Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38362e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38362e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          0JL1ypdHZ5uHXJUt7B5Ov5Qa7k1cZQqMY3O6At8kpV8=
Subject key identifier:   35:04:BB:3E:14:9D:5D:6B:4C:B1:AE:D2:E4:A4:A8:B2:61:1E:70:F9
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       6CE3C7A2C61681E999BF0551D90ACD7F99D03B5A
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38362e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 19 Aug 2025 00:40:12 +0000
ROA not before:           Tue 19 Aug 2025 00:35:12 +0000
ROA not after:            Tue 18 Aug 2026 00:40:12 +0000
asID:                     28065
IP address blocks:        200.114.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e3:c7:a2:c6:16:81:e9:99:bf:05:51:d9:0a:cd:7f:99:d0:3b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Aug 19 00:35:12 2025 GMT
            Not After : Aug 18 00:40:12 2026 GMT
        Subject: CN=3504BB3E149D5D6B4CB1AED2E4A4A8B2611E70F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:ae:4f:07:bf:a4:cf:bf:f7:dd:44:de:e7:
                    30:15:c4:9c:c2:e5:92:ff:1d:19:24:8b:54:f3:8d:
                    be:8f:36:7c:6e:f8:77:34:78:04:22:af:ae:67:96:
                    10:b3:ee:14:16:54:f5:e1:43:72:bc:eb:fc:77:bd:
                    7a:94:5a:40:8c:70:e0:b9:71:f5:7c:9e:99:84:2e:
                    cf:16:b6:6e:a0:94:08:ed:fb:25:19:f5:8c:aa:60:
                    5c:a2:1a:df:a1:6a:2f:63:37:ee:5a:38:5e:22:9b:
                    87:af:ce:e9:cc:c0:32:59:6d:5b:a1:50:6e:eb:cd:
                    46:b4:9e:7c:14:92:cc:cb:ec:71:b9:6c:b2:6e:c7:
                    94:b7:e0:28:cb:b0:31:8d:4a:90:20:30:02:de:b3:
                    b1:08:a3:80:8a:b9:6a:b0:03:9f:9c:f7:a7:90:a0:
                    74:90:9d:6a:63:b0:b6:f4:f1:15:c5:63:ed:97:7e:
                    3f:3f:83:0f:35:0e:7c:e0:94:fd:08:02:4a:f4:47:
                    5f:1a:47:18:1b:aa:3f:4b:57:5c:68:1b:99:01:c6:
                    80:5c:08:1e:50:06:ef:1b:b9:db:e2:6a:b6:a1:9e:
                    8c:db:10:20:b0:71:48:e3:d0:e5:cc:80:f8:a1:b4:
                    74:d8:26:9a:18:8b:ea:e6:09:c5:11:00:f8:79:38:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:04:BB:3E:14:9D:5D:6B:4C:B1:AE:D2:E4:A4:A8:B2:61:1E:70:F9
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38362e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:38:d9:ee:f0:a5:7f:25:8e:f5:58:6f:dc:37:f8:69:d3:f2:
         fb:58:3b:79:f7:08:cb:f3:80:16:26:dd:fd:1d:1d:2c:f6:75:
         3c:52:7c:a6:7f:b4:97:dd:97:ac:25:40:b1:a5:45:04:72:af:
