07:6a:1e:8a:fd:bf:db:89:18:3c:0a:67:8f:9c:1c:
                    f1:70:9a:d7:da:66:25:5f:d2:cf:57:90:82:ae:26:
                    44:76:08:b7:49:26:87:94:04:cc:c6:c8:17:5b:54:
                    c0:1a:c8:4b:5b:6e:30:9f:b4:dc:04:0b:40:a1:20:
                    b3:64:e5:23:22:fb:1d:44:98:62:9d:50:16:4b:4b:
                    22:98:94:47:9d:02:41:24:7e:af:1d:0c:6e:40:13:
                    10:25:14:f5:ab:bc:68:62:a1:e5:42:4e:cd:18:82:
                    88:6f:0c:cb:76:65:5e:be:3b:39:48:92:ea:f8:ec:
                    0b:c3:30:7a:1f:43:2c:6d:b3:b5:21:c4:db:6f:41:
                    21:a3:e4:8f:54:21:62:5b:b7:af:b0:10:c9:a6:a6:
                    84:f7:4d:c2:c6:11:c7:d8:b2:de:70:a6:65:45:00:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F7:2E:6A:99:6C:4A:AE:31:AF:67:2E:E1:00:6B:41:E1:9F:46:A2
            X509v3 Authority Key Identifier:
                keyid:B0:DD:5D:70:34:12:D7:0F:06:EE:23:B9:D3:25:EB:BC:10:95:44:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0DD5D703412D70F06EE23B9D325EBBC109544C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/064CBDA73F1A6E379B8CAB7A9FDE177CBD70DB9DB282ACF45AD5B27E3DAB3B3E/0/3230302e3131322e3232342e302f32342d3234203d3e20323734313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:65:71:e3:dc:0b:2a:9f:52:85:8c:2d:c0:f0:7f:15:a9:a5:
         70:88:ae:52:40:f9:c7:8a:de:9e:22:04:14:71:3a:0c:55:b0:
         c8:99:55:88:6f:33:4c:ed:04:04:f1:d6:20:f2:ad:ff:59:00:
         aa:c9:3d:c4:29:d6:df:23:36:a5:36:78:bd:50:a0:5d:6a:0b:
         72:59:11:cf:48:25:17:a3:8a:04:72:da:0e:3b:2a:ee:59:71:
         95:51:67:fe:97:4c:7c:d8:d0:0c:b2:5c:3c:60:fc:19:8d:31:
         15:bf:59:62:e3:ec:db:c0:72:f4:19:41:75:4c:e0:17:ba:e7:
         96:7e:ac:5a:24:40:ec:5b:ab:f2:d6:4e:05:70:f1:28:fe:ec:
         08:b5:f7:99:b2:f9:4e:c9:03:33:68:24:1a:d5:65:0b:08:de:
         10:5d:0c:bd:6d:45:4e:9e:7b:86:59:43:bf:e9:c4:d7:0a:2c:
         2c:73:fa:a4:64:08:b9:55:a8:5e:51:e7:34:57:0e:1c:0a:5a:
         2c:ac:cf:44:7c:55:26:37:7a:b3:c6:82:7c:7e:13:3b:d4:b1:
         89:a2:97:99:54:2d:4c:42:51:2f:c5:dd:cc:c4:aa:08:86:25:
         2c:73:dc:19:ba:6a:17:d8:ea:99:9b:ae:b7:c5:17:d9:48:27:
         1c:d6:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:41:40 2025 by rpki-client