Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137312e302f32342d3234203d3e203237393536.roa
File:                     3230302e3131352e3137312e302f32342d3234203d3e203237393536.roa (raw, json)
Hash identifier:          byTAVT4iKN7FoZeP4qRd5MW1qYJ0ecF+6KPU6px0Q7Y=
Subject key identifier:   24:52:3E:94:88:D8:D1:B0:27:AB:CD:F1:D0:45:19:DF:41:6E:7B:15
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       6D1CB58DEDE1420DC19F72D52C85A275DE71D3BF
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137312e302f32342d3234203d3e203237393536.roa
Signing time:             Wed 13 Aug 2025 14:35:34 +0000
ROA not before:           Wed 13 Aug 2025 14:30:34 +0000
ROA not after:            Wed 12 Aug 2026 14:35:34 +0000
asID:                     27956
IP address blocks:        200.115.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1c:b5:8d:ed:e1:42:0d:c1:9f:72:d5:2c:85:a2:75:de:71:d3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:34 2025 GMT
            Not After : Aug 12 14:35:34 2026 GMT
        Subject: CN=24523E9488D8D1B027ABCDF1D04519DF416E7B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:3d:4f:d6:9a:6a:45:dd:ac:f1:c3:b2:b4:
                    ee:a6:1b:66:bd:94:68:a0:95:3c:f6:10:31:20:09:
                    7a:93:8c:23:71:7c:ee:4f:f1:22:6b:1b:03:ef:68:
                    67:fa:73:ea:5c:51:1f:b4:76:43:f4:42:31:49:72:
                    72:39:5e:61:d2:5a:77:ef:56:9c:05:9b:40:d2:82:
                    60:f7:81:6d:94:19:3b:35:f5:b8:d7:49:e0:02:d8:
                    b8:32:df:6e:da:03:f9:76:f3:60:23:71:61:81:b2:
                    06:e9:95:ed:9e:79:63:26:70:62:08:f6:6c:5a:1b:
                    ff:a6:cf:6f:48:42:48:f0:a1:3b:06:1e:ea:5e:fb:
                    b5:06:6b:00:81:de:05:18:92:c2:ea:18:2b:48:b0:
                    a7:ad:f7:e1:01:c1:0d:90:5b:4f:ed:c5:25:09:60:
                    73:b6:62:41:09:2f:1b:6b:eb:1e:62:01:0c:ad:54:
                    86:a9:12:39:5e:5f:61:c1:9e:1b:d8:c1:5e:aa:dc:
                    76:7e:67:ef:5a:2f:33:a1:b3:02:7c:16:94:1b:2a:
                    ad:f0:ca:cb:93:e3:64:50:b8:5f:e3:7d:6a:aa:e9:
                    cb:23:73:f7:53:88:3d:93:75:e4:4c:a4:ca:21:04:
                    41:5f:97:d1:78:00:c3:2a:7c:60:de:2f:72:c7:43:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:52:3E:94:88:D8:D1:B0:27:AB:CD:F1:D0:45:19:DF:41:6E:7B:15
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137312e302f32342d3234203d3e203237393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:a2:d3:6d:52:d6:89:9c:a2:00:47:99:75:09:61:ef:6c:22:
         1f:e7:f0:f8:77:66:02:29:e5:7b:e2:b2:74:c6:b4:ce:e5:ac:
         21:ce:4f:0c:8d:3f:02:44:0f:4a:89:08:da:a4:37:5d:08:4e:
         d1:be:42:5a:d5:ca:6d:63:19:4c:c8:e4:b1:82:89:da:4b:8d:
         83:2b:87:34:9a:6b:3b:5d:40:e2:2e:24:de:0f:dc:bb:8c:d8:
         27:b5:27:1e:2f:6d:d7:ff:89:1f:59:31:98:82:17:bf:67:a0:
         7d:eb:37:4c:de:14:9f:d4:41:09:4a:bf:a4:20:42:9f:ec:47:
         58:c8:77:26:36:43:ef:92:40:26:bd:5c:7f:cb:bf:3a:98:47:
         06:c7:f8:fa:a9:8e:8e:51:54:59:4e:eb:ee:15:c9:a9:2b:90:
         57:02:5f:71:8f:81:38:07:7f:a1:e5:0f:16:86:17:e6:af:75:
         56:dd:9c:cf:3d:92:88:e0:50:32:08:b6:ff:b7:97:a0:a5:3d:
         c7:91:5b:72:a7:26:e5:92:3a:01:02:d5:ec:4f:70:30:a2:c3:
         73:92:ca:94:eb:36:1d:3b:42:db:1b:4f:5a:e2:f3:63:ea:4b:
         76:2e:42:56:f6:e2:21:9a:77:2d:7f:24:73:d3:7e:7b:ec:43:
         6e:b0:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:40:41 2025 by rpki-client