Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa
File:                     3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          PNP/U8PfxEAgMJHKB6/3Q9bnOlxfFac+r6EwEZl2lgY=
Subject key identifier:   B3:02:50:8A:50:FD:0B:0F:83:8A:DA:2C:16:A3:8D:89:4F:83:01:05
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       61A57DAD5F39FBA6245B1B3BF2F3669F7E5B125D
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa
Signing time:             Wed 13 Aug 2025 14:35:38 +0000
ROA not before:           Wed 13 Aug 2025 14:30:38 +0000
ROA not after:            Wed 12 Aug 2026 14:35:38 +0000
asID:                     11556
IP address blocks:        200.115.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a5:7d:ad:5f:39:fb:a6:24:5b:1b:3b:f2:f3:66:9f:7e:5b:12:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:38 2025 GMT
            Not After : Aug 12 14:35:38 2026 GMT
        Subject: CN=B302508A50FD0B0F838ADA2C16A38D894F830105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:a9:03:8e:58:88:30:c1:bb:a4:5a:8d:8b:
                    4b:1f:23:f8:90:b7:e3:29:46:60:9e:57:d4:8a:d4:
                    43:8c:9c:c0:25:d7:c1:84:15:74:99:de:ad:23:cc:
                    9a:e3:e9:9b:b1:98:4d:41:8c:81:0e:11:a5:13:19:
                    1e:a3:37:a6:8c:98:1c:77:9d:8e:68:c7:44:4a:e1:
                    39:a7:1f:39:02:0b:5c:88:66:3b:6d:8c:44:4b:71:
                    04:f2:c5:23:56:50:a3:ac:03:32:ce:d3:84:51:a5:
                    e0:2d:6b:88:dd:b0:99:fa:1e:95:7c:4c:35:61:56:
                    2f:6a:d9:0f:25:9e:15:32:de:50:ba:22:7a:05:d0:
                    0f:22:78:ac:09:d2:9d:1a:3a:f6:7e:0a:89:8c:d2:
                    d3:24:5c:5a:9f:26:e5:e4:1f:af:85:7c:63:e6:ad:
                    5e:8c:25:b1:ae:3f:51:4c:a2:10:1b:36:e1:d6:3c:
                    21:98:6a:f6:69:73:4a:e5:67:92:c4:f3:07:a2:35:
                    25:e6:ed:84:c6:e6:53:2a:c2:bd:ba:1d:52:75:86:
                    47:16:3d:72:ad:05:44:e4:00:be:d4:f9:29:93:58:
                    c3:5d:55:e2:fc:cd:b1:68:c7:77:04:fa:27:fc:8d:
                    b7:fe:96:f8:a7:66:cc:3f:7b:ab:49:85:f0:91:c8:
                    ac:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:50:8A:50:FD:0B:0F:83:8A:DA:2C:16:A3:8D:89:4F:83:01:05
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136342e302f32342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:0e:57:a3:14:84:8f:ee:8b:55:b7:76:0f:42:b0:53:7e:36:
         0e:77:63:d6:99:8f:c9:a9:7b:dd:40:c2:f5:6c:da:d1:55:34:
         6f:66:9b:cb:b6:eb:16:a7:ff:1f:34:58:fd:7d:61:24:bd:07:
