Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232312e302f32342d3234203d3e20323636393034.roa
File:                     3230302e3131322e3232312e302f32342d3234203d3e20323636393034.roa (raw, json)
Hash identifier:          l7HHafmpQAspzhIE9eWLldutcDznPVN72k9pDlJ3A4Q=
Subject key identifier:   85:82:30:E1:6E:9A:6F:94:E6:1B:16:7E:F0:13:71:DE:D3:72:5F:83
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       7F3D006B8B6ED968B9CF1482A25FF246E8CD52C5
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232312e302f32342d3234203d3e20323636393034.roa
Signing time:             Fri 29 Aug 2025 17:41:46 +0000
ROA not before:           Fri 29 Aug 2025 17:36:46 +0000
ROA not after:            Fri 28 Aug 2026 17:41:46 +0000
asID:                     266904
IP address blocks:        200.112.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 08:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3d:00:6b:8b:6e:d9:68:b9:cf:14:82:a2:5f:f2:46:e8:cd:52:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Aug 29 17:36:46 2025 GMT
            Not After : Aug 28 17:41:46 2026 GMT
        Subject: CN=858230E16E9A6F94E61B167EF01371DED3725F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:1d:d1:ab:f0:7b:7a:f2:4c:13:cd:37:70:
                    74:bf:9c:4c:6c:13:3b:18:3c:ae:7a:50:d1:57:48:
                    fd:5e:75:0f:b1:ab:30:19:76:4c:28:f1:71:f3:98:
                    98:2a:7d:7b:cb:d3:2c:b9:d5:41:e7:48:a5:87:fc:
                    3d:d2:f0:69:01:0b:06:25:62:c4:14:75:e5:76:45:
                    41:fc:68:46:1a:7c:3c:0b:c0:6b:a1:d0:96:5f:8c:
                    df:4b:c0:53:83:53:30:18:89:72:62:3f:dc:27:7f:
                    de:1e:25:1d:7c:b3:04:c0:c7:97:15:5c:e9:f6:da:
                    c9:32:04:b7:95:8c:fe:81:16:82:02:c0:d1:ab:fa:
                    87:f5:c3:e9:26:ab:09:b7:2e:a9:f8:56:bd:00:0b:
                    ca:8f:80:fb:91:07:85:04:33:ac:98:92:ca:73:59:
                    36:d1:7c:64:db:5b:54:35:e7:e9:23:79:9e:73:b9:
                    3f:c5:55:84:88:7d:9f:6e:86:35:fc:9d:d5:fd:19:
                    81:98:3c:04:c4:2d:cd:b7:4f:ea:1f:13:67:74:9d:
                    93:8e:7a:f1:6b:2b:8f:13:6a:4f:5f:0a:1d:95:48:
                    22:2e:25:6e:1d:9d:f8:e7:13:58:f6:a4:70:e6:1a:
                    97:78:e6:2a:0c:22:2b:4b:52:04:98:15:1c:25:a0:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:82:30:E1:6E:9A:6F:94:E6:1B:16:7E:F0:13:71:DE:D3:72:5F:83
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232312e302f32342d3234203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:8f:87:1b:e9:a9:53:8d:c1:11:34:dd:81:2f:34:dc:d5:
         b4:3e:0d:4a:c9:65:c5:6a:63:dc:91:0a:d4:87:55:57:8c:26:
         84:c4:76:73:e0:62:fa:24:bb:a4:3b:9b:9e:6b:ad:7c:a3:bd:
         f5:ba:2a:e0:69:ad:50:f5:09:c8:46:1b:7e:00:57:c9:3e:f3:
         51:c2:32:6d:37:67:2e:25:f7:29:31:7f:96:1f:3b:48:b9:99:
         a6:93:e8:2a:72:18:68:b1:87:2d:76:cc:9f:1c:6b:8b:4a:7f:
         64:61:5b:5d:d8:64:1c:ff:64:04:0d:ff:d1:bc:a8:4c:ef:8d:
         6d:8f:56:58:34:58:a5:3c:5f:6b:81:f5:31:3d:c3:34:a8:be:
         12:cf:91:60:1f:fa:91:2f:c9:87:c9:7c:03:c4:8b:cf:ed:e2:
         c8:5c:fb:0a:66:98:c6:88:25:a1:4a:22:f5:45:29:e9:d5:f2:
         ab:7b:bb:4a:77:1d:9a:1a:9d:2a:b7:24:20:67:3c:32:23:43:
         69:dd:aa:92:a7:df:e8:0e:4d:19:96:60:79:34:b4:6a:1a:8f:
         1a:ed:f0:94:29:f9:ee:98:5b:62:8e:64:66:93:e7:6d:37:be:
         f2:05:76:6a:eb:40:12:7e:07:15:bf:0b:2b:90:34:99:64:fe:
         d4:fe:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:15:03 2025 by rpki-client