Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32342d3234203d3e20323733393432.roa
File:                     3230302e3130372e36382e302f32342d3234203d3e20323733393432.roa (raw, json)
Hash identifier:          18Jt6Wq8r5rWIPs9AFDi2Vsn1LcZrjLUiPEAI+51ohA=
Subject key identifier:   88:B8:A8:92:7D:B1:E2:B2:D8:74:D9:6C:84:FC:16:1C:87:A0:99:E0
Certificate issuer:       /CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
Certificate serial:       6ABED3194D44F55A2660462B8AFC28B4C75A39C9
Authority key identifier: 93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32342d3234203d3e20323733393432.roa
Signing time:             Fri 23 May 2025 03:00:01 +0000
ROA not before:           Fri 23 May 2025 02:55:01 +0000
ROA not after:            Fri 22 May 2026 03:00:01 +0000
asID:                     273942
IP address blocks:        200.107.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:be:d3:19:4d:44:f5:5a:26:60:46:2b:8a:fc:28:b4:c7:5a:39:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
        Validity
            Not Before: May 23 02:55:01 2025 GMT
            Not After : May 22 03:00:01 2026 GMT
        Subject: CN=88B8A8927DB1E2B2D874D96C84FC161C87A099E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:a7:96:60:79:58:a5:ff:db:18:08:25:29:
                    25:13:01:24:0b:89:8a:89:c0:a3:01:0b:88:de:44:
                    d8:d0:64:c1:1b:89:db:e9:1a:71:88:76:8e:e3:e0:
                    69:d1:f1:e4:09:b0:89:56:d7:d5:0e:c1:1f:59:75:
                    a9:f7:f8:16:b5:0f:17:67:80:45:ef:53:45:c0:38:
                    c2:2b:f4:25:e2:3f:d9:82:6f:5a:1b:d5:a4:1c:50:
                    2e:53:52:55:a8:d7:bf:17:41:38:2f:3a:30:25:f1:
                    ca:f3:a7:b9:4e:d0:ad:2b:98:80:87:50:ae:6e:cc:
                    e7:bd:90:7a:b6:54:c6:03:d0:17:52:f3:8e:7e:1d:
                    ba:a3:9a:c3:15:47:ef:ad:6a:bd:0b:d0:47:32:bd:
                    b2:c9:b6:80:33:f8:a8:3a:95:8e:ba:cb:82:22:1b:
                    01:e6:97:b1:17:ce:23:8a:27:10:05:d0:09:b4:03:
                    33:b3:04:29:f8:8c:8e:25:97:52:09:01:86:06:d7:
                    90:a7:83:cd:19:69:c8:6c:be:88:f2:8d:a9:72:33:
                    19:d7:6d:37:de:a0:10:6c:02:05:4b:f9:c8:fa:15:
                    bb:63:48:67:3b:05:2e:a2:7e:35:ef:1f:ac:56:9a:
                    5a:a0:ca:dc:68:f8:08:af:fa:1a:04:7b:c8:ec:90:
                    eb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B8:A8:92:7D:B1:E2:B2:D8:74:D9:6C:84:FC:16:1C:87:A0:99:E0
            X509v3 Authority Key Identifier:
                keyid:93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e36382e302f32342d3234203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:75:dc:f1:17:69:1f:be:d1:4a:23:14:60:f8:3a:a0:64:
         1a:a6:1b:65:3e:16:ff:82:4c:5a:01:0b:20:e1:0a:a7:f1:ff:
         b0:09:22:87:1d:39:6b:5e:a3:80:83:c5:d1:03:c2:8f:d2:90:
         ef:ac:14:27:d1:28:ba:18:e5:0b:df:83:27:da:65:02:7d:26:
         c5:56:94:0d:f6:01:7b:0a:28:e5:67:4e:af:db:9e:c0:a5:08:
         b5:d2:4e:95:e4:07:f7:49:34:07:66:4e:0a:46:a8:54:3d:83:
         73:d2:4b:25:ec:53:80:f7:ae:fb:71:db:42:88:1a:7d:23:bc:
         d9:91:67:c9:3c:d8:28:73:07:ec:20:ad:a8:1a:55:2b:06:e2:
         71:c0:b1:f4:f0:a7:7d:6d:e1:17:fa:4d:3e:cf:fb:4e:fe:39:
         dc:70:16:b6:a6:8d:f5:11:2d:80:ea:8b:23:ec:b4:37:9c:f3:
         50:8a:5c:3d:a3:36:f6:4b:5f:a4:38:6b:b5:96:4e:70:04:f0:
         c4:18:86:a4:7f:1b:29:f1:ed:22:31:70:18:e6:4b:8b:b8:26:
         9b:bb:c7:2e:81:35:2b:ba:28:4f:fc:ae:3c:94:69:d9:57:3d:
         0e:ad:26:c2:23:b1:a8:13:17:e3:45:8f:ee:fa:e1:2c:1a:f1:
         c2:2e:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:53:28 2025 by rpki-client