Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38372e302f32342d3234203d3e203238303635.roa
File:                     3230302e3131342e38372e302f32342d3234203d3e203238303635.roa (raw, json)
Hash identifier:          mJFNfHOmRe7cfy+H7R6mmGeE2RmSNXtBcwna9wZoocY=
Subject key identifier:   5C:C7:4A:00:59:86:4A:76:E3:08:B9:1E:D0:8B:BD:82:5B:F8:C4:40
Certificate issuer:       /CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
Certificate serial:       750930C82C33D6881103A7D08536BB4D7B4B54BE
Authority key identifier: 90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38372e302f32342d3234203d3e203238303635.roa
Signing time:             Tue 19 Aug 2025 00:40:11 +0000
ROA not before:           Tue 19 Aug 2025 00:35:11 +0000
ROA not after:            Tue 18 Aug 2026 00:40:11 +0000
asID:                     28065
IP address blocks:        200.114.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:09:30:c8:2c:33:d6:88:11:03:a7:d0:85:36:bb:4d:7b:4b:54:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90243C73A18AED634D7EEB8D34E4408DFEB53170
        Validity
            Not Before: Aug 19 00:35:11 2025 GMT
            Not After : Aug 18 00:40:11 2026 GMT
        Subject: CN=5CC74A0059864A76E308B91ED08BBD825BF8C440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:31:12:19:46:b7:28:1c:d7:3d:1d:df:bb:c2:
                    03:01:24:ab:4c:9a:71:3d:dc:ab:75:8a:8e:11:5e:
                    b1:ad:9a:c7:9c:d8:dd:44:51:d2:de:7f:0b:b6:74:
                    2f:8e:66:c0:1b:56:45:ef:c0:15:36:12:b9:0a:1a:
                    95:18:d4:c0:4f:47:cf:4d:6c:f6:ce:86:37:bb:f1:
                    3f:8b:85:0f:8c:24:23:2f:6d:be:2a:bd:e1:55:43:
                    1f:55:fb:62:a8:af:2c:87:ac:07:c5:12:af:dc:63:
                    bb:ed:f6:0d:e1:79:43:03:4c:46:ac:24:e4:14:2c:
                    8a:65:06:6e:82:e1:29:72:4e:65:53:73:a5:e5:fb:
                    b6:02:c9:4a:3d:25:fa:87:4e:91:43:56:f5:13:11:
                    cd:eb:43:33:e3:3d:4e:10:b7:47:9c:43:1f:e7:45:
                    66:d9:c6:50:11:0c:8a:7f:fe:59:f3:a2:77:44:f2:
                    b6:ac:fb:24:bc:b5:24:43:46:c2:32:28:83:8f:d3:
                    61:27:e4:9f:02:6a:c5:8e:b9:0f:51:f1:d3:0a:6a:
                    d3:30:ce:99:3b:27:7d:95:35:bf:8e:c6:00:e3:01:
                    9d:e2:0f:a0:e9:4b:0c:79:aa:d4:bf:34:83:f6:c4:
                    de:9d:ec:67:40:b4:1a:8b:42:1c:af:88:75:be:f1:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C7:4A:00:59:86:4A:76:E3:08:B9:1E:D0:8B:BD:82:5B:F8:C4:40
            X509v3 Authority Key Identifier:
                keyid:90:24:3C:73:A1:8A:ED:63:4D:7E:EB:8D:34:E4:40:8D:FE:B5:31:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90243C73A18AED634D7EEB8D34E4408DFEB53170.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C03345D384CD3890F2667144854AF6BFC686020A16DF6C13454515C780771D/0/3230302e3131342e38372e302f32342d3234203d3e203238303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:06:aa:fb:0a:81:8a:a7:d9:50:4a:be:c2:30:f0:85:24:c1:
         01:eb:d8:da:13:78:d4:52:47:c4:21:5c:ab:8b:fb:1d:fa:17:
         64:3a:f1:d7:b0:79:eb:13:bd:73:3d:5f:1a:39:1c:4a:28:6c:
         b3:67:77:ce:df:30:7e:2c:09:e9:03:82:cf:fd:a7:e4:e2:c2:
         59:25:58:9d:63:2c:cf:b7:7f:ff:bc:f3:11:24:82:0e:b1:4a:
         fb:88:bb:92:85:e8:ce:7a:39:d4:15:db:10:43:83:7e:46:f7:
         dd:cf:9c:8b:c2:49:3e:68:94:de:00:42:4b:0a:55:38:82:c7:
         f0:c5:8b:e9:03:1d:22:41:c9:6d:33:8e:8a:82:94:2b:88:02:
         7d:b8:4f:37:1a:35:bc:e6:aa:23:63:9f:d4:b7:ed:cb:0e:d1:
         83:08:0b:40:58:9a:3a:cd:9e:2b:c2:8a:b8:c8:91:d2:d6:a8:
         e2:54:8b:9b:8f:11:d7:55:36:37:26:b6:8f:0f:a2:db:ab:f2:
         e6:99:42:89:fc:55:bf:d2:3a:3a:b3:2d:e6:05:85:0a:15:b4:
         97:44:26:87:98:ca:a2:58:96:41:ac:ad:33:2f:e2:0e:e3:af:
         68:ce:c5:a5:84:9b:e8:98:ce:98:92:c1:88:a0:18:d4:4e:68:
         c9:3b:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:35:34 2025 by rpki-client