Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38312e302f32342d3234203d3e20323733303838.roa
File:                     3230302e3131342e38312e302f32342d3234203d3e20323733303838.roa (raw, json)
Hash identifier:          KfxO7ALNJtToDEFN1jAZwF9wwn5WvB2CfJkOm0Ik8jY=
Subject key identifier:   37:86:F0:24:C5:E4:8A:49:E0:B0:C4:22:55:BC:D4:D1:78:04:02:56
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       59FC40799C8336592665F4529F38E7608B354B56
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38312e302f32342d3234203d3e20323733303838.roa
Signing time:             Tue 19 Aug 2025 01:40:14 +0000
ROA not before:           Tue 19 Aug 2025 01:35:14 +0000
ROA not after:            Tue 18 Aug 2026 01:40:14 +0000
asID:                     273088
IP address blocks:        200.114.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fc:40:79:9c:83:36:59:26:65:f4:52:9f:38:e7:60:8b:35:4b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Aug 19 01:35:14 2025 GMT
            Not After : Aug 18 01:40:14 2026 GMT
        Subject: CN=3786F024C5E48A49E0B0C42255BCD4D178040256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:9c:be:6b:8f:93:8b:bc:d0:84:8e:04:ac:
                    c5:0d:7c:e5:7b:cb:ce:b4:98:ac:31:43:23:fc:3d:
                    6b:0b:cf:29:f0:7e:ea:e1:cc:17:2b:c3:8b:4e:16:
                    d4:25:6a:52:71:55:3b:13:77:64:9e:d7:59:1f:35:
                    0d:4b:9e:28:24:37:42:b1:7a:59:f8:20:a4:63:bb:
                    cd:48:d0:a6:18:4d:c7:65:45:2e:bc:20:e2:32:9a:
                    30:37:74:72:04:df:b0:4a:30:f2:d5:e3:37:29:75:
                    cb:ad:ca:4f:a2:69:8c:af:86:e1:3b:bd:63:33:05:
                    52:75:3a:af:65:3f:54:b0:ea:2a:fb:09:86:ed:ad:
                    09:85:a9:4e:93:54:6e:d0:36:c0:cf:14:87:8a:65:
                    ed:c4:fb:44:50:61:af:df:76:cc:ca:ed:ef:eb:40:
                    0c:be:26:9f:c9:c2:97:91:15:37:32:46:d0:df:47:
                    b6:9b:16:78:e6:9a:5e:c5:bc:0c:3e:d6:d9:c9:ba:
                    35:c7:8b:96:29:5e:03:80:12:82:18:81:8b:a9:c7:
                    a5:e6:51:af:4b:14:88:64:a1:14:5c:13:77:c2:d3:
                    fd:a1:20:10:cc:63:40:82:01:b6:cf:a2:d5:44:de:
                    f1:6c:b1:aa:6e:3f:2d:14:c3:8d:e2:3c:ff:65:72:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:86:F0:24:C5:E4:8A:49:E0:B0:C4:22:55:BC:D4:D1:78:04:02:56
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38312e302f32342d3234203d3e20323733303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a5:a8:f8:57:3d:92:ad:9b:81:ac:54:8b:46:61:17:9e:41:
         de:92:a7:6e:35:0d:92:01:f5:47:1a:53:8b:ac:d5:3a:d9:2b:
         ed:d3:3d:a1:03:c7:39:4d:d6:6d:85:e6:8f:f3:30:7d:ee:b8:
         47:24:34:fb:2c:b7:e2:a3:59:51:3c:07:97:44:53:71:01:55:
         b8:d7:e5:1a:87:c7:02:2f:ad:53:5e:a4:ca:37:c5:42:5d:97:
         94:da:29:5a:3e:24:0b:3f:47:66:1e:a3:72:b6:b1:dc:1b:f9:
         f3:2d:e5:aa:cc:70:51:ad:4b:fc:18:da:c9:39:45:a4:60:fe:
         a3:a0:f7:38:96:f9:b4:d2:41:da:02:5a:89:02:7a:4f:c6:0e:
         99:73:06:83:1a:6a:71:97:e3:96:9f:d4:2f:97:09:59:ae:0b:
         18:4d:65:34:20:19:5d:ad:4e:ba:7e:34:93:77:99:31:1c:06:
         ad:4d:58:99:5c:96:7b:6f:6b:53:2f:30:c5:95:88:21:10:de:
         59:25:91:86:ea:e6:9e:75:aa:ba:81:93:89:c8:6f:fa:26:3b:
         cb:54:bf:fe:7d:ee:df:d9:17:05:61:04:6d:fe:19:2e:a0:b0:
         76:e5:09:e6:e0:1d:35:68:da:34:0f:04:a0:db:ec:e6:6b:ba:
         49:17:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:57:03 2025 by rpki-client