Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38322e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          oXtfABbCg3WLQk4mGiPP2sPM/GRgIIaxrZRslFUruOA=
Subject key identifier:   21:47:33:33:E8:4A:66:73:9F:1A:63:A7:68:41:7E:AF:F6:42:7A:94
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       34A7E6972690E37C7CE1E3C61DC5C7591574EE41
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 19 Aug 2025 00:40:12 +0000
ROA not before:           Tue 19 Aug 2025 00:35:12 +0000
ROA not after:            Tue 18 Aug 2026 00:40:12 +0000
asID:                     28065
IP address blocks:        200.114.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a7:e6:97:26:90:e3:7c:7c:e1:e3:c6:1d:c5:c7:59:15:74:ee:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Aug 19 00:35:12 2025 GMT
            Not After : Aug 18 00:40:12 2026 GMT
        Subject: CN=21473333E84A66739F1A63A768417EAFF6427A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cb:63:91:86:47:29:c2:10:1c:59:06:d6:07:
                    c4:38:b2:71:3c:1d:76:f9:0d:a5:96:32:d9:47:47:
                    f9:51:a7:99:9c:b0:6b:08:54:15:b9:3b:12:05:28:
                    0a:18:75:4c:1e:01:d4:fe:79:32:5b:78:b1:3c:4b:
                    ca:0d:15:4c:47:91:bf:8f:71:1f:13:ed:83:7d:06:
                    fb:0a:65:25:34:11:3d:fd:1e:87:85:61:df:37:41:
                    e0:0f:11:cb:5d:35:07:2f:8c:2d:45:15:e2:39:57:
                    da:22:4d:e8:77:81:5b:6b:a5:c4:7b:fb:9b:30:69:
                    d8:95:d7:13:79:65:16:4f:38:2b:a3:cb:ae:c3:f1:
                    36:9d:25:18:87:a8:fc:d8:d4:cb:0e:fa:b8:f7:e1:
                    52:1e:86:3f:4e:a4:57:d7:65:0e:22:fe:d6:92:3c:
                    d1:c2:51:bd:49:85:97:f4:f7:15:19:16:7d:fd:1b:
                    c2:a3:c1:32:47:f2:f3:b5:9e:79:ec:ca:2c:6e:3d:
                    06:d8:c5:79:41:75:45:ac:88:0b:76:3c:54:40:dd:
                    78:00:8c:a2:e9:7d:ae:6d:86:82:e1:fe:84:45:4b:
                    1d:04:02:a7:b3:b1:cc:d8:41:ae:0e:2c:6c:95:d5:
                    6e:ac:e6:03:dd:94:3f:9e:b7:b9:b1:5e:71:47:77:
                    78:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:47:33:33:E8:4A:66:73:9F:1A:63:A7:68:41:7E:AF:F6:42:7A:94
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38322e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:6b:5f:69:f4:ac:9a:4e:62:83:36:f1:81:65:fa:72:c2:7b:
         bd:1a:2f:fa:92:0f:2a:96:71:02:8c:48:8d:72:de:5e:b9:97:
         87:0b:9a:6f:20:91:9f:f1:4d:4d:ae:f7:ae:bf:2e:d5:a9:a9:
         c1:88:02:a3:8e:a0:06:7e:a6:22:ed:bf:ce:c7:5b:07:ae:41:
         d2:b7:49:60:c9:ef:89:27:bf:7a:83:08:0d:6b:1d:a2:63:39:
         94:34:c6:08:17:06:3c:56:33:9d:b7:78:dc:18:94:3b:62:cd:
         6e:24:bb:bf:13:dd:e7:9a:07:31:ed:2f:e6:ee:c5:a5:02:c2:
         9b:40:40:15:a0:ae:3b:9a:c3:c6:23:84:0f:d7:61:8e:85:33:
         5c:6f:11:c3:a7:82:88:ef:39:5c:3b:74:85:34:c9:5b:88:c4:
         03:7e:4c:6d:0c:1e:ee:b5:18:7d:5d:08:a6:cf:b0:03:3a:da:
         dc:cb:84:d1:f1:6f:9f:f7:0d:15:16:45:83:e3:68:92:50:2a:
         a2:9c:84:fb:9f:61:85:09:ba:bd:81:61:5e:81:4c:2f:d4:be:
         ac:7c:ed:ca:c2:06:82:b4:25:d7:37:76:4f:7a:e2:d8:33:a0:
         6d:76:93:e5:8f:e1:67:e3:89:6e:a9:bb:9c:7f:77:8d:ef:16:
         6c:e2:49:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:39:37 2025 by rpki-client