Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e37312e302f32342d3234203d3e20323733393432.roa
File:                     3230302e3130372e37312e302f32342d3234203d3e20323733393432.roa (raw, json)
Hash identifier:          V0yPw7T495RWaUPGmAYMQFJNvtUCyZ0+IoxZO7c3iXo=
Subject key identifier:   24:0C:B5:C2:4D:6E:F3:B2:81:56:49:56:23:F9:44:79:6D:DE:89:54
Certificate issuer:       /CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
Certificate serial:       747D5E7B0A2B6229D9EB353F76A008C4CDD29B00
Authority key identifier: 93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e37312e302f32342d3234203d3e20323733393432.roa
Signing time:             Fri 23 May 2025 03:00:00 +0000
ROA not before:           Fri 23 May 2025 02:55:00 +0000
ROA not after:            Fri 22 May 2026 03:00:00 +0000
asID:                     273942
IP address blocks:        200.107.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7d:5e:7b:0a:2b:62:29:d9:eb:35:3f:76:a0:08:c4:cd:d2:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
        Validity
            Not Before: May 23 02:55:00 2025 GMT
            Not After : May 22 03:00:00 2026 GMT
        Subject: CN=240CB5C24D6EF3B28156495623F944796DDE8954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:a1:a5:3c:24:4a:e4:b7:88:81:75:d6:0f:
                    38:65:75:a9:78:29:0a:3c:ce:3f:9e:ef:61:d6:78:
                    89:c9:e1:2a:e0:db:a3:d5:eb:16:b2:59:37:20:bb:
                    ca:ba:f7:83:b1:82:0c:0e:24:20:e0:35:85:be:80:
                    90:55:60:28:5b:db:ed:dd:dd:7d:33:e9:b9:bf:b1:
                    53:93:de:98:ef:c8:63:0b:b4:35:41:e8:d6:79:98:
                    85:f9:69:e7:31:f0:f7:cf:7b:26:55:57:2d:6a:da:
                    8c:29:da:4d:4f:46:ba:55:c2:20:74:d9:91:f6:e2:
                    98:fd:cf:46:ce:f4:9f:16:a8:a5:ee:a2:18:b0:ac:
                    55:bb:8d:a7:4c:b7:28:98:b6:9c:aa:5b:7e:b2:f7:
                    3f:d7:b2:80:2c:42:6b:3d:d6:35:7a:4c:de:b3:37:
                    76:49:86:16:13:3c:52:4f:df:55:ab:35:84:71:c1:
                    5d:c5:bc:ec:be:46:e3:a0:c2:60:df:ee:3a:fd:28:
                    b6:29:94:5f:83:a0:d7:63:9e:9d:d7:ec:0c:e4:0c:
                    c0:d5:d6:6f:d6:50:cb:7f:b5:9d:c5:97:af:83:93:
                    12:75:f6:23:5b:b8:d3:9d:12:e9:c6:85:f0:ce:e7:
                    42:86:d5:58:9e:40:06:97:d2:64:0e:05:88:23:0a:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0C:B5:C2:4D:6E:F3:B2:81:56:49:56:23:F9:44:79:6D:DE:89:54
            X509v3 Authority Key Identifier:
                keyid:93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/3230302e3130372e37312e302f32342d3234203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:3f:a5:37:cc:ed:8e:96:c6:3a:90:d4:8c:4b:58:45:5e:
         8e:c9:4f:b9:67:2f:e2:b7:b3:5f:ef:7d:6f:39:1a:85:9c:9b:
         c1:70:8f:92:94:28:7c:d0:63:a6:48:4a:67:ad:c5:f7:7a:76:
         28:99:a4:30:ed:6d:a0:da:30:c9:70:02:45:f6:bf:ee:77:01:
         ac:cd:2a:4e:d7:39:f9:4e:4c:32:c5:59:c7:8a:91:9d:15:40:
         06:41:0e:50:08:6c:a6:42:a3:87:c4:48:f6:a8:1e:c9:18:fc:
         3e:4d:36:c6:a5:f2:29:7f:ab:94:cc:a9:87:5c:4a:80:dd:bf:
         e2:4a:63:e5:67:7d:4d:12:83:d2:42:42:f3:d9:db:aa:0f:ef:
         74:f5:a4:64:57:36:96:f9:fb:a9:c2:9c:58:d0:1b:9a:e3:6b:
         fb:73:af:c7:b6:5b:74:db:34:2e:cf:78:7c:16:07:b5:b2:70:
         eb:85:a0:55:07:9c:70:a3:a7:4e:f2:9f:e3:58:30:43:bc:67:
         d8:9a:ac:80:05:e3:a8:f6:b1:61:0a:42:63:7f:cb:4e:35:c3:
         78:a9:55:04:17:f7:f7:82:a9:1a:1d:7b:c5:56:0b:8d:a8:92:
         f0:12:8d:df:74:9f:c1:b4:1a:f4:33:ee:01:df:51:11:0b:dd:
         bc:2a:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:52:20 2025 by rpki-client