Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/3230302e3131352e39362e302f32342d3234203d3e20323639393139.roa
File:                     3230302e3131352e39362e302f32342d3234203d3e20323639393139.roa (raw, json)
Hash identifier:          LmxclK3blyNcgBkFWlu565NrpiyI0bwlfWokZuf/+1g=
Subject key identifier:   40:71:67:2E:2A:42:F1:68:79:B8:34:0E:39:37:24:AA:B2:CB:7E:85
Certificate issuer:       /CN=4E15D89822F77B1877B8E32D843F4596B81C19AB
Certificate serial:       6A70EFB63FE59C38CA3EA22C12049220254A4195
Authority key identifier: 4E:15:D8:98:22:F7:7B:18:77:B8:E3:2D:84:3F:45:96:B8:1C:19:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/3230302e3131352e39362e302f32342d3234203d3e20323639393139.roa
Signing time:             Tue 04 Feb 2025 18:34:44 +0000
ROA not before:           Tue 04 Feb 2025 18:29:44 +0000
ROA not after:            Tue 03 Feb 2026 18:34:44 +0000
asID:                     269919
IP address blocks:        200.115.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:70:ef:b6:3f:e5:9c:38:ca:3e:a2:2c:12:04:92:20:25:4a:41:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E15D89822F77B1877B8E32D843F4596B81C19AB
        Validity
            Not Before: Feb  4 18:29:44 2025 GMT
            Not After : Feb  3 18:34:44 2026 GMT
        Subject: CN=4071672E2A42F16879B8340E393724AAB2CB7E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:13:3b:eb:29:c4:41:4e:12:6d:3a:f1:72:
                    ee:fd:47:6a:11:b6:92:44:e9:2e:d8:6b:cf:15:37:
                    88:fe:7a:fa:2b:e4:3e:df:48:34:dc:dc:e3:f5:2e:
                    01:01:4a:44:62:4a:c4:12:d6:74:f4:92:31:b4:7d:
                    53:cd:96:95:83:8c:45:af:76:c2:8c:b1:5a:9f:30:
                    db:0a:4e:44:df:25:a9:d9:2b:60:a0:51:d7:f5:69:
                    c1:17:f7:24:b8:b3:76:21:54:15:ab:8c:14:f0:35:
                    79:6f:b1:f3:6c:fc:de:16:99:4e:1c:8d:76:9e:47:
                    1c:d9:07:73:57:db:fc:19:73:09:fb:8b:b0:20:16:
                    39:fe:ca:b5:0c:b0:ef:28:93:43:0d:fa:95:30:e5:
                    d9:ac:60:f2:21:b4:34:06:05:5f:df:be:e2:4e:aa:
                    e9:7a:1d:a0:5c:4c:be:2a:3a:c6:10:31:64:88:54:
                    cf:5f:59:54:1a:5c:14:dd:e1:4d:31:a4:03:a2:4a:
                    33:50:70:d2:c5:8d:d8:ea:ee:1c:32:5b:b5:ca:91:
                    55:3d:a4:e2:2c:76:8f:a0:94:66:45:87:47:43:67:
                    20:67:2d:bc:22:9c:31:e9:8c:83:e6:01:dc:4a:0f:
                    61:c9:d5:38:ff:48:5b:93:1f:96:7f:08:52:24:2c:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:71:67:2E:2A:42:F1:68:79:B8:34:0E:39:37:24:AA:B2:CB:7E:85
            X509v3 Authority Key Identifier:
                keyid:4E:15:D8:98:22:F7:7B:18:77:B8:E3:2D:84:3F:45:96:B8:1C:19:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/3230302e3131352e39362e302f32342d3234203d3e20323639393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:65:cf:75:b2:a3:d4:97:1a:8a:e1:66:c3:c8:42:ab:15:6d:
         d2:3f:b5:82:da:b1:49:83:80:77:f0:ea:f0:ea:a3:92:93:1e:
         b8:4f:80:3b:4e:d2:15:0f:b6:2b:93:5b:ab:b4:3f:a3:33:32:
         f2:83:de:ed:a5:5c:b1:33:52:42:73:4f:cc:04:67:34:31:76:
         22:21:4a:fa:b1:0f:da:84:f2:f9:62:fb:1e:06:18:ec:ba:bc:
         5e:84:f0:c5:34:20:c6:1b:90:f5:44:42:99:91:a4:d1:1f:9d:
         41:da:03:06:4b:21:24:5c:61:2e:fc:44:a9:84:00:83:11:04:
         0b:3a:40:da:a4:ce:fa:ff:b2:6d:fe:51:52:0d:55:9f:f0:a7:
         6d:14:17:10:8e:cf:6b:cc:15:e5:5f:f8:31:16:c6:f9:f1:08:
         c1:41:dc:ff:d4:da:84:d3:22:fc:fb:86:16:54:30:ce:ca:2e:
         f6:03:92:8a:16:2a:77:a9:1e:03:9d:ac:80:7d:a3:66:36:8c:
         f7:30:93:1d:e8:05:63:99:d7:0f:4f:96:4e:5a:cd:f0:6b:2c:
         de:99:4b:04:4f:6f:b6:14:37:85:0e:15:4c:cd:b7:94:51:43:
         ba:c6:ad:6d:3a:79:33:ec:99:30:7d:58:52:d2:8e:da:ea:01:
         62:c2:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:03 2025 by rpki-client