Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38342e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38342e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          SQZSoY7UH9Uz11UcYqukKczYFv++i7vWAMjElGx7LwM=
Subject key identifier:   0B:6B:4C:57:62:0F:7B:E1:14:0C:6A:01:2C:14:0E:9D:81:1D:74:D2
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       4437B1AD78AAB42548BC7DA60996A4219A0AE8BF
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38342e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 19 Aug 2025 00:40:13 +0000
ROA not before:           Tue 19 Aug 2025 00:35:13 +0000
ROA not after:            Tue 18 Aug 2026 00:40:13 +0000
asID:                     28065
IP address blocks:        200.114.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:37:b1:ad:78:aa:b4:25:48:bc:7d:a6:09:96:a4:21:9a:0a:e8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Aug 19 00:35:13 2025 GMT
            Not After : Aug 18 00:40:13 2026 GMT
        Subject: CN=0B6B4C57620F7BE1140C6A012C140E9D811D74D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:11:07:97:d7:d3:5c:d9:b6:c5:16:33:9d:c1:
                    cd:1c:6e:f0:e3:2d:d7:88:7b:f7:84:ea:ae:b7:3f:
                    20:a5:8a:fe:b2:aa:27:6c:4a:40:0f:8e:88:77:e9:
                    3d:cf:d2:cc:14:30:28:7e:50:eb:1e:bc:08:b0:b6:
                    a7:8d:bd:73:6a:9c:21:44:db:4b:3d:56:89:f5:35:
                    43:7b:96:37:3f:26:23:0d:fb:13:a5:89:b6:6a:05:
                    8c:45:7d:12:c0:d8:9e:c2:4a:98:73:48:84:70:9d:
                    e0:99:98:50:2d:8d:4f:9a:db:b7:c0:db:b3:10:24:
                    7c:98:ce:38:0b:f1:d3:45:01:dc:69:fd:69:cb:42:
                    38:8a:b1:42:63:46:ad:ba:86:63:79:38:75:91:c9:
                    58:d3:72:a9:d1:bb:42:b8:49:be:db:10:7e:7a:2c:
                    8d:8e:fd:95:aa:fb:93:53:c2:f9:79:1b:01:a2:94:
                    2b:6a:d0:7b:35:e4:b8:99:1c:9e:2a:a2:a5:1f:24:
                    95:1a:87:d2:90:b7:27:c5:2e:fe:1d:c3:68:2e:4f:
                    a0:58:82:42:33:08:04:63:be:29:bb:45:c7:9c:4a:
                    cf:f4:78:78:2c:03:92:b6:d5:0e:e1:40:ec:0c:d6:
                    6b:2b:d3:72:35:c3:9d:eb:fb:51:22:42:5f:d5:b3:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6B:4C:57:62:0F:7B:E1:14:0C:6A:01:2C:14:0E:9D:81:1D:74:D2
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38342e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:fe:26:43:89:97:24:13:ff:da:46:a9:32:d4:ba:2d:db:
         6a:90:e3:02:f0:ac:41:50:d1:3c:80:c0:01:05:44:e8:29:09:
         82:d7:9d:8e:bd:ca:ca:df:7b:e0:09:ac:8f:76:f6:52:4c:a8:
         60:de:9e:ce:e5:62:76:a9:43:d4:5b:31:dd:a2:d3:41:8e:f5:
         e9:4b:c4:de:ba:f2:1c:34:5a:33:34:83:4d:bf:b0:3e:fd:2f:
         6d:de:17:fe:3b:36:17:01:5a:36:16:90:39:59:a8:2a:b1:71:
         be:3b:fc:6f:ca:c6:ee:5a:93:2e:07:ad:b9:a4:17:21:e2:0e:
         39:ed:9a:bc:0c:c8:72:c5:b6:32:15:95:be:e9:52:fa:96:c6:
         9c:c5:94:5e:96:96:ca:6f:34:e9:8a:dc:85:9c:5b:3c:bd:43:
         de:14:cf:ff:2e:11:a3:47:ca:8e:25:d3:5f:fa:97:26:cb:a6:
         56:ad:35:fa:d1:bc:4c:ee:a5:c0:72:ce:57:54:be:97:1e:15:
         4c:1d:98:e1:2d:72:b6:29:9a:a5:3b:6a:68:05:2c:d1:f5:b7:
         1b:25:59:41:0a:af:28:32:ac:a0:0f:79:56:fc:09:0f:21:a8:
         98:4e:ef:dc:30:f8:db:0e:7f:3e:75:e4:76:b4:e4:d5:c1:1a:
         b4:ae:35:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:41:53 2025 by rpki-client