Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230362e302f32342d3234203d3e20323632313931.roa
File:                     3230302e3131322e3230362e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          wAlfndzEh9ALe6U/bVv01H+9r+ZJhjH940N5xyLI6eY=
Subject key identifier:   37:95:3D:BE:77:0C:47:0F:EE:18:E6:BF:D7:1D:C6:4C:E1:BB:FB:7A
Certificate issuer:       /CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
Certificate serial:       692E9AC8474C5B7AA4EBD1252255F2E54396A319
Authority key identifier: 85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230362e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 01 Jul 2025 22:10:01 +0000
ROA not before:           Tue 01 Jul 2025 22:05:01 +0000
ROA not after:            Tue 30 Jun 2026 22:10:01 +0000
asID:                     262191
IP address blocks:        200.112.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl
                          rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 00:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2e:9a:c8:47:4c:5b:7a:a4:eb:d1:25:22:55:f2:e5:43:96:a3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
        Validity
            Not Before: Jul  1 22:05:01 2025 GMT
            Not After : Jun 30 22:10:01 2026 GMT
        Subject: CN=37953DBE770C470FEE18E6BFD71DC64CE1BBFB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:ef:63:c0:02:fd:39:bc:99:4f:74:2f:ad:
                    0f:aa:23:9a:a2:50:9c:f6:fd:12:57:24:c5:39:5c:
                    1a:ba:cb:7d:c0:7d:5b:e6:76:d9:c5:e3:1a:9c:90:
                    e3:58:ad:4e:f1:1a:31:3e:57:3d:8b:d9:67:4e:0f:
                    65:82:a4:51:19:8d:7c:b8:f0:84:aa:31:9c:e0:64:
                    e2:19:88:ac:4d:5e:e5:8d:fd:4f:12:23:3d:95:1c:
                    9a:1f:21:f5:b6:73:4a:70:9e:a7:79:33:63:e0:2f:
                    14:ff:28:89:b2:1f:17:d7:3f:cf:45:5d:e1:dc:04:
                    6c:f6:45:26:7a:57:97:71:3b:60:3a:c4:80:d4:60:
                    f9:5f:56:2e:11:de:e1:86:df:8d:f5:44:fb:31:f7:
                    20:64:56:07:89:71:f8:c6:6d:3d:26:35:b7:54:60:
                    e8:98:22:aa:e8:9f:e9:c2:bb:94:a8:32:9c:14:a4:
                    6a:fa:15:bb:09:1b:b5:fe:e9:16:83:ac:85:3f:fb:
                    a8:98:e7:7b:63:52:ac:d9:fe:0b:57:9b:20:f6:fd:
                    07:08:4d:5b:6a:e4:cd:e8:2d:3f:f1:2b:f8:6b:0e:
                    45:9f:48:75:6a:5f:48:f9:0e:2a:55:a8:a4:c7:ba:
                    65:b6:38:97:79:b7:df:97:20:8e:10:7f:49:2b:ad:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:95:3D:BE:77:0C:47:0F:EE:18:E6:BF:D7:1D:C6:4C:E1:BB:FB:7A
            X509v3 Authority Key Identifier:
                keyid:85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3230362e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:fa:d5:8f:aa:48:22:6f:5c:ae:2f:2b:4d:56:b1:a3:0b:69:
         ab:ee:4c:c2:88:55:5e:e7:6f:9d:28:a6:59:4c:24:b1:66:46:
         18:74:8a:1e:18:cb:c4:fb:5b:3d:37:08:41:af:66:0a:78:e7:
         67:6e:25:68:ca:c6:51:78:8e:4b:39:db:cf:b6:69:36:45:48:
         c7:36:79:60:74:0e:9a:30:3b:ff:58:07:28:7b:52:d7:03:fd:
         41:b0:53:54:72:d9:2a:bc:fb:95:d1:fd:7e:d8:25:b1:94:fa:
         d8:69:97:6a:9b:bb:15:7a:04:c4:48:04:04:b2:0e:14:73:bf:
         1b:2e:78:07:5f:46:70:5d:96:dd:99:08:ad:cb:29:14:45:5b:
         c1:0f:92:25:c8:41:6c:fc:d0:6c:a0:db:f7:46:7f:d0:d2:fa:
         96:9a:d1:f9:1b:cf:77:4f:b9:01:a2:bb:a5:96:ed:c7:26:57:
         67:0f:64:97:a5:c4:c4:3b:49:f2:2e:d9:b2:7f:b2:9c:90:01:
         be:f3:16:5a:70:b6:bc:5e:05:45:8d:99:aa:f8:e3:37:42:c2:
         66:55:0f:fe:3e:ca:ed:cc:e1:7f:33:e0:72:70:5d:a4:ff:c9:
         e9:c1:c7:7f:f0:f3:79:a2:69:34:5d:27:57:0f:be:7a:5c:14:
         cf:b4:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:24:44 2025 by rpki-client