Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137332e302f32342d3234203d3e203237393536.roa
File:                     3230302e3131352e3137332e302f32342d3234203d3e203237393536.roa (raw, json)
Hash identifier:          5GhjfzFHR+v/R2Becfi7wA3VaZD2yOl3M9zGKaqFACM=
Subject key identifier:   7D:F2:03:3C:30:0E:9C:97:26:36:CA:C6:0E:6D:8E:DE:6E:D3:2C:6C
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       6F353FF182B645F5E80AFB4251A9F59DCA46722A
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137332e302f32342d3234203d3e203237393536.roa
Signing time:             Wed 13 Aug 2025 14:35:37 +0000
ROA not before:           Wed 13 Aug 2025 14:30:37 +0000
ROA not after:            Wed 12 Aug 2026 14:35:37 +0000
asID:                     27956
IP address blocks:        200.115.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:35:3f:f1:82:b6:45:f5:e8:0a:fb:42:51:a9:f5:9d:ca:46:72:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:37 2025 GMT
            Not After : Aug 12 14:35:37 2026 GMT
        Subject: CN=7DF2033C300E9C972636CAC60E6D8EDE6ED32C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:60:d6:72:f3:77:4c:83:45:8e:c3:b1:11:
                    68:16:59:d6:11:30:56:5c:b7:c0:10:e7:fe:1d:d4:
                    3c:16:83:cf:f8:8f:28:a1:38:ea:8a:13:c0:2a:c7:
                    f2:2c:fc:b4:9c:88:e2:cf:56:63:4a:45:fa:21:35:
                    74:9a:46:8f:00:2a:46:6d:a0:5e:29:21:dd:83:d7:
                    36:0a:9d:76:d9:c0:29:76:65:e0:e7:1e:57:18:12:
                    75:2f:e4:6e:b9:29:1b:aa:e8:e9:34:21:2e:6f:c8:
                    82:69:03:af:67:fa:ef:a0:b4:04:17:bc:15:5b:99:
                    c6:e3:fc:f7:ed:b7:c6:61:3c:55:5f:47:29:66:d0:
                    f0:f9:10:b6:7f:0e:71:b8:d2:3b:01:cd:99:5a:eb:
                    e1:1e:12:fd:d1:5c:64:7f:c4:79:85:92:fc:91:0f:
                    9f:da:0c:d3:43:31:5f:00:16:2d:6d:30:39:8c:15:
                    34:50:2b:f4:0c:26:72:96:16:4d:4c:10:92:ec:4f:
                    53:8d:53:2d:4a:8f:cb:14:f6:93:3e:4c:1d:46:4b:
                    10:24:40:d7:e8:8c:66:a7:9b:c3:83:5a:45:db:2f:
                    59:ea:cd:12:53:dd:4a:77:fd:86:23:d8:60:ee:d0:
                    05:4d:3d:47:a0:b3:86:f2:43:68:c2:34:cd:9e:5f:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F2:03:3C:30:0E:9C:97:26:36:CA:C6:0E:6D:8E:DE:6E:D3:2C:6C
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137332e302f32342d3234203d3e203237393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d2:eb:fa:b9:26:44:e1:01:4d:a9:2e:32:ab:d7:4d:8b:e1:
         80:c7:a4:72:19:74:52:0b:04:95:cd:58:ef:ec:33:0c:bf:0b:
         91:9f:21:a8:3f:33:d3:66:39:ab:c2:d9:b8:9a:3f:7b:de:3f:
         13:8d:5c:f7:8b:ac:39:4b:77:5a:8a:a5:f2:d6:0e:55:44:35:
         b1:76:63:7e:da:43:7a:07:b2:36:41:3a:49:d3:d1:68:a0:19:
         9c:14:e2:a5:01:97:73:1c:31:48:c4:a7:48:d3:73:10:91:cc:
         b7:66:d8:3c:1c:91:7c:e9:a6:51:41:5a:cb:75:95:a9:7d:6f:
         30:f4:56:1d:ab:df:78:76:cc:36:13:53:b7:28:3a:d8:ed:62:
         28:96:01:0c:c5:6f:b4:ba:fd:39:49:70:2b:d4:af:bf:4d:82:
         69:3b:fd:5b:da:92:75:e0:60:72:fb:6a:6f:ed:80:00:4e:c2:
         e5:4b:6d:1e:1b:27:9a:67:36:63:a6:5c:7b:bb:4a:4e:bf:72:
         23:16:03:b5:34:3b:57:31:9b:66:f4:19:39:05:8a:75:69:14:
         93:1d:20:ff:e8:4e:24:4a:cd:0e:68:1f:7e:68:f3:30:ec:11:
         ad:4b:61:5e:b8:c3:f7:6a:95:d2:63:87:27:b4:49:a0:48:9a:
         cc:ff:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:40:58 2025 by rpki-client