Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3232342e302f31392d3234203d3e203237373437.roa
File:                     3230302e3131352e3232342e302f31392d3234203d3e203237373437.roa (raw, json)
Hash identifier:          1q3PW0eGkg0bVx0jTQ2MjDNy4u74h8dJH/Nt0jfulnY=
Subject key identifier:   86:69:00:AD:08:67:22:74:37:83:C2:F3:D2:B9:65:C2:D1:1B:35:C2
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       06FB96A7DAA45D70720FA77074EEEA2C448F4F76
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3232342e302f31392d3234203d3e203237373437.roa
Signing time:             Fri 30 May 2025 18:20:39 +0000
ROA not before:           Fri 30 May 2025 18:15:39 +0000
ROA not after:            Fri 29 May 2026 18:20:39 +0000
asID:                     27747
IP address blocks:        200.115.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 20:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fb:96:a7:da:a4:5d:70:72:0f:a7:70:74:ee:ea:2c:44:8f:4f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: May 30 18:15:39 2025 GMT
            Not After : May 29 18:20:39 2026 GMT
        Subject: CN=866900AD086722743783C2F3D2B965C2D11B35C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:57:2e:be:e7:d5:58:e8:e4:bc:26:a3:f6:
                    aa:ec:eb:3a:9b:ad:1a:46:ef:fc:dd:0f:36:cf:10:
                    75:10:a4:0b:98:94:f5:51:a1:bb:07:c8:3f:90:ca:
                    0e:e1:79:44:1b:1b:74:7e:45:a2:bf:a9:48:45:59:
                    dc:2b:35:7a:00:b3:14:58:b7:c0:0b:1b:0a:d2:f3:
                    60:b8:38:94:c6:08:01:d6:ee:71:be:bb:95:c9:19:
                    12:0c:da:cd:83:4b:15:7b:2e:b1:61:75:2c:c1:f4:
                    d2:fc:b1:93:57:0e:ab:02:3f:9e:bb:5e:dc:cb:be:
                    15:24:72:f1:25:6e:35:a0:ff:ff:c2:aa:ec:81:3a:
                    9f:d9:51:41:b1:bf:00:5e:f4:6c:e1:c1:26:17:34:
                    8e:33:92:47:73:fd:eb:79:72:12:fe:cf:df:5b:63:
                    09:a6:7c:86:f5:67:a9:94:31:f4:3d:b2:6b:5c:ad:
                    a9:28:3a:7b:cf:af:07:ed:3c:5e:be:52:50:ad:e9:
                    80:d2:60:58:7e:c3:9c:65:ed:75:df:23:be:eb:09:
                    10:68:fa:e3:44:fb:c4:da:ff:01:11:23:49:19:bb:
                    3b:9a:03:ad:49:89:9a:10:25:e8:c3:2c:8d:1c:6d:
                    6e:d6:6c:06:2e:ae:bf:da:1c:12:56:1e:74:8f:5e:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:69:00:AD:08:67:22:74:37:83:C2:F3:D2:B9:65:C2:D1:1B:35:C2
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3232342e302f31392d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ba:08:fe:60:d8:e6:78:98:db:76:07:11:c7:b2:8c:3e:d8:3b:
         7d:f7:b0:dc:42:3b:b7:49:cc:7a:b6:e1:f8:e2:42:d8:7d:58:
         3f:ff:b9:a4:d3:bd:a4:c6:b4:87:35:ca:61:31:84:b4:5f:4b:
         f8:69:d7:1c:05:22:10:00:a2:6d:16:2b:34:ba:14:c8:ba:68:
         70:90:fe:34:04:08:39:00:2a:3b:5a:6d:eb:92:0e:59:0d:68:
         1c:6a:14:6c:68:d0:bb:65:a4:77:cf:db:91:9b:6e:9f:72:71:
         2e:64:09:d7:c4:11:27:73:cf:9b:dc:67:24:67:9e:52:dd:14:
         1e:57:d9:d4:92:8e:65:8f:1e:c2:0a:77:ad:ed:71:ea:59:f7:
         d1:97:a8:80:2a:b2:9e:1c:3e:e9:f9:91:cd:47:7a:ef:e6:61:
         95:84:8f:97:13:90:c0:6f:d3:1b:8c:c4:8e:ee:53:d6:1a:4b:
         93:30:a7:2b:2e:97:8a:8b:b9:23:da:66:59:81:fd:26:94:2d:
         b1:e2:b2:cf:6d:82:e0:0f:84:2b:2d:d4:61:3e:22:84:4d:44:
         e4:7e:55:53:7d:59:e3:68:63:e7:69:4c:fd:c9:81:7d:86:9c:
         e0:9f:76:67:5a:19:3e:a3:9a:b2:85:d8:84:e1:a0:ff:ea:03:
         a4:ff:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:30:23 2025 by rpki-client