         69:14:96:84:24:26:96:a0:5c:fd:55:aa:dc:17:84:85:4d:93:
         f9:f8:12:51:bb:82:cc:ad:f7:d0:eb:09:82:8a:a8:81:a3:e0:
         a2:41:0a:20:15:46:7b:15:52:05:97:74:92:2e:9d:b1:0e:32:
         4a:a4:81:3b:9c:b7:a8:a7:aa:36:da:fe:ac:b4:b4:fe:b8:86:
         8c:a1:c1:df:0d:c4:a6:c3:9d:0e:27:e6:39:5f:d4:c8:f2:bd:
         d5:15:ab:8d:42:6c:b3:e8:f8:f7:ee:9b:a7:85:1f:91:76:c6:
         43:21:b2:12:ed:a7:8a:81:c8:9f:a4:30:36:1f:b5:2e:44:9b:
         59:69:31:c2:4c:ef:c4:3e:66:e4:98:96:9f:42:67:05:cc:ab:
         04:fa:58:94:d2:c9:c8:bc:48:60:56:7c:ba:2e:1c:cb:39:d6:
         d0:11:fe:a4:11:62:10:b9:85:b4:9f:2e:c6:9e:6b:77:93:98:
         3d:f9:67:8a:70:91:c4:34:a4:cb:00:79:71:9c:3e:ce:76:0c:
         9b:1c:a7:bb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYaV9rV85+6YkWxs78vNmn35bEl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIwRkU4QTZFMzUyQzlDOUVDOUI0QzdDRkZGRjc3QjMy
MzkzNkMxNDAeFw0yNTA4MTMxNDMwMzhaFw0yNjA4MTIxNDM1MzhaMDMxMTAvBgNV
BAMTKEIzMDI1MDhBNTBGRDBCMEY4MzhBREEyQzE2QTM4RDg5NEY4MzAxMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgLKkDjliIMMG7pFqNi0sfI/iQ
t+MpRmCeV9SK1EOMnMAl18GEFXSZ3q0jzJrj6ZuxmE1BjIEOEaUTGR6jN6aMmBx3
nY5ox0RK4TmnHzkCC1yIZjttjERLcQTyxSNWUKOsAzLO04RRpeAta4jdsJn6HpV8
TDVhVi9q2Q8lnhUy3lC6InoF0A8ieKwJ0p0aOvZ+ComM0tMkXFqfJuXkH6+FfGPm
rV6MJbGuP1FMohAbNuHWPCGYavZpc0rlZ5LE8weiNSXm7YTG5lMqwr26HVJ1hkcW
PXKtBUTkAL7U+SmTWMNdVeL8zbFox3cE+if8jbf+lvinZsw/e6tJhfCRyKytAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUswJQilD9Cw+DitosFqONiU+DAQUwHwYDVR0j
BBgwFoAUog/opuNSycnsm0x8//93syOTbBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QjMzOTE2NUZDMjkyQUM5RDEzMjZEQ0E3OUIwNUYxN0Qz
OUY4Nzg1MDVDRjMxNkJCNzA2NTA2RjBBQUJERkY1LzAvQTIwRkU4QTZFMzUyQzlD
OUVDOUI0QzdDRkZGRjc3QjMyMzkzNkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMjBGRThBNkUzNTJDOUM5RUM5
QjRDN0NGRkZGNzdCMzIzOTM2QzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUIzMzkxNjVGQzI5MkFDOUQxMzI2RENBNzlCMDVGMTdEMzlGODc4NTA1
Q0YzMTZCQjcwNjUwNkYwQUFCREZGNS8wLzMyMzAzMDJlMzEzMTM1MmUzMTM2MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMxMzUzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHOk
MA0GCSqGSIb3DQEBCwUAA4IBAQBNDlejFISP7otVt3YPQrBTfjYOd2PWmY/JqXvd
QML1bNrRVTRvZpvLtusWp/8fNFj9fWEkvQdpFJaEJCaWoFz9VarcF4SFTZP5+BJR
u4LMrffQ6wmCiqiBo+CiQQogFUZ7FVIFl3SSLp2xDjJKpIE7nLeop6o22v6stLT+
uIaMocHfDcSmw50OJ+Y5X9TI8r3VFauNQmyz6Pj37punhR+RdsZDIbIS7aeKgcif
pDA2H7UuRJtZaTHCTO/EPmbkmJafQmcFzKsE+liU0snIvEhgVny6LhzLOdbQEf6k
EWIQuYW0ny7Gnmt3k5g9+WeKcJHENKTLAHlxnD7OdgybHKe7
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:54:01 2025 by rpki-client