         4c:9b:56:05:4d:3f:41:89:66:0b:92:0c:11:32:5e:b7:7f:3c:
         f4:5a:8a:64:fd:1c:6e:71:e9:36:fc:b4:bb:c2:33:ef:0d:a9:
         82:19:f4:fa:da:8c:f6:c7:96:7b:ab:67:93:6a:e2:77:6f:9e:
         4a:dd:c6:84:b0:bf:c0:df:65:9c:7e:00:6d:ca:75:4b:b8:38:
         06:c7:ca:58:45:1a:f0:42:2e:3e:95:c6:70:24:d0:6c:f7:65:
         27:b5:28:19:a1:ba:a8:c4:01:87:65:84:74:c2:7c:e1:a1:23:
         e3:5f:a0:6d:69:08:5b:33:e4:7e:3d:58:81:d1:6e:1f:d1:86:
         44:19:b8:c7:e5:90:7b:6c:c9:78:04:27:fc:71:29:01:20:20:
         25:4f:21:c9:bf:25:7c:d1:80:d8:fb:29:1f:fd:b6:55:c9:01:
         21:28:f5:69:e0:5d:37:79:9d:72:33:4c:15:41:3c:b0:df:00:
         e9:c6:aa:70:ad:8a:65:d4:e9:0d:63:c0:2e:1a:2f:71:a4:6a:
         c8:94:12:39
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbOPHosYWgemZvwVR2QrNf5nQO1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyNDNDNzNBMThBRUQ2MzREN0VFQjhEMzRFNDQwOERG
RUI1MzE3MDAeFw0yNTA4MTkwMDM1MTJaFw0yNjA4MTgwMDQwMTJaMDMxMTAvBgNV
BAMTKDM1MDRCQjNFMTQ5RDVENkI0Q0IxQUVEMkU0QTRBOEIyNjExRTcwRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhK5PB7+kz7/33UTe5zAVxJzC
5ZL/HRkki1Tzjb6PNnxu+Hc0eAQir65nlhCz7hQWVPXhQ3K86/x3vXqUWkCMcOC5
cfV8npmELs8Wtm6glAjt+yUZ9YyqYFyiGt+hai9jN+5aOF4im4evzunMwDJZbVuh
UG7rzUa0nnwUkszL7HG5bLJux5S34CjLsDGNSpAgMALes7EIo4CKuWqwA5+c96eQ
oHSQnWpjsLb08RXFY+2Xfj8/gw81DnzglP0IAkr0R18aRxgbqj9LV1xoG5kBxoBc
CB5QBu8budviarahnozbECCwcUjj0OXMgPihtHTYJpoYi+rmCcURAPh5OCYjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNQS7PhSdXWtMsa7S5KSosmEecPkwHwYDVR0j
BBgwFoAUkCQ8c6GK7WNNfuuNNORAjf61MXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEMwMzM0NUQzODRDRDM4OTBGMjY2NzE0NDg1NEFGNkJG
QzY4NjAyMEExNkRGNkMxMzQ1NDUxNUM3ODA3NzFELzAvOTAyNDNDNzNBMThBRUQ2
MzREN0VFQjhEMzRFNDQwOERGRUI1MzE3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDI0M0M3M0ExOEFFRDYzNEQ3
RUVCOEQzNEU0NDA4REZFQjUzMTcwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRDMDMzNDVEMzg0Q0QzODkwRjI2NjcxNDQ4NTRBRjZCRkM2ODYwMjBB
MTZERjZDMTM0NTQ1MTVDNzgwNzcxRC8wLzMyMzAzMDJlMzEzMTM0MmUzODM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzYzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhyVjAN
BgkqhkiG9w0BAQsFAAOCAQEAoTjZ7vClfyWO9Vhv3Df4adPy+1g7efcIy/OAFibd
/R0dLPZ1PFJ8pn+0l92XrCVAsaVFBHKvTJtWBU0/QYlmC5IMETJet3889FqKZP0c
bnHpNvy0u8Iz7w2pghn0+tqM9seWe6tnk2rid2+eSt3GhLC/wN9lnH4Abcp1S7g4
BsfKWEUa8EIuPpXGcCTQbPdlJ7UoGaG6qMQBh2WEdMJ84aEj41+gbWkIWzPkfj1Y
gdFuH9GGRBm4x+WQe2zJeAQn/HEpASAgJU8hyb8lfNGA2PspH/22VckBISj1aeBd
N3mdcjNMFUE8sN8A6caqcK2KZdTpDWPALhovcaRqyJQSOQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:22:20 2025 by rpki-client