Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32332d3234203d3e20323732303237.roa
File:                     3230302e33352e3135322e302f32332d3234203d3e20323732303237.roa (raw, json)
Hash identifier:          /1W0pyAi/2feT9m7qEMIjGdf2UvjoTWUtwTfO8pDvyM=
Subject key identifier:   AC:44:F2:1E:10:CE:95:2F:35:9F:00:8D:DC:42:7E:8C:F5:D2:03:5B
Certificate issuer:       /CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28
Certificate serial:       679D5EFD4AD9E022E3D63D323BA6E41E428AF2AC
Authority key identifier: 97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32332d3234203d3e20323732303237.roa
Signing time:             Tue 12 Aug 2025 08:15:02 +0000
ROA not before:           Tue 12 Aug 2025 08:10:02 +0000
ROA not after:            Tue 11 Aug 2026 08:15:02 +0000
asID:                     272027
IP address blocks:        200.35.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9d:5e:fd:4a:d9:e0:22:e3:d6:3d:32:3b:a6:e4:1e:42:8a:f2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28
        Validity
            Not Before: Aug 12 08:10:02 2025 GMT
            Not After : Aug 11 08:15:02 2026 GMT
        Subject: CN=AC44F21E10CE952F359F008DDC427E8CF5D2035B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ac:b8:35:de:02:2a:37:06:18:6e:08:89:ca:
                    4e:b0:95:22:64:87:9a:42:87:89:a0:0d:7c:db:72:
                    6e:6c:73:c7:ef:fe:c2:ed:3b:3c:0c:de:f5:b5:a0:
                    bb:3b:9d:be:75:a2:f0:c5:79:a0:0b:56:51:ed:43:
                    82:71:fc:f1:5f:e5:5a:4e:9f:f8:d7:23:71:a1:ec:
                    e9:07:ff:57:10:75:74:b5:a3:38:c5:f0:b9:bb:a8:
                    97:1c:e4:44:ef:b9:17:62:60:37:99:85:f7:b5:76:
                    ff:0c:c2:2a:98:34:00:e1:39:68:85:97:af:fa:0a:
                    46:5f:14:be:df:67:73:df:81:65:68:61:f5:52:d1:
                    a8:d0:89:6d:f0:4e:ef:da:d7:f3:8d:7d:15:db:97:
                    4f:34:e6:4a:4f:dd:30:a3:7e:9a:96:49:6a:e9:c2:
                    64:9c:d7:f8:91:35:bc:81:36:55:33:e9:bd:c6:d8:
                    98:66:8a:1f:6b:12:f2:dc:6f:d4:ed:10:39:f8:c8:
                    cd:dc:e7:07:a9:44:30:58:7c:72:a9:00:4c:31:3c:
                    c5:8c:67:f1:01:67:2d:10:82:14:f2:d6:12:77:71:
                    d5:6f:10:2a:d9:dc:03:d5:6d:fa:77:ee:3e:1b:64:
                    7f:be:57:d3:b8:06:36:0b:5f:78:30:65:d5:d5:20:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:44:F2:1E:10:CE:95:2F:35:9F:00:8D:DC:42:7E:8C:F5:D2:03:5B
            X509v3 Authority Key Identifier:
                keyid:97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32332d3234203d3e20323732303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:8b:c4:da:3b:c2:4f:48:a5:1c:fa:ec:09:9c:f8:2a:3c:55:
         89:da:80:c8:4c:00:86:36:e0:8f:78:cf:fc:60:df:47:fe:31:
         2d:9d:8a:a9:8a:b6:35:27:94:2f:85:57:f6:d3:ca:e3:e5:97:
         9b:42:d6:aa:29:54:ba:99:75:57:45:92:a7:07:66:19:52:c4:
         aa:fa:9c:f1:25:12:f4:31:62:71:bf:c2:73:3a:c9:4c:83:a9:
         6c:56:7c:f5:6a:e6:92:b7:14:2b:09:03:3c:70:e6:07:b9:32:
         64:1b:24:80:9c:fb:71:85:12:0a:0c:1a:c8:f1:74:0c:d9:f4:
         b6:24:e9:38:e6:98:e0:00:77:99:f5:d1:1b:19:d0:d7:16:d8:
         06:34:d7:11:f8:9a:eb:b4:03:e3:6d:44:93:48:94:fa:5b:93:
         7a:65:6d:0a:16:43:60:bb:da:47:b3:e3:0a:3e:aa:56:92:cb:
         42:6b:25:06:96:af:ec:34:28:b0:ba:f7:cb:8d:b0:5f:30:b4:
         f3:53:89:22:6c:94:10:d9:d7:80:46:9f:18:94:a7:56:a5:30:
         d9:74:fb:22:27:ca:20:f5:92:80:9f:1f:71:9f:48:6e:68:9c:
         98:e9:8b:74:3f:54:cd:f5:9d:2e:46:4e:2f:d0:d2:5e:5b:0e:
         f1:f8:81:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:42:20 2025 by rpki-client