Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa
File:                     3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          P041FQTGZ32lSRjHCq6kpQNGIBu5UCXcwrrgIEZtusw=
Subject key identifier:   AD:D3:55:49:E0:AE:2B:A1:1B:79:CE:51:81:C4:50:A2:6C:CA:38:44
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       41E50D0E744F55FE357E60EF02F4693E06DBD854
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa
Signing time:             Wed 13 Aug 2025 14:35:34 +0000
ROA not before:           Wed 13 Aug 2025 14:30:34 +0000
ROA not after:            Wed 12 Aug 2026 14:35:34 +0000
asID:                     11556
IP address blocks:        200.115.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e5:0d:0e:74:4f:55:fe:35:7e:60:ef:02:f4:69:3e:06:db:d8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Aug 13 14:30:34 2025 GMT
            Not After : Aug 12 14:35:34 2026 GMT
        Subject: CN=ADD35549E0AE2BA11B79CE5181C450A26CCA3844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9d:05:b2:a0:6e:7b:8f:3d:81:a6:f4:c1:9b:
                    99:d7:63:c6:80:75:6c:1e:30:7b:3c:bd:64:47:1d:
                    e8:28:7d:b7:1e:02:56:f5:79:aa:8c:e7:4d:12:6b:
                    ef:e3:46:4b:f7:43:ca:fb:b7:dd:24:c9:c8:f8:43:
                    90:5b:c8:b1:2f:f1:27:e8:0b:56:75:db:b5:9a:05:
                    ee:79:82:bb:f5:a4:af:33:9f:da:4e:68:c8:21:b1:
                    48:65:41:71:e2:f9:f3:0e:fa:25:df:8d:b2:e5:bd:
                    47:d4:81:64:ae:d6:95:d4:2f:71:f6:54:f5:9b:ab:
                    d6:d9:80:c0:88:70:ea:ee:c0:52:c9:a2:0f:57:0b:
                    b2:49:4c:49:e3:01:4e:8d:e5:07:e9:81:43:4e:31:
                    ad:1e:9b:33:25:5c:1a:e5:11:a9:a5:42:08:56:a5:
                    65:84:c3:b7:c7:8b:e9:5e:a5:52:cf:d3:18:3c:67:
                    fc:7b:67:d9:a9:c9:1a:d6:64:50:13:20:13:04:a5:
                    e2:ed:bb:c3:ef:37:a8:ec:0e:1b:31:be:e1:59:88:
                    ac:9f:ea:8a:c4:02:ad:f8:82:0e:a2:58:a2:a6:6a:
                    3c:08:af:c7:69:8c:55:29:ff:b7:d9:b1:6d:07:5b:
                    c0:51:dc:fc:0c:04:98:8e:8d:fe:d1:af:07:b2:bd:
                    03:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D3:55:49:E0:AE:2B:A1:1B:79:CE:51:81:C4:50:A2:6C:CA:38:44
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3230302e3131352e3137352e302f32342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:b8:ff:ad:de:b4:4a:d3:ab:2b:cc:86:1b:de:06:b0:a3:
         df:43:28:a4:33:f6:66:d3:ab:74:1b:40:ee:d0:cc:1d:e8:31:
         87:7f:bf:16:42:dc:53:ef:85:47:3b:e3:b6:c8:5f:3f:7f:3b:
         03:13:f9:45:14:89:eb:69:24:6c:c5:4d:94:10:ca:51:b3:b3:
         22:ce:4f:5f:03:4d:10:a7:33:d1:51:2d:17:a9:a4:a6:b5:ea:
         70:1c:20:9f:74:4b:b1:02:10:c1:8d:85:50:e0:8c:9b:8b:45:
         f4:fb:2e:1b:4f:0c:ef:97:ed:bd:37:17:25:14:ef:e4:41:94:
         45:3e:90:15:93:5b:d8:9b:a3:b8:0c:30:8f:e6:73:31:71:2e:
         1b:39:32:db:aa:dd:41:8e:58:0f:e0:85:16:80:c1:fe:2b:12:
         f1:df:10:43:7a:11:14:6d:ba:fc:5d:60:3b:6c:0a:c5:bc:70:
         35:64:2b:4d:1a:f6:14:4b:c7:55:d2:a3:ef:22:e7:30:6f:a1:
         38:85:12:63:fe:9d:2b:44:8c:7d:69:94:e0:59:2a:0f:4e:0d:
         bb:ec:0f:e8:71:ea:ec:a2:e7:76:ba:39:71:b8:ac:c7:08:f8:
         43:32:3e:59:8c:47:8a:07:54:0c:5d:e5:25:b9:e9:66:83:21:
         fe:45:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:21:40 2025 by rpki-client