Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3234203d3e203133353739.roa
File:                     3230302e33382e3136302e302f31392d3234203d3e203133353739.roa (raw, json)
Hash identifier:          0v6w86l9+97k5ATQfxTnaAi+R64wl1HaY1Eo06g7m5E=
Subject key identifier:   34:F2:5B:EA:D5:AE:2A:20:6B:39:13:87:3B:57:3D:77:D9:8E:DF:10
Certificate issuer:       /CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
Certificate serial:       66D03878E6E2E11DDC7B7CC4E09C4AD674B77714
Authority key identifier: C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3234203d3e203133353739.roa
Signing time:             Tue 01 Jul 2025 23:24:25 +0000
ROA not before:           Tue 01 Jul 2025 23:19:25 +0000
ROA not after:            Tue 30 Jun 2026 23:24:25 +0000
asID:                     13579
IP address blocks:        200.38.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d0:38:78:e6:e2:e1:1d:dc:7b:7c:c4:e0:9c:4a:d6:74:b7:77:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
        Validity
            Not Before: Jul  1 23:19:25 2025 GMT
            Not After : Jun 30 23:24:25 2026 GMT
        Subject: CN=34F25BEAD5AE2A206B3913873B573D77D98EDF10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:9f:27:5b:4d:c4:11:4b:cf:e6:3e:6e:8a:
                    8b:2d:96:a7:0f:9c:9b:5b:dc:ce:14:53:25:e6:69:
                    53:0b:f6:95:1e:8d:20:51:77:90:03:32:bc:76:b3:
                    11:cc:23:2c:88:40:65:e8:4b:f3:1a:69:0c:13:d6:
                    20:13:04:84:c8:7c:c8:51:1b:18:04:a2:bf:33:6f:
                    cf:6b:fb:9c:a0:1b:2c:17:69:ed:d1:6a:be:07:ef:
                    a0:01:f7:fb:74:e8:27:f6:3a:33:33:f1:b4:e6:1f:
                    0f:d6:76:88:e4:2d:2e:cb:95:9a:0d:c3:12:e8:b5:
                    33:67:f9:89:53:58:57:4f:65:2b:cb:4c:17:c8:c6:
                    b9:79:d1:6c:42:09:06:87:5b:55:01:0f:8e:46:c6:
                    33:25:b6:ab:2d:54:86:dd:9f:97:45:57:74:0d:2f:
                    2b:31:19:50:45:85:64:f0:1e:87:7f:94:84:e5:83:
                    2e:b7:fa:59:dd:d6:de:ab:52:a2:a9:35:4b:2e:5f:
                    14:c8:bb:dd:e2:83:fb:2c:1c:60:4b:65:34:0d:61:
                    1b:3f:de:f4:fc:f0:c2:0a:33:16:ef:cc:75:d1:6a:
                    b0:bb:fb:b7:de:2a:38:76:6b:f3:a7:01:96:01:70:
                    b5:95:96:cf:f5:e9:0e:3a:be:90:bd:94:cd:80:aa:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F2:5B:EA:D5:AE:2A:20:6B:39:13:87:3B:57:3D:77:D9:8E:DF:10
            X509v3 Authority Key Identifier:
                keyid:C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230302e33382e3136302e302f31392d3234203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.38.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:5c:d3:06:fe:8d:ab:03:89:80:34:73:3e:84:8f:9e:81:
         18:63:fa:e5:49:a4:7e:b8:92:af:9b:d7:c1:01:63:89:db:48:
         08:d0:2a:5d:9b:31:76:f1:ec:16:55:c8:2c:e4:75:a4:d0:6a:
         19:0a:47:56:53:ca:cf:7e:ea:60:28:ad:c0:85:bd:e4:4c:6e:
         66:68:b8:5a:3b:5e:8f:fe:5d:d4:10:1c:cb:b7:83:bb:41:13:
         45:37:b0:a7:d0:6a:f5:6f:10:9c:29:4b:c5:e3:9e:e9:8b:00:
         0e:1c:e6:90:e8:e9:c9:5a:73:61:67:42:04:08:59:69:d3:6f:
         fa:37:33:e9:ca:ca:95:26:72:22:5a:4b:63:09:a3:6e:51:dc:
         03:30:0b:4f:01:7a:f1:74:ba:d8:6d:d4:98:d0:a8:4d:b6:6e:
         69:56:15:34:63:f9:75:31:1a:08:52:e3:de:af:86:60:6b:56:
         75:6d:70:4f:2e:f7:74:36:77:1a:fc:80:46:8c:01:56:e6:99:
         50:f4:ca:d2:b3:44:12:84:f8:4d:39:6d:e0:3f:7a:22:85:29:
         0a:fe:e5:8a:fb:0a:18:c3:c9:7a:1d:97:bf:f2:7c:fe:1c:4f:
         96:d8:98:ca:34:50:30:53:5a:46:b3:35:2a:63:9c:85:95:e7:
         69:9d:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:29:43 2025 by rpki-client