Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38372e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38372e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          AQjeJQu8+uxAEViCTkGOOxF2U71xXn64GVKnaM/3BIk=
Subject key identifier:   7E:DF:39:2B:81:A4:B0:81:F8:05:F9:83:E3:42:FD:F7:6D:A6:DA:CB
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       573846015109259D9287CB4102D85001633D78B5
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38372e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 21 Jul 2026 01:15:06 +0000
ROA not before:           Tue 21 Jul 2026 01:10:06 +0000
ROA not after:            Tue 20 Jul 2027 01:15:06 +0000
asID:                     28065
IP address blocks:        200.114.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:38:46:01:51:09:25:9d:92:87:cb:41:02:d8:50:01:63:3d:78:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Jul 21 01:10:06 2026 GMT
            Not After : Jul 20 01:15:06 2027 GMT
        Subject: CN=7EDF392B81A4B081F805F983E342FDF76DA6DACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:6b:09:c1:6e:68:a3:6f:c5:2b:b9:06:ce:
                    d2:26:a4:9c:88:de:b2:e8:27:78:52:24:05:3f:b3:
                    09:74:cf:7e:4d:f9:53:4c:69:87:6c:8a:f5:a7:2f:
                    0f:d2:8b:05:a7:3c:9c:d6:c1:c6:4a:bd:94:78:e8:
                    bb:80:83:6b:ab:c7:aa:4e:53:a2:cc:be:12:6b:8f:
                    be:94:ec:20:69:14:49:c2:d1:40:cd:95:72:e1:7b:
                    d9:02:94:59:72:52:7d:e9:27:e0:42:98:4f:e7:0e:
                    78:08:cb:2c:e9:87:c6:5e:c7:ee:71:cb:75:7d:a6:
                    b6:68:67:8e:ec:fa:61:d0:ac:f9:d5:f7:18:48:6e:
                    be:19:f2:28:8e:2b:12:9c:d9:4f:7c:c1:70:9a:87:
                    98:29:6a:78:9c:ac:ae:60:52:27:d9:ef:ad:31:ea:
                    4c:4d:07:b6:67:d6:f0:ff:29:f3:7a:2a:48:2e:3e:
                    64:01:3b:fd:05:54:cf:14:86:98:4c:d3:39:40:d2:
                    9e:90:76:7c:e7:38:ea:63:ce:07:e7:f9:ed:e3:82:
                    d4:c2:f2:86:a9:5f:0f:ce:7e:27:90:69:e0:47:bf:
                    b5:6c:d3:2c:37:20:4d:cc:e3:ba:39:d8:93:6e:3d:
                    56:09:eb:0f:cf:04:70:21:10:85:66:14:e4:ee:e7:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DF:39:2B:81:A4:B0:81:F8:05:F9:83:E3:42:FD:F7:6D:A6:DA:CB
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38372e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:aa:01:97:8d:d9:62:dc:60:05:af:e7:80:48:40:74:a8:eb:
         f1:21:06:29:9f:d4:05:ae:46:25:ac:1d:ee:c8:b5:b7:47:94:
         d4:1b:d7:3b:50:2f:58:5f:da:df:d9:3f:47:c8:6b:86:a1:24:
