Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS7315.roa
File:                     AS7315.roa (raw, json)
Hash identifier:          +Y+oyMklUT5Ot8vlmdqzcPc/Wy6/bLwR2Ipr5IFZMIM=
Subject key identifier:   FF:B1:08:DF:85:12:66:D1:69:C1:90:A7:02:E8:CA:12:A9:36:08:CF
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       522364DDC6EB463D59AABA18912C134A507D2316
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS7315.roa
Signing time:             Tue 03 Jun 2025 17:20:55 +0000
ROA not before:           Tue 03 Jun 2025 17:15:55 +0000
ROA not after:            Tue 02 Jun 2026 17:20:55 +0000
asID:                     7315
IP address blocks:        181.188.200.0/24 maxlen: 24
                          181.188.201.0/24 maxlen: 24
                          186.65.3.0/24 maxlen: 24
                          186.65.19.0/24 maxlen: 24
                          186.65.20.0/24 maxlen: 24
                          186.65.21.0/24 maxlen: 24
                          186.65.35.0/24 maxlen: 24
                          186.65.37.0/24 maxlen: 24
                          186.65.38.0/24 maxlen: 24
                          186.65.39.0/24 maxlen: 24
                          186.65.40.0/24 maxlen: 24
                          186.65.41.0/24 maxlen: 24
                          186.65.52.0/24 maxlen: 24
                          186.65.53.0/24 maxlen: 24
                          186.65.54.0/24 maxlen: 24
                          186.65.55.0/24 maxlen: 24
                          200.7.232.0/24 maxlen: 24
                          200.7.233.0/24 maxlen: 24
                          200.7.234.0/24 maxlen: 24
                          200.7.235.0/24 maxlen: 24
                          200.7.236.0/24 maxlen: 24
                          200.7.246.0/24 maxlen: 24
                          200.7.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:23:64:dd:c6:eb:46:3d:59:aa:ba:18:91:2c:13:4a:50:7d:23:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Jun  3 17:15:55 2025 GMT
            Not After : Jun  2 17:20:55 2026 GMT
        Subject: CN=FFB108DF851266D169C190A702E8CA12A93608CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b5:23:2d:54:96:d6:50:fe:bc:cd:6f:97:29:
                    e1:3d:e1:87:ac:c2:41:e7:fa:b9:9b:a9:3c:1a:99:
                    e7:2a:4a:61:a4:76:e5:af:5b:12:a6:21:4a:a2:12:
                    bf:bb:5d:c5:25:b2:5a:4a:92:fc:a8:8b:2a:04:bd:
                    31:11:79:99:fe:16:9c:1e:69:6f:ac:66:2f:f0:ff:
                    be:b2:b7:f7:ff:65:7f:39:60:d9:23:e8:74:99:0a:
                    03:bb:cd:d9:a5:29:d3:4f:36:ea:1a:77:4c:d4:57:
                    75:16:db:f6:b4:dc:7f:06:cf:e3:a7:30:cd:58:4e:
                    ce:52:b2:c0:20:0b:57:03:99:27:95:1d:e6:e7:ce:
                    6c:11:91:86:32:45:de:fd:6b:ba:94:a7:81:92:93:
                    f2:93:6c:7f:24:c6:21:f1:16:f3:69:0f:cd:8c:40:
                    0f:be:0f:f2:46:45:6f:00:91:d1:73:14:33:67:b8:
                    37:5d:a1:fb:be:dc:c0:75:52:ae:f2:56:05:56:db:
                    80:25:f0:b8:73:81:63:f2:c1:50:d9:df:84:02:85:
                    a8:0c:18:f3:9e:bf:bf:46:ef:f6:47:55:4c:d2:f8:
                    14:8c:51:02:41:6b:f4:4c:84:75:99:bf:2e:07:35:
                    ee:69:09:dc:14:b9:a1:75:63:5b:6c:c8:f4:db:6c:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B1:08:DF:85:12:66:D1:69:C1:90:A7:02:E8:CA:12:A9:36:08:CF
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS7315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.200.0/23
                  186.65.3.0/24
                  186.65.19.0-186.65.21.255
                  186.65.35.0/24
                  186.65.37.0-186.65.41.255
                  186.65.52.0/22
                  200.7.232.0-200.7.236.255
                  200.7.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:10:de:74:eb:54:22:98:55:00:70:4e:1d:57:79:a8:51:47:
         35:20:35:dd:fd:b0:94:65:2e:a9:e2:0b:64:92:e6:ba:56:f2:
         01:18:b1:d6:8c:f3:8d:bd:50:ff:ad:81:78:f4:10:45:c4:6e:
         28:15:24:7e:51:6d:b7:b8:1e:93:1b:15:ee:61:3b:78:10:ee:
         b5:60:a8:87:be:ba:a2:61:3e:1b:6a:3f:46:84:bd:f2:1f:c8:
         73:26:03:61:e7:fe:8d:21:18:dd:4c:ea:5f:61:ec:15:72:c2:
         2e:04:8b:fa:bc:ff:47:9b:0b:43:ce:37:77:32:a5:b2:02:f3:
         15:ef:99:9b:ec:48:f6:72:9c:fd:3c:91:de:26:ac:85:c0:17:
         f9:97:48:fc:87:c8:37:9f:fd:7f:40:dd:9e:c8:99:b0:fd:29:
         3a:03:0b:7b:5e:69:94:11:d1:e5:85:4e:9d:5f:46:fb:32:24:
         08:50:3a:d3:4c:29:97:65:b0:f2:ef:51:35:36:25:a4:ec:ee:
         64:61:85:7c:b8:0e:d4:63:b3:f0:9a:c8:89:df:ec:f7:8f:bf:
         4b:51:03:6d:46:48:a5:51:dd:c5:0e:99:ec:84:6f:bd:5d:b2:
         9d:b9:7d:a7:1a:54:73:29:63:ca:f0:3f:f1:21:95:2a:bd:e8:
         d1:4e:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:41:29 2025 by rpki-client