Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38352e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38352e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          2e3tTuhtkDkZWfmAJZuVFEvCQAg5VgCoE3NOWdAU/z4=
Subject key identifier:   35:55:64:E8:96:4E:68:D6:50:F3:A8:81:E7:7B:F4:93:E0:A8:01:E8
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       38869C051CCF90547D24FCB99DB151B5B765FECD
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38352e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 19 Aug 2025 00:40:13 +0000
ROA not before:           Tue 19 Aug 2025 00:35:13 +0000
ROA not after:            Tue 18 Aug 2026 00:40:13 +0000
asID:                     28065
IP address blocks:        200.114.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:86:9c:05:1c:cf:90:54:7d:24:fc:b9:9d:b1:51:b5:b7:65:fe:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Aug 19 00:35:13 2025 GMT
            Not After : Aug 18 00:40:13 2026 GMT
        Subject: CN=355564E8964E68D650F3A881E77BF493E0A801E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:12:21:cb:73:f5:12:e9:16:7e:fb:ee:2a:
                    2d:b6:fe:7e:23:1f:4a:94:a7:72:cc:c8:14:14:cb:
                    30:3a:25:e1:d0:32:c7:7c:7f:80:c9:98:e1:41:80:
                    e0:08:76:ff:49:3a:7d:e8:18:5a:68:79:c9:cb:a0:
                    fe:01:f2:9b:25:b4:8d:65:f4:c4:c2:62:66:99:30:
                    10:a2:c8:4e:df:6c:8f:5e:88:8c:db:88:76:f1:15:
                    0c:2b:84:dd:e6:2e:0f:7a:c7:ba:43:9d:8c:c7:46:
                    91:0e:01:c2:0b:80:3b:f8:e2:53:81:49:ef:d2:85:
                    59:e3:29:c3:47:31:59:69:6f:9c:25:4d:f2:eb:01:
                    86:d4:f5:f7:76:9a:9f:cd:52:a7:3e:38:db:8d:f6:
                    ed:eb:09:74:54:56:de:71:10:61:dc:a1:06:aa:22:
                    7e:0f:78:fc:79:7d:01:d3:3a:e3:7e:ad:7d:5b:b8:
                    7a:8e:1c:7a:b3:5f:e2:71:88:4a:54:28:64:41:7e:
                    23:5c:0c:5f:39:1b:14:ad:22:71:98:c7:09:3b:1b:
                    eb:dd:a1:2a:2c:f7:3b:6f:cd:1d:18:84:e8:fd:e4:
                    b6:2f:82:18:ca:9e:3e:12:11:20:72:08:dd:41:9d:
                    b8:cb:57:7d:db:bc:8e:11:7a:fb:42:c8:54:78:9c:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:55:64:E8:96:4E:68:D6:50:F3:A8:81:E7:7B:F4:93:E0:A8:01:E8
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38352e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:8a:c1:a1:6c:ca:21:c5:d6:23:2a:4b:93:0d:a2:e0:d2:
         17:8c:06:95:86:7d:19:07:1a:ca:36:62:ae:57:9f:38:40:d3:
         d1:f8:2a:92:93:34:ce:4f:80:8e:3d:e0:48:98:c3:8b:87:4e:
