Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231312e302f32342d3234203d3e203237373437.roa
File:                     3230302e3131352e3231312e302f32342d3234203d3e203237373437.roa (raw, json)
Hash identifier:          8Q5zx3JilyPQpJRv3u+pkPFnYcwfDGQB0+lTe4CEzao=
Subject key identifier:   2D:3A:D0:54:A4:19:6E:EE:5A:99:73:EA:58:C0:A0:9F:A6:57:AF:52
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       0EC87C6F9BFF2CEE1D3CDED3B5FD15D47D926AB8
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231312e302f32342d3234203d3e203237373437.roa
Signing time:             Fri 30 May 2025 18:20:39 +0000
ROA not before:           Fri 30 May 2025 18:15:39 +0000
ROA not after:            Fri 29 May 2026 18:20:39 +0000
asID:                     27747
IP address blocks:        200.115.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 20:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c8:7c:6f:9b:ff:2c:ee:1d:3c:de:d3:b5:fd:15:d4:7d:92:6a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: May 30 18:15:39 2025 GMT
            Not After : May 29 18:20:39 2026 GMT
        Subject: CN=2D3AD054A4196EEE5A9973EA58C0A09FA657AF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:1f:76:8a:de:c6:77:03:15:f2:b3:a6:1d:
                    46:e8:1e:ef:c5:67:77:f4:50:80:6d:42:98:5a:1c:
                    06:be:c8:d1:a4:9d:95:4f:cf:85:a0:a5:eb:fb:14:
                    0f:f7:43:02:14:78:17:96:ff:8b:19:7e:ce:4d:49:
                    b8:57:c9:ed:80:8b:f5:3f:97:7a:c4:f9:12:02:ee:
                    7e:ab:d8:42:e3:13:d0:df:77:f0:b9:99:17:48:9d:
                    d3:60:c2:ea:0f:82:af:29:db:68:0a:8a:3b:cb:40:
                    9f:10:15:b0:2e:80:42:5f:4f:4b:37:ce:a8:33:0a:
                    21:2c:33:8d:b1:99:ef:55:07:68:f4:4a:c5:c8:9c:
                    c9:91:8b:81:02:27:f4:b9:16:53:1f:61:c0:30:a7:
                    4e:f9:0f:2a:df:40:a7:1f:74:36:7a:fc:47:07:6c:
                    9c:74:66:a6:36:a9:85:94:8d:8a:7e:f6:c8:ec:07:
                    05:7f:7f:92:17:46:71:df:24:ae:8b:9e:57:15:cf:
                    f1:be:38:30:a3:e3:a4:c2:49:eb:e5:58:79:9d:b4:
                    3c:4c:b0:3a:9b:f8:4a:79:07:46:1b:d6:cd:ba:9b:
                    e4:eb:95:1c:3e:b4:f5:3f:b3:b1:bc:c2:6e:4d:0f:
                    df:52:31:49:81:09:39:31:ba:27:8f:dc:2d:8b:1d:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3A:D0:54:A4:19:6E:EE:5A:99:73:EA:58:C0:A0:9F:A6:57:AF:52
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3231312e302f32342d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:f0:16:4c:42:2f:a1:9a:f9:fd:16:fe:d2:ca:9d:45:48:bf:
         65:75:11:7b:e9:7b:c1:12:8d:da:8e:66:4f:a7:c0:95:49:e5:
         e2:e1:89:6d:d0:25:23:c2:e4:25:e1:fb:52:f8:99:cf:0b:98:
         42:1e:6e:f2:9a:31:71:b3:f9:41:0c:93:a5:31:45:66:6d:8a:
         ad:65:7c:d0:31:e7:7b:a9:f4:27:87:de:f5:34:25:35:98:ea:
         d8:a5:48:70:53:0e:81:bd:19:8b:d0:6d:af:6c:b4:29:c2:0e:
         8a:73:b9:c9:d6:17:df:0c:d8:0a:50:74:ba:d3:fc:52:7d:c9:
         c3:95:81:8b:ac:29:21:6b:79:b1:db:1c:40:a9:17:bc:3b:0f:
         93:56:fd:ba:11:51:40:d3:20:8f:0b:60:cb:c7:96:36:49:9a:
         b5:b2:67:3a:45:ec:59:b5:94:45:66:58:8c:6c:5a:05:4b:de:
         c4:d2:b6:b4:a9:02:6a:ac:dc:c6:12:1d:5d:28:12:6c:dd:6a:
         ef:f7:52:66:eb:2a:f2:e1:06:16:dc:64:63:ba:21:4d:0a:ca:
         7c:7b:8f:32:c3:ec:90:e8:bd:66:5e:e7:b6:4d:c8:81:5a:0f:
         ff:41:59:e1:6e:e8:b6:06:d1:3e:bd:1f:00:17:ea:63:c2:40:
         13:18:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:52:32 2025 by rpki-client