Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139322e302f32312d3234203d3e20323632313931.roa
File:                     3230302e3131322e3139322e302f32312d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          1yqNfsLIDSZlnk6oWdHe7AXlAtK4F6KdtXXOmidPHuI=
Subject key identifier:   AC:30:EC:64:54:19:FD:53:6F:13:63:58:D8:98:13:B3:D0:24:35:30
Certificate issuer:       /CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
Certificate serial:       2B7C5E43B899F0339892667E15CA51A8EF1A88C0
Authority key identifier: 85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139322e302f32312d3234203d3e20323632313931.roa
Signing time:             Mon 07 Jul 2025 16:55:00 +0000
ROA not before:           Mon 07 Jul 2025 16:50:00 +0000
ROA not after:            Mon 06 Jul 2026 16:55:00 +0000
asID:                     262191
IP address blocks:        200.112.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl
                          rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Jul 2025 08:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7c:5e:43:b8:99:f0:33:98:92:66:7e:15:ca:51:a8:ef:1a:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
        Validity
            Not Before: Jul  7 16:50:00 2025 GMT
            Not After : Jul  6 16:55:00 2026 GMT
        Subject: CN=AC30EC645419FD536F136358D89813B3D0243530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:2c:2e:8b:c0:cc:20:c5:16:a9:18:55:45:
                    cd:41:d6:ad:ae:c8:aa:44:4b:7a:ea:6d:16:25:d3:
                    52:65:0e:37:b6:79:fb:3d:9d:4b:83:2b:12:9d:2b:
                    9b:f8:55:57:1d:a9:01:c4:9f:b6:27:1b:b4:22:ce:
                    ed:5a:fb:d4:ef:0d:c5:42:7c:40:a5:ac:05:ab:94:
                    50:fc:2e:e3:44:10:7d:bc:93:b7:0c:67:14:0f:e1:
                    d6:dd:f1:8e:33:67:a6:8b:57:4b:f4:36:cc:50:b1:
                    68:f6:17:ce:81:97:fc:4c:dc:fb:f6:2e:3c:50:13:
                    11:91:46:8e:05:dd:7a:c9:21:f2:3f:a4:02:37:56:
                    0f:ce:6a:7b:45:db:5f:97:67:f5:30:63:05:a7:8f:
                    47:93:15:ea:ad:b6:05:2e:25:26:62:07:fa:ab:2f:
                    cd:e5:55:0c:61:78:a9:7c:82:ce:9e:3e:79:b8:47:
                    5e:6d:77:6c:4d:74:d6:42:10:9c:73:95:0a:85:9b:
                    24:64:ac:62:c0:03:11:d8:23:95:b4:39:41:c0:82:
                    de:40:3a:0d:80:cc:0e:1d:a0:13:de:aa:e4:ab:4b:
                    bc:31:a2:f5:55:c0:95:a4:38:70:ce:54:2c:79:f9:
                    9c:f9:6b:e4:58:86:49:f1:23:e6:3e:83:4e:63:c6:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:30:EC:64:54:19:FD:53:6F:13:63:58:D8:98:13:B3:D0:24:35:30
            X509v3 Authority Key Identifier:
                keyid:85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139322e302f32312d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:6a:17:73:9c:24:4f:85:89:16:e3:15:92:2b:ac:8e:97:bf:
         12:a0:72:78:a6:b3:fc:25:72:59:44:c0:0e:c3:63:e5:b2:d5:
         9b:89:12:b9:9c:96:d2:dd:d4:5b:4e:66:b9:e1:97:8a:ab:16:
         ae:8a:8d:b9:d1:b3:bc:57:dc:38:6b:1c:31:25:d0:ed:eb:19:
         9e:6f:9e:2c:35:b7:5f:5b:90:0d:05:c2:b8:26:b8:ba:2c:cb:
         1b:39:13:ec:1d:0c:9b:c2:ee:18:24:bf:e4:42:08:e0:8a:c0:
         a5:b5:d8:bd:6d:c3:11:4c:b4:da:8f:a5:50:27:f7:cf:f3:34:
         66:17:1d:5f:62:7e:6b:8a:a5:24:b4:96:6d:21:df:e7:4f:35:
         26:6b:e5:84:a4:46:86:1a:ed:37:4e:76:50:b6:17:02:1b:5d:
         7c:ff:1f:26:43:9b:96:b5:d1:3c:1a:e6:45:f5:d9:b9:cd:1d:
         ca:9f:f0:5c:23:a5:1f:42:16:1e:49:aa:92:7e:a0:eb:d9:c0:
         d8:46:1c:e4:26:d6:02:e1:64:bc:b5:73:14:a4:89:29:f7:f6:
         79:b1:8d:a7:ca:8f:7e:74:d4:c3:1d:b8:db:b5:f9:e3:fd:e1:
         b4:b9:37:d8:e0:a3:5e:2b:3f:a9:32:fa:7d:03:c7:d4:27:83:
         6e:df:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:53:11 2025 by rpki-client