Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136362e302f32332d3234203d3e203236343236.roa
File:                     3230302e3131352e3136362e302f32332d3234203d3e203236343236.roa (raw, json)
Hash identifier:          o1tDWZ6hrA8YJm7gcG3cLHbttN7SOYxvfPAspI09Blg=
Subject key identifier:   58:8F:8A:96:C9:27:11:13:60:C8:A3:A4:34:48:43:8C:E6:5F:02:29
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       7D2B481B9F8C05E0BA0DBAA027B4796704FB70A7
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136362e302f32332d3234203d3e203236343236.roa
Signing time:             Wed 13 Aug 2025 14:35:37 +0000
ROA not before:           Wed 13 Aug 2025 14:30:37 +0000
ROA not after:            Wed 12 Aug 2026 14:35:37 +0000
asID:                     26426
IP address blocks:        200.115.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2b:48:1b:9f:8c:05:e0:ba:0d:ba:a0:27:b4:79:67:04:fb:70:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:37 2025 GMT
            Not After : Aug 12 14:35:37 2026 GMT
        Subject: CN=588F8A96C927111360C8A3A43448438CE65F0229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:cd:f5:f4:6f:b9:0b:21:e4:6d:a7:a3:9c:
                    aa:74:57:72:1a:1d:0c:ba:91:7c:50:df:3b:15:82:
                    77:cb:60:55:e7:c7:ee:c5:d2:c9:a3:08:9d:49:e5:
                    37:c7:db:9f:03:ad:22:68:fb:dc:c3:bc:b5:13:00:
                    9f:18:c7:01:79:9d:d8:22:b5:e6:ff:5b:db:ae:9f:
                    3f:d3:e6:23:ef:21:2b:ec:7e:38:53:f9:1e:96:3c:
                    27:a0:af:87:9a:a2:06:bd:04:53:d8:50:ab:6a:5f:
                    34:05:b9:0a:90:4d:04:79:4c:bc:94:ba:ce:7e:cd:
                    f0:c4:55:b0:04:b5:40:03:d7:bb:f6:7a:01:27:16:
                    94:11:0c:eb:3b:5a:1b:ea:53:e9:1b:77:d2:4d:6d:
                    75:57:6c:b9:30:7a:3c:60:ce:b6:11:02:58:94:91:
                    a4:51:9d:db:b0:d0:c6:6b:8f:43:22:b3:5f:ba:ae:
                    ca:76:5f:1b:3e:a3:9c:1b:8b:26:64:c4:8a:3a:d5:
                    2f:6e:88:9a:a2:c0:49:3b:51:d5:81:13:f6:f9:8f:
                    26:5a:41:83:1d:20:86:20:43:ee:67:00:7a:86:eb:
                    08:ba:7f:d0:a5:5f:be:ee:ed:68:8c:a0:a9:cc:07:
                    a4:fe:e7:19:d7:aa:2d:ec:04:2e:75:e3:c4:41:0e:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8F:8A:96:C9:27:11:13:60:C8:A3:A4:34:48:43:8C:E6:5F:02:29
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3136362e302f32332d3234203d3e203236343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:b2:89:ff:c8:22:ce:e4:b6:b3:ef:df:8a:43:3f:b1:a5:
         39:39:d4:65:bb:63:41:d7:fc:d0:fd:b9:0f:19:8f:ba:a9:e8:
         09:00:96:3f:37:8b:5d:de:7d:50:cf:a0:5f:b6:44:23:65:4e:
         a8:18:2b:97:b1:70:4b:b6:b4:4f:62:bf:dd:5f:8c:9b:02:b7:
         0e:40:d7:fb:a2:12:be:33:43:fb:dc:98:d5:5a:05:b5:c2:ba:
         3e:f7:44:f9:a8:3a:81:aa:fe:48:6e:71:36:54:db:af:4d:a2:
         5f:04:d9:6b:05:a6:9b:0e:55:6d:9e:71:24:01:68:3e:6c:0f:
         27:38:31:b5:eb:4c:39:d3:34:ae:95:7a:67:fa:15:fd:74:8e:
         5c:5f:87:f3:46:48:cf:87:cc:21:eb:80:0d:97:c3:98:0e:bf:
         60:2a:8c:a0:6f:17:8e:e9:29:5c:0f:7c:14:8b:a0:e8:47:55:
         dc:2d:f2:5c:1a:30:f2:86:6f:19:28:14:86:95:5e:e0:10:63:
         b6:50:b0:ad:84:81:d7:84:f1:2f:bf:9d:6d:36:0a:16:47:10:
         3d:01:bb:b1:92:b1:8f:76:6e:0e:dd:c9:45:0f:0f:3d:d0:fa:
         9d:91:ce:18:5f:45:bb:e4:1e:39:27:e4:ab:ff:46:93:17:65:
         f6:c4:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:30 2025 by rpki-client