Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38332e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38332e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          Yaca9/iDQ9DOLLdIeuoj+zMpEF4h4fGhqmN2ryNNAn0=
Subject key identifier:   72:5B:DD:4D:D7:19:48:68:A0:77:DD:34:B0:7C:9E:47:8A:C2:D6:DE
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       4A1619A1952E0B83E6C64915E4D6D7A4AA2CC9EF
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38332e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 21 Jul 2026 01:15:05 +0000
ROA not before:           Tue 21 Jul 2026 01:10:05 +0000
ROA not after:            Tue 20 Jul 2027 01:15:05 +0000
asID:                     28065
IP address blocks:        200.114.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:16:19:a1:95:2e:0b:83:e6:c6:49:15:e4:d6:d7:a4:aa:2c:c9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Jul 21 01:10:05 2026 GMT
            Not After : Jul 20 01:15:05 2027 GMT
        Subject: CN=725BDD4DD7194868A077DD34B07C9E478AC2D6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:e4:7f:d1:c8:4d:ed:1e:0c:13:6d:3e:33:
                    4b:c5:51:c1:b6:74:65:70:5a:b0:88:f8:d2:ee:1a:
                    db:14:c2:50:33:76:91:1e:10:82:bd:87:b1:84:6e:
                    8f:54:b1:b7:ad:49:58:f4:72:18:9f:b9:61:d2:fd:
                    25:1b:2e:24:fd:e8:77:9b:ca:41:f7:01:18:fd:a4:
                    7c:91:f9:4e:59:54:3f:64:d2:74:5b:31:74:eb:cf:
                    f2:4d:f0:6b:59:a6:2b:7f:52:6f:dd:68:d3:aa:4d:
                    8e:40:8c:d8:b4:55:7d:43:7d:55:4d:57:d9:bd:a1:
                    83:5a:06:db:47:74:07:9c:ee:72:18:81:11:ae:2d:
                    13:c6:e3:86:73:c7:1e:d0:67:95:cb:59:f7:7b:bd:
                    95:06:4e:1a:e8:1a:6a:79:0a:d1:9d:1d:1e:6a:dd:
                    62:ed:f1:aa:f3:17:4d:4a:9c:0b:78:66:a0:33:82:
                    57:3d:ca:4a:96:a6:db:01:6e:bb:9f:0a:5a:7e:05:
                    91:fe:b0:cd:8c:94:2d:b7:81:52:f3:6e:0b:4f:85:
                    c1:d3:b7:64:ad:08:16:d5:9d:48:1a:16:70:3b:17:
                    1b:69:22:69:93:b9:a5:75:a8:d7:f4:83:6e:c9:55:
                    ad:50:a4:b6:73:96:ee:e6:1f:78:2b:35:23:f8:71:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5B:DD:4D:D7:19:48:68:A0:77:DD:34:B0:7C:9E:47:8A:C2:D6:DE
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38332e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:bd:20:62:fe:65:9e:e1:02:6a:d4:59:65:ea:57:d0:be:41:
         aa:fc:f3:4a:ff:77:4a:4d:29:a0:54:ff:1b:12:e0:0e:c7:7d:
         ee:4c:d6:0e:e9:de:4b:68:28:9b:c4:18:cb:54:03:18:36:15:
         69:19:f6:20:09:ed:2e:c0:1f:c9:8c:14:e1:38:a3:78:47:18:
         2f:5c:b3:a3:6c:56:5e:15:95:19:f0:4b:49:cf:8c:0c:e6:23:
         ae:9b:26:c6:66:f8:16:35:f7:19:ab:1a:0d:85:e7:b2:04:27:
         50:e9:1e:99:be:e5:5d:36:e9:e5:9b:44:04:82:af:0c:18:f7:
         e1:46:7e:15:58:bd:38:48:46:94:a9:63:da:ed:d6:5f:96:4b:
         0d:15:aa:38:a8:a7:15:7e:97:15:02:35:c0:80:64:57:2e:ca:
         fc:09:04:47:89:1b:bf:7e:55:0c:33:35:d8:83:d8:cb:d5:70:
         b7:59:39:d6:4c:c3:d9:97:16:a9:9d:5b:4e:73:05:51:91:0a:
         66:20:6c:64:5e:d9:b9:03:d3:b4:f8:6b:53:2b:5b:3c:fc:a3:
         d1:a5:3a:3e:e7:d5:5a:e7:f1:83:67:55:b9:bf:22:5d:a9:9b:
         ab:a4:d6:a5:4f:d4:bd:cd:42:34:b1:36:c3:cb:26:80:a8:8f:
         a5:79:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:03:52 2026 by rpki-client