Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38302e302f32332d3234203d3e20323733303838.roa
File:                     3230302e3131342e38302e302f32332d3234203d3e20323733303838.roa (raw, json)
Hash identifier:          Sy7hp8yR+RBUPw+jkEY8bd51kzFr/9CgMhOut8CtCSY=
Subject key identifier:   65:D0:20:3E:B9:3E:B7:03:EA:B7:2C:F8:E5:4B:3A:E8:CF:F6:5B:BA
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       10A75EE6A56F7D53CC7F77A053EA8FC8AACA68FB
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38302e302f32332d3234203d3e20323733303838.roa
Signing time:             Tue 19 Aug 2025 01:40:13 +0000
ROA not before:           Tue 19 Aug 2025 01:35:13 +0000
ROA not after:            Tue 18 Aug 2026 01:40:13 +0000
asID:                     273088
IP address blocks:        200.114.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a7:5e:e6:a5:6f:7d:53:cc:7f:77:a0:53:ea:8f:c8:aa:ca:68:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Aug 19 01:35:13 2025 GMT
            Not After : Aug 18 01:40:13 2026 GMT
        Subject: CN=65D0203EB93EB703EAB72CF8E54B3AE8CFF65BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9b:a5:ca:38:e5:a1:d9:98:8c:67:94:48:63:
                    73:fd:ed:94:2a:c6:c9:3b:d2:86:b6:70:cd:1a:b3:
                    80:77:c1:f9:2e:e4:f3:28:2c:90:22:7c:93:ff:66:
                    0a:5b:ea:ef:a6:c1:d7:dd:8e:3d:a3:e8:61:0e:64:
                    0c:cb:da:33:7d:be:a1:c7:80:b8:a6:01:9f:1a:81:
                    53:ee:08:17:2d:00:43:54:29:32:85:2b:d9:5a:b6:
                    71:1a:57:54:c1:17:b3:04:d3:14:7a:a4:5a:00:57:
                    5c:76:2b:93:7c:17:47:21:9c:52:2f:6b:a0:4f:d8:
                    7d:1e:b9:4e:8c:d1:4d:c9:58:a4:af:34:49:c8:9a:
                    10:83:59:e5:5e:5d:a8:cc:d3:18:b0:d3:e4:58:eb:
                    7a:e0:8c:9c:17:41:ab:34:f4:e4:e8:8d:1f:d3:39:
                    c4:3f:ee:92:30:02:0e:7a:cc:94:89:c3:f0:cf:61:
                    69:94:4d:44:5e:a4:31:21:be:0d:3c:6b:ea:36:ce:
                    c7:bb:a4:e2:d8:34:92:28:f6:1b:23:ce:52:35:27:
                    6d:c9:dc:b9:ad:fe:5c:e6:20:53:43:de:29:0b:57:
                    69:7d:0e:ac:20:cd:24:b4:43:a0:7e:10:49:7f:64:
                    dc:87:fe:24:7a:a7:e4:ae:66:ae:93:ad:dd:98:a7:
                    f9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D0:20:3E:B9:3E:B7:03:EA:B7:2C:F8:E5:4B:3A:E8:CF:F6:5B:BA
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38302e302f32332d3234203d3e20323733303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:64:37:06:d7:ca:24:a1:d7:29:dc:a2:46:16:5d:bc:5c:8f:
         f5:f5:b3:d2:94:0a:e6:fd:82:7d:09:61:97:13:d8:26:64:50:
         80:46:f0:d4:53:a3:78:7c:ff:50:8b:0b:4d:a7:0f:de:2c:ed:
         f8:e6:11:d6:4e:e7:e3:13:e8:42:ce:bf:53:7a:34:96:aa:dc:
         4d:aa:1d:23:4a:d6:bd:d6:92:51:58:0c:25:14:56:a7:a4:39:
         8a:03:c3:a1:42:b8:61:2b:be:89:1e:dd:5a:fa:c9:ad:33:ea:
         07:12:af:ac:e3:c1:ce:bc:97:79:9a:61:87:2e:20:5a:a2:38:
         ab:90:30:55:71:8f:33:3c:6f:5b:10:23:a3:24:c6:8d:a1:65:
         1c:5a:01:ab:43:55:fc:ed:75:45:1e:ec:22:48:d1:16:d3:c4:
         c0:f4:4e:22:4b:30:64:e3:e5:6e:71:ed:ce:aa:2b:6a:3a:7c:
         b5:01:99:ff:65:6d:cf:15:ab:6c:42:e0:60:1c:46:c4:23:c5:
         d5:f1:8c:0c:8b:2f:5d:8c:96:77:6c:1b:98:3e:c0:39:18:f2:
         8d:6f:65:cb:f2:dc:5c:94:bd:5b:d9:e2:51:ee:9c:71:a3:10:
         ad:56:9c:2f:c0:2c:24:66:f4:99:3b:35:e7:55:a7:2c:c8:f4:
         91:b2:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:38:40 2025 by rpki-client