         b1:e7:b2:5e:92:c6:fd:02:45:c6:0f:d1:41:84:bc:a9:88:2c:
         07:dd:96:d7:77:91:96:0c:bf:6a:c1:d3:bb:95:d7:01:32:ea:
         2f:be:d4:cb:8f:33:a5:8e:04:55:9a:7c:b6:bc:c2:5b:b0:41:
         3f:4c:91:3a:4f:5e:c9:38:56:39:b2:6e:c9:0a:d6:11:e9:ca:
         d0:87:c3:64:1f:76:fc:ae:a5:98:58:6c:21:e1:21:63:b9:80:
         7f:dc:b9:9e:98:b5:b1:72:aa:27:1f:d2:98:4f:e3:5f:94:c0:
         d6:01:19:07:fa:c7:59:0f:b5:31:7d:25:03:e8:e9:a2:16:b3:
         97:76:27:0c:c1:6f:73:2d:14:aa:82:c9:bf:d6:e9:0c:42:24:
         d3:f3:61:63:bc:d1:71:fa:af:4b:a7:40:71:51:61:d3:cf:62:
         40:13:99:93:00:21:0e:db:1e:49:f9:0f:71:2e:5b:3f:15:fc:
         f5:06:4d:e7:f1:26:39:b3:85:7d:6f:4a:52:af:a1:c0:cd:28:
         2f:72:6e:00
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOIacBRzPkFR9JPy5nbFRtbdl/s0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyNDNDNzNBMThBRUQ2MzREN0VFQjhEMzRFNDQwOERG
RUI1MzE3MDAeFw0yNTA4MTkwMDM1MTNaFw0yNjA4MTgwMDQwMTNaMDMxMTAvBgNV
BAMTKDM1NTU2NEU4OTY0RTY4RDY1MEYzQTg4MUU3N0JGNDkzRTBBODAxRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP9xIhy3P1EukWfvvuKi22/n4j
H0qUp3LMyBQUyzA6JeHQMsd8f4DJmOFBgOAIdv9JOn3oGFpoecnLoP4B8psltI1l
9MTCYmaZMBCiyE7fbI9eiIzbiHbxFQwrhN3mLg96x7pDnYzHRpEOAcILgDv44lOB
Se/ShVnjKcNHMVlpb5wlTfLrAYbU9fd2mp/NUqc+ONuN9u3rCXRUVt5xEGHcoQaq
In4PePx5fQHTOuN+rX1buHqOHHqzX+JxiEpUKGRBfiNcDF85GxStInGYxwk7G+vd
oSos9ztvzR0YhOj95LYvghjKnj4SESByCN1BnbjLV33bvI4RevtCyFR4nDdpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNVVk6JZOaNZQ86iB53v0k+CoAegwHwYDVR0j
BBgwFoAUkCQ8c6GK7WNNfuuNNORAjf61MXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEMwMzM0NUQzODRDRDM4OTBGMjY2NzE0NDg1NEFGNkJG
QzY4NjAyMEExNkRGNkMxMzQ1NDUxNUM3ODA3NzFELzAvOTAyNDNDNzNBMThBRUQ2
MzREN0VFQjhEMzRFNDQwOERGRUI1MzE3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDI0M0M3M0ExOEFFRDYzNEQ3
RUVCOEQzNEU0NDA4REZFQjUzMTcwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRDMDMzNDVEMzg0Q0QzODkwRjI2NjcxNDQ4NTRBRjZCRkM2ODYwMjBB
MTZERjZDMTM0NTQ1MTVDNzgwNzcxRC8wLzMyMzAzMDJlMzEzMTM0MmUzODM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzYzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhyVTAN
BgkqhkiG9w0BAQsFAAOCAQEATmGKwaFsyiHF1iMqS5MNouDSF4wGlYZ9GQcayjZi
rlefOEDT0fgqkpM0zk+Ajj3gSJjDi4dOseeyXpLG/QJFxg/RQYS8qYgsB92W13eR
lgy/asHTu5XXATLqL77Uy48zpY4EVZp8trzCW7BBP0yROk9eyThWObJuyQrWEenK
0IfDZB92/K6lmFhsIeEhY7mAf9y5npi1sXKqJx/SmE/jX5TA1gEZB/rHWQ+1MX0l
A+jpohazl3YnDMFvcy0UqoLJv9bpDEIk0/NhY7zRcfqvS6dAcVFh089iQBOZkwAh
DtseSfkPcS5bPxX89QZN5/EmObOFfW9KUq+hwM0oL3JuAA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:41:12 2025 by rpki-client