Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e38362e302f32332d3234203d3e203236353036.roa
File:                     3230302e32352e38362e302f32332d3234203d3e203236353036.roa (raw, json)
Hash identifier:          ajXG2pny8IxpchpgEqutY72yE47H0Mb4nQy9hSVqAxQ=
Subject key identifier:   66:88:13:77:D6:E3:3C:B7:72:EF:82:2C:59:E8:2C:51:19:67:C1:AE
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       221E5CB3BFFE0531E46CF1FAE68509997BD538A2
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e38362e302f32332d3234203d3e203236353036.roa
Signing time:             Tue 04 Feb 2025 18:30:26 +0000
ROA not before:           Tue 04 Feb 2025 18:25:26 +0000
ROA not after:            Tue 03 Feb 2026 18:30:26 +0000
asID:                     26506
IP address blocks:        200.25.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1e:5c:b3:bf:fe:05:31:e4:6c:f1:fa:e6:85:09:99:7b:d5:38:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Feb  4 18:25:26 2025 GMT
            Not After : Feb  3 18:30:26 2026 GMT
        Subject: CN=66881377D6E33CB772EF822C59E82C511967C1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:3d:73:f8:15:e6:e4:8f:56:ee:25:04:ac:
                    df:62:ad:e0:66:96:12:71:ba:45:73:3b:cb:98:2b:
                    4a:cd:07:ff:68:b3:8f:6a:5d:07:0c:37:76:eb:be:
                    0c:7f:e3:30:e4:01:da:b5:cf:bf:42:dd:16:92:8a:
                    14:ae:19:00:d3:af:34:57:e0:06:ee:8a:53:48:dc:
                    33:b9:18:51:f4:61:f8:ee:14:14:6a:b4:a0:a7:8b:
                    41:f7:f7:2d:ea:1f:99:cc:d7:f2:62:31:cc:b4:ad:
                    36:25:57:cd:1f:e8:1f:ad:77:53:7a:18:5d:49:aa:
                    15:0d:5e:64:45:e8:a2:e2:7f:46:dd:ec:9f:da:39:
                    99:94:bf:da:db:ac:2a:ac:b2:2e:2e:7c:70:07:4a:
                    41:06:a9:42:bd:a6:01:c5:91:5e:86:06:23:a5:56:
                    b4:9b:ef:4e:05:32:02:bb:0d:ea:48:bc:0a:5f:71:
                    e7:01:0d:c2:22:a6:ab:f4:c4:f6:29:94:87:0e:6e:
                    b8:1a:fc:b0:bf:18:fb:cc:49:27:1b:3f:d4:68:6b:
                    c2:d5:61:ec:7a:7f:25:8d:e8:35:d7:04:d4:cf:ed:
                    85:e9:72:44:12:9e:fb:ba:3e:e8:ef:03:d7:57:0b:
                    c3:42:56:53:a8:28:d5:ab:e8:d8:44:ca:97:90:fb:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:88:13:77:D6:E3:3C:B7:72:EF:82:2C:59:E8:2C:51:19:67:C1:AE
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e38362e302f32332d3234203d3e203236353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:f7:f1:4c:ca:83:35:f3:0a:a2:e2:c5:c9:51:d5:62:80:
         4c:1f:2b:a3:ff:0e:d8:9b:a5:e0:4f:f2:a6:21:a1:a5:35:0c:
         08:e2:75:44:86:1d:e8:6d:5e:db:31:af:b2:e1:99:8d:12:c9:
         2e:7d:37:a2:2c:a4:63:89:5c:5d:e1:eb:61:d7:f8:cd:99:b0:
         7f:6d:fc:84:da:7c:ef:d5:c8:0d:18:38:c6:8d:a5:2a:c0:26:
         72:4a:3d:0d:c9:ed:e3:cc:0e:f7:e5:5e:cf:9f:ce:b2:4c:b1:
         7d:70:41:8c:b0:0c:cb:2a:01:51:8f:ee:1e:67:f9:74:82:90:
         57:3e:14:89:34:82:fb:85:93:94:2e:6f:84:50:5c:0a:d1:e3:
         37:ba:34:0a:c8:9c:a1:d9:d6:7a:60:73:9a:4e:da:85:36:6b:
         99:7e:88:fd:c8:dd:d4:8c:ba:9c:d3:17:3e:d8:df:82:43:1e:
         90:97:cc:f1:85:57:27:bc:fc:fd:3c:20:61:15:86:24:43:24:
         16:3b:c3:87:1c:a0:44:a6:7c:3a:0c:6f:08:da:df:d0:f7:17:
         af:00:ec:cb:50:39:a1:3d:e4:22:1f:b3:7b:1b:4d:cc:68:f3:
         05:6a:e0:e9:c9:e2:83:a2:fb:1b:6b:9e:ca:ec:45:25:8c:c8:
         00:f7:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:49 2025 by rpki-client