Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40E1947D5B850C316B63CD41DA6D54232DDEAB9348B08CEF76090D2AA1F14C45/0/3230302e372e31352e302f32342d3234203d3e203238303334.roa
File:                     3230302e372e31352e302f32342d3234203d3e203238303334.roa (raw, json)
Hash identifier:          KAeGo1iiqlixngNShzSA4SQBJ2vTJVT1BqJsHEJ3iaA=
Subject key identifier:   35:9D:36:2B:E3:0B:F8:E3:3C:45:C2:66:28:E7:33:20:14:F2:BF:C3
Certificate issuer:       /CN=A6A9BBBAFED04F24DA97A13528387FE9F451EDDA
Certificate serial:       0CE53B36372E7069DBA908112DDC817FC416F779
Authority key identifier: A6:A9:BB:BA:FE:D0:4F:24:DA:97:A1:35:28:38:7F:E9:F4:51:ED:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6A9BBBAFED04F24DA97A13528387FE9F451EDDA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40E1947D5B850C316B63CD41DA6D54232DDEAB9348B08CEF76090D2AA1F14C45/0/3230302e372e31352e302f32342d3234203d3e203238303334.roa
Signing time:             Wed 10 Sep 2025 19:10:00 +0000
ROA not before:           Wed 10 Sep 2025 19:05:00 +0000
ROA not after:            Wed 09 Sep 2026 19:10:00 +0000
asID:                     28034
IP address blocks:        200.7.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40E1947D5B850C316B63CD41DA6D54232DDEAB9348B08CEF76090D2AA1F14C45/0/A6A9BBBAFED04F24DA97A13528387FE9F451EDDA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40E1947D5B850C316B63CD41DA6D54232DDEAB9348B08CEF76090D2AA1F14C45/0/A6A9BBBAFED04F24DA97A13528387FE9F451EDDA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6A9BBBAFED04F24DA97A13528387FE9F451EDDA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e5:3b:36:37:2e:70:69:db:a9:08:11:2d:dc:81:7f:c4:16:f7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6A9BBBAFED04F24DA97A13528387FE9F451EDDA
        Validity
            Not Before: Sep 10 19:05:00 2025 GMT
            Not After : Sep  9 19:10:00 2026 GMT
        Subject: CN=359D362BE30BF8E33C45C26628E7332014F2BFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:38:0b:d3:25:f5:c3:29:17:d4:38:40:1c:ca:
                    11:2f:5f:27:5c:94:61:98:26:83:c9:05:ce:14:bb:
                    9f:03:02:6a:37:66:c3:af:ec:2a:5e:e1:2c:9d:11:
                    23:5a:c1:b8:f4:0d:f7:65:dd:6a:8b:b1:15:6a:06:
                    93:65:fa:5a:db:7e:06:43:4b:8e:72:c6:82:05:e6:
                    07:e6:b6:21:b9:1f:e5:18:ab:79:43:9f:20:86:17:
                    30:72:5f:1c:50:8c:72:4e:ea:58:fa:19:2c:03:f8:
                    48:a9:20:ec:f8:f0:77:bb:aa:9c:75:5b:a0:7c:68:
                    c2:dc:e4:58:58:80:58:e2:cf:34:82:65:98:a2:b4:
                    8c:2f:48:25:e5:a3:a4:30:ab:f2:fa:9d:fd:72:19:
                    19:60:b3:40:64:99:98:28:c3:35:b5:af:28:2e:82:
                    af:a4:49:94:88:04:07:67:86:9a:1d:1b:60:72:13:
                    a3:54:51:1e:be:55:cd:6d:b9:e7:ae:ee:8e:08:63:
                    d0:bc:d0:98:36:4a:eb:56:55:cf:5f:73:0e:07:b6:
                    01:6c:26:12:88:97:27:cc:af:f5:29:99:e4:f2:8a:
                    c0:eb:dd:b9:fd:9c:06:7c:c9:ce:89:e3:60:5b:02:
                    b4:0e:c5:a9:af:75:b1:89:fd:65:48:a3:d0:17:3f:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9D:36:2B:E3:0B:F8:E3:3C:45:C2:66:28:E7:33:20:14:F2:BF:C3
            X509v3 Authority Key Identifier:
                keyid:A6:A9:BB:BA:FE:D0:4F:24:DA:97:A1:35:28:38:7F:E9:F4:51:ED:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40E1947D5B850C316B63CD41DA6D54232DDEAB9348B08CEF76090D2AA1F14C45/0/A6A9BBBAFED04F24DA97A13528387FE9F451EDDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6A9BBBAFED04F24DA97A13528387FE9F451EDDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40E1947D5B850C316B63CD41DA6D54232DDEAB9348B08CEF76090D2AA1F14C45/0/3230302e372e31352e302f32342d3234203d3e203238303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:1a:78:0f:b2:3f:74:63:e5:08:32:ba:1e:2a:a3:d5:dc:
         85:3a:cc:18:77:c0:56:5b:97:f3:0a:0c:ef:17:6d:c4:05:a4:
         33:52:49:70:73:a0:d1:ba:27:9f:d4:1f:15:73:14:e8:54:92:
         3f:a5:1f:8c:83:1d:24:3f:c0:51:ee:85:11:94:7c:e2:b6:b7:
         72:85:76:c9:79:ec:82:3d:f5:b7:5d:e3:99:f5:b6:82:3c:51:
         0b:0a:e0:6a:df:a6:f4:64:4f:62:c8:84:15:ac:54:b7:93:0b:
         dc:79:ff:6c:88:85:87:f2:60:f4:5f:44:00:15:cc:75:55:3a:
         62:4b:46:fa:88:8a:c0:90:63:71:de:14:26:11:3e:18:1f:fa:
         fc:6b:9b:5b:4c:c7:11:9f:4c:35:56:97:9c:e4:f7:70:8c:53:
         fc:bb:0e:8b:bc:e8:5d:b0:88:49:f1:97:50:64:ba:ba:a3:94:
         d3:35:9e:e3:b5:be:0f:13:e7:de:d1:10:32:31:b7:e6:c0:a3:
         80:9c:26:11:94:5c:93:e2:d0:eb:5f:9a:ad:31:22:b2:8d:db:
         4b:4f:3f:21:48:f9:4c:73:43:0b:88:e9:dd:46:3a:c8:64:f9:
         2b:3b:b9:d3:70:82:f2:2b:55:ea:fb:ad:bb:69:38:76:38:c1:
         3c:56:c4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:24:16 2025 by rpki-client