Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134352e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e3134352e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          2M54VAlg8wferHo5DK6okj3Depmk1wib0ItKeFyhIsc=
Subject key identifier:   16:05:7E:42:0D:EB:95:5F:CD:16:DF:10:7C:51:2B:2A:A6:41:30:CE
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       5C0EEF9AEDE549D112964C766E3B515DB14594E4
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134352e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 15 Jul 2025 17:25:30 +0000
ROA not before:           Tue 15 Jul 2025 17:20:30 +0000
ROA not after:            Tue 14 Jul 2026 17:25:30 +0000
asID:                     13999
IP address blocks:        200.77.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 07:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0e:ef:9a:ed:e5:49:d1:12:96:4c:76:6e:3b:51:5d:b1:45:94:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jul 15 17:20:30 2025 GMT
            Not After : Jul 14 17:25:30 2026 GMT
        Subject: CN=16057E420DEB955FCD16DF107C512B2AA64130CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7c:c2:97:96:ea:3c:18:3a:b3:8a:05:ce:74:
                    f7:93:5c:e3:bb:f0:d0:54:e1:79:36:66:1f:76:b8:
                    c1:97:2d:ec:a5:c2:fd:0e:8a:e1:78:c7:1f:76:aa:
                    e6:b4:7c:ab:eb:0e:16:f7:1f:0b:f7:04:05:8c:a8:
                    5b:e0:19:82:4a:42:91:54:23:c3:80:1b:b4:ff:68:
                    68:fd:77:9e:13:08:91:a4:c2:47:43:f2:99:06:bb:
                    64:f4:5a:86:70:13:dc:63:09:b3:4a:f7:2e:12:e5:
                    78:54:87:dd:45:b8:87:be:33:09:69:95:4e:ba:e7:
                    f8:b7:d8:ea:6a:0d:9c:a7:6d:0a:b7:94:b8:09:76:
                    d6:78:df:9d:de:bc:fc:10:1b:b4:df:5b:cb:2a:47:
                    fc:49:79:19:e7:60:45:fb:02:b1:cd:ea:8b:d2:42:
                    d7:d5:ae:54:58:2a:13:cd:4b:94:d2:81:24:06:9e:
                    81:1f:0f:97:fc:01:0f:61:e5:d1:80:b6:79:75:e6:
                    02:66:61:12:17:b6:ff:63:c3:bc:c6:df:54:7b:31:
                    38:e9:84:4f:fa:9c:38:53:4c:d8:9f:15:94:60:84:
                    d5:b1:6a:08:67:a7:52:b0:3c:d2:5d:8b:6d:e7:61:
                    55:cf:8f:da:80:7b:f3:5f:83:31:47:c3:c7:63:42:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:05:7E:42:0D:EB:95:5F:CD:16:DF:10:7C:51:2B:2A:A6:41:30:CE
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134352e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:db:15:b4:06:16:18:15:c3:ad:c8:d7:66:7e:25:75:a6:ea:
         30:47:e3:85:46:ec:c4:13:e7:70:cb:ca:35:eb:4e:25:71:51:
         34:07:7c:f0:78:2f:22:39:7a:95:a8:b5:17:b7:93:69:15:1a:
         c9:03:78:4c:dd:3d:8f:00:09:e5:e2:f6:d1:92:0b:6c:f6:a8:
         32:23:4e:dc:1d:11:5b:a4:47:20:a1:8d:3a:58:ad:4c:c5:2d:
         27:32:f0:a3:35:35:b6:f6:4c:1d:15:59:e5:12:f4:aa:46:be:
         df:f4:c2:b4:dc:48:ea:bb:75:57:e4:86:23:3a:b2:9f:fa:35:
         cf:f9:0e:90:0f:9b:45:61:62:60:a5:cd:7c:17:3c:08:61:c7:
         71:61:2f:b6:b1:6a:14:fa:0d:cb:f3:17:df:12:fb:50:50:47:
         ed:65:6a:3f:25:24:65:ef:b7:51:3e:d9:62:54:e4:87:8d:6f:
         e8:b3:3e:b0:08:82:1b:01:ca:fe:ae:91:72:e9:c3:e9:74:fd:
         f4:f9:66:43:a0:57:ed:d9:df:74:e1:6d:84:7a:57:c2:2d:d3:
         4d:f0:90:b8:18:9b:c1:15:61:ef:39:68:e1:a6:cf:c7:e3:5e:
         d0:49:19:bc:23:af:cf:ef:39:18:5e:35:d0:46:64:63:fc:17:
         8a:a3:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:19:23 2025 by rpki-client