Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230302e302f32342d3234203d3e20323632313931.roa
File:                     3230302e3131322e3230302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          mYp14jaEq4lRa+q5jr3SnPqtnk2USHGpVhurew8QJFo=
Subject key identifier:   7B:F0:F7:AF:6E:35:2F:A6:8D:1E:F9:5E:BB:46:50:D9:72:09:FD:E1
Certificate issuer:       /CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
Certificate serial:       5CFD593E0085FE3C1DB435A22C92F557E0BA1863
Authority key identifier: 85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230302e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 01 Jul 2025 22:10:01 +0000
ROA not before:           Tue 01 Jul 2025 22:05:01 +0000
ROA not after:            Tue 30 Jun 2026 22:10:01 +0000
asID:                     262191
IP address blocks:        200.112.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl
                          rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 00:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fd:59:3e:00:85:fe:3c:1d:b4:35:a2:2c:92:f5:57:e0:ba:18:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
        Validity
            Not Before: Jul  1 22:05:01 2025 GMT
            Not After : Jun 30 22:10:01 2026 GMT
        Subject: CN=7BF0F7AF6E352FA68D1EF95EBB4650D97209FDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:87:ba:04:06:6f:99:64:65:79:cb:70:31:
                    d7:a4:f9:0f:2f:86:d3:5d:a1:28:0a:48:87:80:7d:
                    9e:ec:e6:fc:95:c9:be:e7:6c:c7:23:f6:b8:50:85:
                    56:23:94:ef:c4:06:b3:f2:a8:f2:77:eb:cb:b0:ab:
                    63:68:2b:3b:81:d8:35:ea:3d:ba:67:d9:db:c0:64:
                    d3:42:7a:50:f1:cb:b8:17:8c:83:99:2a:1a:78:5f:
                    c3:95:6c:7e:a5:b8:65:36:a4:6f:8e:0e:aa:47:eb:
                    6d:ee:ae:eb:d8:76:07:df:20:6e:52:c2:e1:ce:24:
                    3a:1d:f9:55:10:16:23:bb:6f:a4:8a:31:16:1d:c0:
                    54:64:12:b3:f1:32:5e:70:fc:e9:f2:94:aa:57:ba:
                    43:46:24:33:db:db:2e:83:ba:e0:ac:98:12:c8:5e:
                    57:c5:4c:e0:fd:bc:1b:50:38:c0:03:99:ec:b2:2a:
                    c4:0a:72:54:d2:a0:0b:98:57:9a:fb:7d:04:8a:50:
                    3c:bd:0c:ae:5e:26:15:ed:36:1f:42:6d:3d:21:87:
                    c1:b0:1f:3f:48:20:35:d1:04:5d:30:0e:27:25:30:
                    23:38:22:e0:f4:41:c6:97:df:61:e0:af:39:95:78:
                    6a:21:54:58:e7:62:9f:d8:53:3e:3e:5d:56:fe:0a:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F0:F7:AF:6E:35:2F:A6:8D:1E:F9:5E:BB:46:50:D9:72:09:FD:E1
            X509v3 Authority Key Identifier:
                keyid:85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:93:a2:01:61:f3:65:0c:21:5a:4f:c9:02:14:9d:f6:42:02:
         b5:b9:ec:38:12:51:69:f5:37:f5:82:ab:2c:f6:6a:00:d2:55:
         e6:df:61:91:92:b3:54:2a:b2:63:f9:e5:d8:f2:cb:85:89:14:
         91:4e:20:25:fa:fc:11:12:ba:ea:29:93:da:a8:00:c6:89:74:
         91:cf:a6:9a:1e:6e:ee:c4:24:21:74:b7:ad:3c:7e:39:74:8f:
         55:ec:69:02:68:fc:29:d7:1c:78:32:f6:fb:d8:22:07:ba:ad:
         00:29:d4:81:cd:26:49:7d:ca:dc:30:cc:5b:b4:66:41:c7:a3:
         c6:86:b0:51:2e:73:5d:7b:69:60:13:a6:4d:e7:51:af:b2:b6:
         63:78:80:0d:88:66:a2:5d:b6:6c:9b:4e:16:e2:02:13:3a:4d:
         c7:54:d7:7c:75:20:1d:a0:9b:9d:7e:93:ef:33:9a:7d:de:16:
         16:bb:d2:b7:ae:c4:a1:86:35:e1:da:a8:86:fc:62:30:ee:03:
         e3:b3:32:a3:fc:47:37:04:e5:88:93:d2:9b:c1:80:42:23:62:
         9b:70:96:1a:14:eb:1c:f7:3b:a8:de:9e:49:ff:94:2e:bb:cd:
         57:d1:31:fa:0b:86:29:57:3e:cb:04:81:09:99:a9:46:ff:c0:
         46:6a:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:25:26 2025 by rpki-client