Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31342e302f32342d3234203d3e20323635383434.roa
File:                     3230302e3131352e31342e302f32342d3234203d3e20323635383434.roa (raw, json)
Hash identifier:          Y58r6vtFAMiLcjsTq1ZLYn/ZS92k/jkgkjHx+aFeUGQ=
Subject key identifier:   82:C3:2B:44:3C:1F:5D:75:44:3C:9A:EA:53:87:BD:D5:32:5E:AA:32
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       20A0C314D40F4BB285689C57C56C124BF85F21FA
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31342e302f32342d3234203d3e20323635383434.roa
Signing time:             Tue 04 Feb 2025 17:59:06 +0000
ROA not before:           Tue 04 Feb 2025 17:54:06 +0000
ROA not after:            Tue 03 Feb 2026 17:59:06 +0000
asID:                     265844
IP address blocks:        200.115.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a0:c3:14:d4:0f:4b:b2:85:68:9c:57:c5:6c:12:4b:f8:5f:21:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Feb  4 17:54:06 2025 GMT
            Not After : Feb  3 17:59:06 2026 GMT
        Subject: CN=82C32B443C1F5D75443C9AEA5387BDD5325EAA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:78:d6:58:62:00:f9:72:a2:6d:0b:e1:79:17:
                    51:c8:5b:33:b6:11:7a:e5:26:d6:4a:f7:6a:c6:67:
                    26:78:51:29:09:7b:c2:10:57:9a:ac:be:8b:90:85:
                    17:97:6f:d2:e3:d1:42:8e:0f:a6:b9:d1:07:65:c1:
                    ac:fa:d8:ec:e5:2c:ef:df:26:1a:cd:9b:b4:83:6a:
                    71:24:47:95:02:cd:3d:e0:8c:bd:3c:09:2e:8a:8e:
                    4c:2f:47:37:d4:6b:1f:0f:f7:e0:88:43:58:7b:95:
                    c7:0c:1d:e8:5e:30:71:c6:2d:9c:3e:fd:db:b5:f8:
                    39:63:37:d6:3d:3f:b8:2c:24:b7:31:14:21:44:02:
                    47:e5:b6:b8:5d:40:b8:f0:3b:1f:e9:1d:f7:7d:de:
                    43:8f:5d:47:04:f7:fd:0b:2b:87:90:b4:46:23:bf:
                    d1:8c:20:46:78:0c:4d:3a:4a:c4:06:a9:ac:c7:61:
                    9f:ed:32:d2:57:a8:7c:40:11:c8:94:b6:87:5c:c8:
                    43:54:3a:98:6d:b4:bf:fe:de:b5:7d:ed:36:05:a2:
                    4a:51:94:a7:43:d6:75:c5:26:0b:fe:ab:f1:ed:38:
                    34:4e:2b:35:1f:51:7d:a7:14:50:bc:74:2e:a6:b4:
                    fd:de:05:a9:75:4a:8f:a0:aa:5f:e9:37:69:b6:a5:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C3:2B:44:3C:1F:5D:75:44:3C:9A:EA:53:87:BD:D5:32:5E:AA:32
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31342e302f32342d3234203d3e20323635383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:82:33:73:16:fd:b6:96:3e:eb:fb:cc:94:ca:11:45:ce:0d:
         c9:bf:0b:5b:c0:92:1e:d4:a0:5a:f9:6d:12:0a:2b:ae:72:17:
         9e:a1:ce:4a:67:b1:f3:03:bc:4b:75:a1:e2:7b:49:58:10:ce:
         11:95:a8:fc:5d:d2:ad:63:50:e2:d6:4e:f8:f5:8b:86:4c:c2:
         f2:6c:7a:ed:63:96:07:20:50:fc:2e:07:f4:9d:78:5a:54:d7:
         5c:e2:7b:84:28:07:78:d3:89:d1:ae:be:31:63:76:40:4f:49:
         bd:17:98:54:9f:ce:e7:ba:48:b6:0b:80:a5:32:eb:d9:66:bc:
         af:24:a1:9a:d3:5c:1b:41:e5:a5:5f:22:49:fb:02:6d:80:5b:
         62:18:19:1d:14:52:59:e8:8d:c3:53:8b:d3:d6:52:c1:2f:3b:
         25:06:5a:8f:02:19:7d:28:de:b9:eb:d7:54:c6:64:cf:96:f8:
         0c:2d:4d:af:40:5d:f1:87:42:d5:4d:05:70:ea:36:15:8b:31:
         67:4c:88:39:97:53:a4:f8:ca:94:d1:3a:a2:fa:cc:91:f6:ab:
         ff:a5:9c:15:8e:ca:2b:35:4d:41:6d:73:ba:db:14:c7:84:41:
         69:8f:20:d8:72:3a:70:14:66:a3:bc:46:d1:70:70:7b:72:e1:
         03:74:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:42 2025 by rpki-client