         ed:55:b5:84:8d:d3:f9:9c:2a:70:88:c6:7a:fa:84:0f:d6:ce:
         b7:38:03:0a:fa:a5:00:ba:eb:2f:e7:b3:ec:06:1e:b3:0e:94:
         14:7d:82:e9:96:e3:67:47:70:51:d0:20:bd:0f:63:5f:4c:ab:
         a2:49:ef:7b:c7:e5:c7:29:af:14:39:0b:d1:4b:41:82:3a:cf:
         e0:12:30:dc:f9:77:3f:d6:2a:3b:63:73:b2:7c:0e:54:34:fb:
         89:98:1b:b3:e7:73:96:07:45:8d:a0:0d:74:53:0c:5d:5c:1e:
         03:18:8b:e6:15:4e:4b:b2:0e:68:00:0c:79:58:99:02:09:80:
         b9:0a:98:46:f1:4d:84:f5:88:d4:26:22:4f:48:aa:f7:d0:39:
         ad:40:30:76:3c:5c:c2:f7:2f:4a:91:59:91:12:42:c2:1b:8c:
         e4:26:1d:1c:92:db:53:42:ec:71:9e:44:d1:50:d6:cf:d1:ce:
         af:9f:21:d4:dd:ab:9f:f7:85:dc:ec:ac:0e:e5:8a:72:fe:79:
         2f:fe:54:a3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVzhGAVEJJZ2Sh8tBAthQAWM9eLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAyNDNDNzNBMThBRUQ2MzREN0VFQjhEMzRFNDQwOERG
RUI1MzE3MDAeFw0yNjA3MjEwMTEwMDZaFw0yNzA3MjAwMTE1MDZaMDMxMTAvBgNV
BAMTKDdFREYzOTJCODFBNEIwODFGODA1Rjk4M0UzNDJGREY3NkRBNkRBQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtq2sJwW5oo2/FK7kGztImpJyI
3rLoJ3hSJAU/swl0z35N+VNMaYdsivWnLw/SiwWnPJzWwcZKvZR46LuAg2urx6pO
U6LMvhJrj76U7CBpFEnC0UDNlXLhe9kClFlyUn3pJ+BCmE/nDngIyyzph8Zex+5x
y3V9prZoZ47s+mHQrPnV9xhIbr4Z8iiOKxKc2U98wXCah5gpanicrK5gUifZ760x
6kxNB7Zn1vD/KfN6KkguPmQBO/0FVM8UhphM0zlA0p6QdnznOOpjzgfn+e3jgtTC
8oapXw/OfieQaeBHv7Vs0yw3IE3M47o52JNuPVYJ6w/PBHAhEIVmFOTu5/thAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUft85K4GksIH4BfmD40L9922m2sswHwYDVR0j
BBgwFoAUkCQ8c6GK7WNNfuuNNORAjf61MXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEMwMzM0NUQzODRDRDM4OTBGMjY2NzE0NDg1NEFGNkJG
QzY4NjAyMEExNkRGNkMxMzQ1NDUxNUM3ODA3NzFELzAvOTAyNDNDNzNBMThBRUQ2
MzREN0VFQjhEMzRFNDQwOERGRUI1MzE3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MDI0M0M3M0ExOEFFRDYzNEQ3
RUVCOEQzNEU0NDA4REZFQjUzMTcwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRDMDMzNDVEMzg0Q0QzODkwRjI2NjcxNDQ4NTRBRjZCRkM2ODYwMjBB
MTZERjZDMTM0NTQ1MTVDNzgwNzcxRC8wLzMyMzAzMDJlMzEzMTM0MmUzODM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzYzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhyVzAN
BgkqhkiG9w0BAQsFAAOCAQEAVqoBl43ZYtxgBa/ngEhAdKjr8SEGKZ/UBa5GJawd
7si1t0eU1BvXO1AvWF/a39k/R8hrhqEk7VW1hI3T+ZwqcIjGevqED9bOtzgDCvql
ALrrL+ez7AYesw6UFH2C6ZbjZ0dwUdAgvQ9jX0yroknve8flxymvFDkL0UtBgjrP
4BIw3Pl3P9YqO2NzsnwOVDT7iZgbs+dzlgdFjaANdFMMXVweAxiL5hVOS7IOaAAM
eViZAgmAuQqYRvFNhPWI1CYiT0iq99A5rUAwdjxcwvcvSpFZkRJCwhuM5CYdHJLb
U0LscZ5E0VDWz9HOr58h1N2rn/eF3OysDuWKcv55L/5Uow==
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:03:54 2026 by rpki-client