Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/3230302e3131352e39372e302f32342d3234203d3e20323639393139.roa
File:                     3230302e3131352e39372e302f32342d3234203d3e20323639393139.roa (raw, json)
Hash identifier:          dF//eMKUNMjGqyFKq0xadbMCoeNXOgjBm/s5qn8dCrE=
Subject key identifier:   11:C6:F0:5E:35:7C:77:C8:B9:AA:C5:F5:08:7D:45:3E:C8:AE:2E:BA
Certificate issuer:       /CN=4E15D89822F77B1877B8E32D843F4596B81C19AB
Certificate serial:       3A7DF1587B40195C07881CC2789DF5DEA6D21C05
Authority key identifier: 4E:15:D8:98:22:F7:7B:18:77:B8:E3:2D:84:3F:45:96:B8:1C:19:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/3230302e3131352e39372e302f32342d3234203d3e20323639393139.roa
Signing time:             Tue 04 Feb 2025 18:34:43 +0000
ROA not before:           Tue 04 Feb 2025 18:29:43 +0000
ROA not after:            Tue 03 Feb 2026 18:34:43 +0000
asID:                     269919
IP address blocks:        200.115.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7d:f1:58:7b:40:19:5c:07:88:1c:c2:78:9d:f5:de:a6:d2:1c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E15D89822F77B1877B8E32D843F4596B81C19AB
        Validity
            Not Before: Feb  4 18:29:43 2025 GMT
            Not After : Feb  3 18:34:43 2026 GMT
        Subject: CN=11C6F05E357C77C8B9AAC5F5087D453EC8AE2EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:aa:cc:e8:d9:cf:68:f9:f6:09:b4:15:cf:c9:
                    cd:f5:77:31:24:50:7d:b5:26:bd:a3:e0:e8:23:bd:
                    04:df:ba:c9:de:28:d8:b2:57:71:c3:23:9c:2e:5e:
                    bb:1a:59:2f:fa:78:d1:c5:fe:5b:f3:26:15:5b:fc:
                    21:3d:05:a5:8c:70:48:11:74:ce:3c:bb:99:20:70:
                    ad:94:c2:91:9c:66:59:c6:be:5a:c5:1e:d0:63:27:
                    84:56:4d:c1:f9:ac:d6:f3:f4:85:3e:09:aa:2b:0d:
                    5f:2f:c4:9e:21:5b:8d:2e:4d:b7:2d:7e:fe:87:49:
                    02:99:04:69:a1:bf:a8:9c:1f:e3:1e:9e:e6:ac:b3:
                    02:6b:23:d2:ec:c6:f3:6b:98:3e:3e:e1:30:35:44:
                    f6:6d:67:f3:9c:b3:f1:f7:b0:d7:91:5b:09:c4:94:
                    2a:df:2b:29:e5:de:be:f3:e4:31:54:4a:4b:49:5e:
                    c7:47:bd:51:02:97:a6:0c:a8:9c:42:34:59:09:60:
                    46:25:99:bc:85:1a:52:ef:70:a2:13:15:41:69:56:
                    b9:84:e4:f4:c7:b9:bb:c9:e8:4b:a6:63:49:c2:5d:
                    02:75:a3:fb:05:bb:81:2d:39:73:4b:fe:ac:eb:a8:
                    eb:a3:52:82:01:e8:2b:31:50:32:76:bc:20:42:b0:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C6:F0:5E:35:7C:77:C8:B9:AA:C5:F5:08:7D:45:3E:C8:AE:2E:BA
            X509v3 Authority Key Identifier:
                keyid:4E:15:D8:98:22:F7:7B:18:77:B8:E3:2D:84:3F:45:96:B8:1C:19:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/3230302e3131352e39372e302f32342d3234203d3e20323639393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:0a:8c:c7:af:90:75:e7:c8:ef:6d:5c:b2:eb:03:ee:4d:30:
         48:f1:f6:2b:25:0b:c6:b5:76:8a:8f:96:9b:e5:e8:5e:a6:45:
         db:3d:48:1f:0d:a6:d1:fa:d3:90:c6:51:ed:db:20:98:62:c0:
         c5:03:7c:58:3d:8c:43:38:a8:aa:04:ae:6d:d5:6d:27:2c:7c:
         8a:c1:37:d0:26:b5:92:fa:85:7a:88:35:34:b0:7d:5f:d2:ed:
         5e:79:82:0e:42:9b:7e:4f:a9:eb:93:54:f0:f0:52:12:d0:5f:
         3d:eb:14:49:e5:6d:97:69:b0:7c:36:d8:b3:92:7f:ed:75:fa:
         2f:23:20:a2:fa:63:2a:d6:da:bb:09:bd:b2:cf:ae:70:b3:2f:
         83:ef:9a:04:2f:2d:42:cc:10:30:82:58:62:89:77:c5:75:69:
         36:d7:fc:86:4e:a4:23:d6:62:1c:d6:f0:3d:ff:db:94:fb:8a:
         f6:9c:af:22:8f:e8:92:27:0e:43:b5:d1:c7:d4:42:30:6b:8d:
         2c:a8:9e:82:7d:1e:de:d6:c6:5c:6b:f5:46:4c:ce:8a:81:11:
         66:c8:03:ff:3a:ad:07:36:4b:47:31:be:61:78:5a:bc:61:1d:
         13:49:f2:be:ad:8d:e8:1e:52:cc:08:d3:1f:3a:46:37:71:7b:
         e6:9f:cd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:10 2025 by rpki-client