Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233302e302f32332d3234203d3e20323632393136.roa
File:                     3230302e39352e3233302e302f32332d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          DTKXm2yE5WXYNqjV72Gud/J/XQo4xDVM/WnYncPH/QM=
Subject key identifier:   9A:6B:44:7C:82:92:71:BE:FA:2C:7E:6E:70:E7:BA:01:E3:06:72:89
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       59D43FAC093D6E8220CD9D4B69064452465045F0
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233302e302f32332d3234203d3e20323632393136.roa
Signing time:             Tue 15 Jul 2025 17:25:29 +0000
ROA not before:           Tue 15 Jul 2025 17:20:29 +0000
ROA not after:            Tue 14 Jul 2026 17:25:29 +0000
asID:                     262916
IP address blocks:        200.95.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 07:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d4:3f:ac:09:3d:6e:82:20:cd:9d:4b:69:06:44:52:46:50:45:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jul 15 17:20:29 2025 GMT
            Not After : Jul 14 17:25:29 2026 GMT
        Subject: CN=9A6B447C829271BEFA2C7E6E70E7BA01E3067289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:dc:e2:35:03:0e:21:4e:1f:b7:87:97:ae:
                    e3:dd:45:38:d9:61:28:4e:46:e5:5a:b2:62:e9:20:
                    cd:90:f9:14:9d:1f:c4:b1:c8:5d:69:d3:67:f3:50:
                    b4:b0:04:a2:3b:b9:5d:bd:92:9f:14:65:86:70:e6:
                    54:ae:5b:72:70:10:43:4b:3e:03:46:df:a6:79:11:
                    9c:66:e9:58:a0:a1:49:7b:79:78:7e:c1:17:3b:e2:
                    87:54:3b:d7:dd:c2:ae:a1:31:f5:57:d8:c4:08:a8:
                    55:07:df:04:53:6b:87:23:41:f0:11:be:bb:ed:4e:
                    0a:b6:4e:13:f5:24:0b:8e:8e:7c:b6:b0:f4:ae:99:
                    f8:5f:58:c9:24:a9:d2:e2:45:fd:93:a9:a6:a9:cb:
                    43:ca:2c:a0:26:fc:c5:42:38:c7:ba:3e:51:e2:5a:
                    fd:92:06:5d:61:fd:86:eb:74:1b:2c:3d:aa:cb:5b:
                    04:c7:3a:e7:7a:30:ad:fa:3b:56:f1:80:32:3a:9f:
                    00:4e:f3:6f:2e:0a:ab:f5:b5:10:73:e7:ee:78:80:
                    cc:6e:1e:fc:c7:ea:26:74:29:86:3e:7c:a9:04:82:
                    94:b4:af:3e:79:27:40:65:e0:cb:43:69:2a:46:db:
                    13:b6:76:d8:e7:43:d6:d9:43:a0:10:1e:a1:b1:b5:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6B:44:7C:82:92:71:BE:FA:2C:7E:6E:70:E7:BA:01:E3:06:72:89
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3233302e302f32332d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:a3:f1:48:fc:47:a3:fe:1b:21:b0:8e:0c:c5:d3:d1:c1:8c:
         8a:3b:14:8a:39:47:3d:66:44:a8:6e:e9:8a:67:8e:8e:4b:84:
         8f:dd:82:a9:06:e6:24:7f:00:53:0e:74:6e:32:e3:77:b3:56:
         57:99:44:b7:ad:c4:6e:68:eb:b4:87:6a:6d:02:61:93:a1:09:
         4c:d5:c0:75:90:56:88:bf:2b:3d:ee:49:81:c4:bd:e4:5b:40:
         fa:f6:c5:28:12:b9:62:8e:ce:8b:0a:de:49:f1:9c:9d:dc:ba:
         4c:40:2a:1d:a4:9c:b8:1b:a8:f9:da:cd:b4:37:f6:e2:73:02:
         9d:d3:3a:5e:82:76:0b:cb:d0:ab:d8:01:d3:e6:63:cf:fb:ba:
         a1:12:ed:90:1c:0b:f7:78:03:d3:7d:b2:3b:7a:0e:f5:0f:f1:
         c1:78:41:2c:52:95:0b:9e:af:fc:4a:d1:ef:cd:f5:08:6b:cb:
         86:c7:d1:5f:e4:0f:e5:07:d0:7c:a9:30:dc:ba:21:2f:c4:23:
         48:9a:3f:ed:fb:f8:aa:ef:74:01:cc:05:c0:72:f9:35:b4:7c:
         52:43:ba:ea:1d:19:31:83:a4:81:89:ec:88:f8:81:98:f3:61:
         25:aa:5b:5d:21:4f:dd:42:a1:8e:33:2c:0d:6c:67:d6:0c:f0:
         9d:f8:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:19:27 2025 by rpki-client