Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS273140.roa
File:                     AS273140.roa (raw, json)
Hash identifier:          L3lGM/Mvp5QMRfuCX8BaKL8utoHB745enQdABPUtwFw=
Subject key identifier:   6E:B2:3B:2E:DD:89:DD:EC:3E:43:4A:74:70:51:D3:27:C9:AA:62:51
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       0E85418D7114654FDA39ABD06AE7663D93C42051
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS273140.roa
Signing time:             Mon 19 May 2025 20:50:00 +0000
ROA not before:           Mon 19 May 2025 20:45:00 +0000
ROA not after:            Mon 18 May 2026 20:50:00 +0000
asID:                     273140
IP address blocks:        200.7.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 11:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:85:41:8d:71:14:65:4f:da:39:ab:d0:6a:e7:66:3d:93:c4:20:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: May 19 20:45:00 2025 GMT
            Not After : May 18 20:50:00 2026 GMT
        Subject: CN=6EB23B2EDD89DDEC3E434A747051D327C9AA6251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:78:c8:15:67:c2:dc:23:51:5f:ef:39:39:
                    d2:c3:1f:89:0e:44:73:e5:73:02:10:ac:f7:0a:6e:
                    2d:a7:b6:8f:30:0a:f7:b0:68:ec:1b:f2:aa:9c:f0:
                    55:ed:79:ad:f9:08:67:44:00:ec:e8:e2:7e:a1:f2:
                    3c:02:60:73:1e:b5:3a:e6:ec:76:a4:e6:54:07:db:
                    fe:af:d6:eb:7f:61:ef:ab:3b:1e:4d:14:79:16:bf:
                    85:1f:ca:cd:ba:ba:34:87:11:0e:08:8e:46:62:4b:
                    d5:97:63:2c:83:75:fa:b8:28:4f:62:dd:bd:fe:43:
                    d8:4b:1d:c0:c8:ea:8d:8c:9a:ad:91:00:b0:8a:a5:
                    31:1c:e4:c6:3c:2e:60:e3:26:f8:d9:65:18:a3:44:
                    be:b6:49:5b:a5:b6:59:20:4d:2a:49:8c:1c:5e:cc:
                    69:fe:29:bf:7d:9b:d8:0e:b1:94:15:c4:c6:d3:e8:
                    73:f1:b7:91:db:a0:26:12:46:7e:7e:93:cb:92:78:
                    aa:74:e9:2a:f1:3b:8b:f4:89:82:28:04:d0:ac:60:
                    97:65:08:bd:1a:fd:87:95:d3:29:1c:26:53:5b:bb:
                    7b:4b:0d:43:9c:1e:7c:ed:fc:24:f1:76:28:cb:d4:
                    74:0d:81:20:ee:0f:ad:da:0f:cb:5f:16:3c:a8:67:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B2:3B:2E:DD:89:DD:EC:3E:43:4A:74:70:51:D3:27:C9:AA:62:51
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS273140.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e1:53:65:93:d8:06:0f:8f:7e:db:54:0f:c8:26:a3:90:a2:
         a0:a4:03:12:cb:37:ed:35:9d:49:23:18:1c:0d:79:ce:35:6b:
         5c:18:e6:cb:59:fb:7a:87:fb:39:5c:d4:04:cf:e9:f9:2f:36:
         89:ec:19:cb:26:49:52:f9:68:e2:d6:a3:49:eb:4c:47:de:07:
         60:3e:c6:b4:aa:ef:cd:37:98:13:28:3f:31:e8:78:01:8c:f6:
         f9:2a:41:f7:35:66:01:a3:15:9a:af:c8:51:29:02:5d:a5:e0:
         33:6f:ba:69:14:b6:bc:c8:ca:28:38:46:91:64:05:27:79:59:
         06:9e:46:23:ef:87:82:93:d0:4d:1c:8a:ff:e9:19:da:9c:a2:
         0a:05:55:55:1f:be:97:4b:55:9a:ca:96:b6:c6:7f:b3:a5:18:
         2c:35:0b:4d:9f:de:04:fa:93:c0:a9:4e:a4:82:0f:b7:35:77:
         26:b5:50:31:99:26:a2:8f:6b:2e:13:6c:e0:8e:af:5f:00:21:
         2b:74:e2:a0:97:32:7a:7e:bc:f4:eb:8b:45:0a:82:3f:a9:d0:
         82:8c:47:64:b8:3b:b7:0a:5f:0e:e7:e2:7d:1f:dc:b4:40:79:
         f9:69:82:52:5c:a6:97:1b:59:d9:c4:88:27:97:7d:84:e9:aa:
         52:11:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:08:50 2025 by rpki-client