Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f32332d3234203d3e20323632393136.roa
File:                     3230302e39352e3232342e302f32332d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          r0e5kSKNm9gs3pjUqiFuBWV2EAoEEpSTSuqVEIBsZ3A=
Subject key identifier:   AC:7D:A3:AA:F5:BF:B2:75:A8:81:D6:08:B8:28:2A:86:26:D7:C9:87
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       756B3297C8610D170729A2B2250F9E7EAAC3B8F6
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f32332d3234203d3e20323632393136.roa
Signing time:             Tue 15 Jul 2025 17:25:25 +0000
ROA not before:           Tue 15 Jul 2025 17:20:25 +0000
ROA not after:            Tue 14 Jul 2026 17:25:25 +0000
asID:                     262916
IP address blocks:        200.95.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 07:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6b:32:97:c8:61:0d:17:07:29:a2:b2:25:0f:9e:7e:aa:c3:b8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jul 15 17:20:25 2025 GMT
            Not After : Jul 14 17:25:25 2026 GMT
        Subject: CN=AC7DA3AAF5BFB275A881D608B8282A8626D7C987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:71:b7:f2:4f:54:2e:ae:88:45:96:b7:b2:
                    cb:dd:05:57:03:e3:7b:88:5b:36:cb:d6:64:46:a4:
                    e7:7d:42:a9:3e:bf:27:64:00:2d:e3:bf:a0:d6:61:
                    b2:a2:3c:e3:c4:40:2b:f8:de:38:57:55:77:b0:67:
                    8c:ed:81:aa:f7:32:ea:b4:de:97:4f:14:0b:90:9d:
                    74:9b:a5:4d:2e:77:61:ed:fd:f5:7e:73:43:39:18:
                    f6:62:6a:46:10:44:dc:92:b4:90:5c:3a:77:b2:1e:
                    12:35:3a:44:9f:86:54:e0:5b:16:9b:f6:8e:3b:d3:
                    65:5a:1b:0c:c2:25:ac:99:be:9b:89:6b:34:32:9b:
                    54:b5:37:88:50:2b:15:9b:06:c8:f0:a7:d9:db:2b:
                    05:bc:56:52:e3:eb:a9:8e:a2:26:62:f6:12:f0:97:
                    77:89:19:38:04:18:49:57:e1:0f:3a:b4:8e:97:ed:
                    fa:3e:a5:bb:bd:62:1f:ae:f9:2b:45:3f:31:e2:e8:
                    82:3e:b4:7f:6e:be:15:3e:6d:ad:7c:5d:c1:43:79:
                    81:1f:de:b3:51:7d:00:d9:01:aa:54:57:f3:03:51:
                    f1:fb:62:a6:5c:2d:ae:94:11:76:4d:66:25:69:8d:
                    d1:b4:b1:f9:65:57:e7:ed:43:a2:87:d8:b9:6f:d8:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7D:A3:AA:F5:BF:B2:75:A8:81:D6:08:B8:28:2A:86:26:D7:C9:87
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3232342e302f32332d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:2f:c4:7f:a5:e0:60:f6:20:9d:7b:81:f1:5f:0f:ad:01:d3:
         b7:c5:d5:71:94:da:e7:de:a4:49:f6:41:0f:e3:d0:1d:37:a9:
         e9:18:6a:44:a2:b3:e6:bb:e6:12:72:a7:75:7b:a1:0d:f6:13:
         78:b8:5b:a9:b8:9c:6c:57:b4:ef:3e:90:7c:cb:d2:3c:4e:50:
         fc:7c:14:13:54:82:30:f9:b2:19:c1:b5:c8:05:01:73:e6:3b:
         a6:e2:f7:97:0a:a6:33:6e:78:76:af:7b:15:9d:c0:39:88:8e:
         ee:fc:a3:85:52:b4:4f:bc:66:7c:1f:4f:e3:5b:26:2f:2c:ea:
         1d:91:15:2b:ed:97:b2:10:9d:96:3e:f9:0c:49:0a:f4:d4:60:
         e9:4e:e2:e7:07:7a:b5:f7:cd:8b:a6:97:a9:0e:67:20:b4:dc:
         8c:83:f7:d9:58:0d:24:ea:4a:c8:5f:1e:06:18:9b:5d:88:15:
         2d:41:f2:50:4c:34:4e:53:d0:97:e6:ed:d9:a4:19:02:95:6f:
         70:98:2f:85:f4:6d:1a:87:85:36:9b:60:b3:4e:12:23:af:a3:
         62:d2:59:5b:b2:0a:a8:2f:75:8a:e8:49:7f:a1:1b:0f:38:5a:
         54:09:b4:ce:fc:a9:91:7f:a7:b5:70:65:04:ac:dc:86:8c:8b:
         2f:a2:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:19:36 2025 by rpki-client