Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38342e302f32322d3232203d3e203238303635.roa
File:                     3230302e3131342e38342e302f32322d3232203d3e203238303635.roa (raw, json)
Hash identifier:          S3EnFCwjSjq1wBVNexcjct366lPO8qepxY1d8jB+aDM=
Subject key identifier:   FA:F8:7A:8D:5E:01:C4:80:15:F2:4B:BE:1D:4F:62:DC:B9:91:80:EF
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       479BA2C2897506BED0A4652A60FC764E7A2F9688
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38342e302f32322d3232203d3e203238303635.roa
Signing time:             Mon 18 Aug 2025 21:40:10 +0000
ROA not before:           Mon 18 Aug 2025 21:35:10 +0000
ROA not after:            Mon 17 Aug 2026 21:40:10 +0000
asID:                     28065
IP address blocks:        200.114.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9b:a2:c2:89:75:06:be:d0:a4:65:2a:60:fc:76:4e:7a:2f:96:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Aug 18 21:35:10 2025 GMT
            Not After : Aug 17 21:40:10 2026 GMT
        Subject: CN=FAF87A8D5E01C48015F24BBE1D4F62DCB99180EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b4:d4:30:fe:30:8b:49:4a:e7:a7:9c:92:4a:
                    3c:d4:a7:00:b9:9d:69:46:14:45:17:ed:7a:a0:96:
                    a6:d2:fa:42:1c:af:ac:16:0c:99:6c:4a:e4:f9:b6:
                    b2:60:75:ca:a7:b7:e1:eb:e8:a2:1c:e2:58:94:55:
                    bd:c8:0b:da:c8:26:04:a2:2d:f7:b0:af:68:0c:76:
                    ee:8b:ee:39:07:92:6a:09:9c:7e:6b:00:09:3b:c3:
                    e6:30:0d:06:ad:02:18:aa:88:b9:af:d8:36:6c:c8:
                    12:27:35:e9:5e:78:28:63:be:24:6a:5c:ee:ac:2c:
                    f3:09:c8:df:61:2b:a6:0d:f1:f5:d1:2c:da:45:92:
                    a2:18:f4:fc:9c:25:df:0d:2f:6a:4f:45:49:59:b1:
                    80:ff:50:7c:15:12:7e:74:af:10:47:c3:15:8a:48:
                    f4:f0:4c:46:44:14:de:9e:8a:a0:cf:2e:09:17:99:
                    99:3d:b5:70:9e:34:bc:26:78:88:1e:e5:38:e1:15:
                    0a:0c:f5:22:56:02:92:72:78:dd:57:e2:1e:69:b1:
                    7e:7d:52:39:0d:1b:0d:20:7e:f5:a4:0c:05:6c:fc:
                    a7:9e:8e:84:79:55:11:90:74:2a:04:6f:b0:e5:aa:
                    f6:45:56:a7:d4:72:d6:71:5c:d9:a5:e0:9f:45:97:
                    3d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F8:7A:8D:5E:01:C4:80:15:F2:4B:BE:1D:4F:62:DC:B9:91:80:EF
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38342e302f32322d3232203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:6a:94:30:86:01:95:28:be:be:57:d0:0f:d4:38:e7:ce:d3:
         0a:75:35:e0:dc:2c:3b:b3:3d:b6:5f:c9:30:18:9e:17:66:3c:
         d3:07:88:e6:2b:34:6d:cd:36:10:91:ac:15:ba:6e:a0:c6:15:
         a0:77:63:d8:bf:7e:29:16:5c:6a:02:aa:81:a1:dc:fe:bd:82:
         d5:80:1e:12:33:4f:b7:aa:ad:51:93:fb:b9:5f:0c:fd:41:5f:
         76:48:a4:42:1b:76:ef:34:20:6d:b6:0d:e1:1c:41:1e:ea:ba:
         f3:b5:98:91:8f:8d:02:a1:b9:4e:0c:d5:6b:f6:1b:19:fe:68:
         9c:48:83:c2:a9:eb:f7:3f:21:d5:ba:0e:f9:c0:e1:0e:e2:87:
         05:e8:fb:e2:9a:ae:96:ef:7a:20:81:e7:f7:5e:b9:ca:08:0e:
         55:c1:78:d0:72:bb:76:d5:c6:82:ff:33:8b:23:7a:0d:57:a0:
         b3:77:76:43:9e:95:66:07:07:d8:ee:a5:1c:b3:57:05:ea:89:
         4a:3f:bf:65:d9:d3:77:c6:fc:50:b1:c2:50:9b:91:9c:cf:62:
         53:da:cd:44:d0:fd:fd:92:46:78:d9:12:61:fd:15:6f:87:f3:
         fd:06:cf:99:25:0c:c2:70:0a:38:e0:a0:6d:4d:a3:de:47:a8:
         60:a0:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:36:27 2025 by rpki-client