Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3234372e302f32342d3234203d3e203133393939.roa
File:                     3230302e39352e3234372e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          TVG7v+RDvu85vRy5bYSQAnlj3Ipxlvc+GXIB1vWXUUI=
Subject key identifier:   E9:38:AC:EA:7F:C5:BE:E0:8C:C8:89:A3:A4:18:06:AC:38:66:6F:8D
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       1C4C708C3007542BC4780CF74986C6CA65B80A98
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3234372e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 15 Jul 2025 17:25:26 +0000
ROA not before:           Tue 15 Jul 2025 17:20:26 +0000
ROA not after:            Tue 14 Jul 2026 17:25:26 +0000
asID:                     13999
IP address blocks:        200.95.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 07:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4c:70:8c:30:07:54:2b:c4:78:0c:f7:49:86:c6:ca:65:b8:0a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jul 15 17:20:26 2025 GMT
            Not After : Jul 14 17:25:26 2026 GMT
        Subject: CN=E938ACEA7FC5BEE08CC889A3A41806AC38666F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:6a:68:9c:3b:9c:92:4f:81:cf:6c:98:09:
                    35:54:a7:f4:a5:a5:af:44:c8:11:f3:c8:4b:a2:90:
                    d9:68:d1:be:7a:d0:e9:94:79:f7:27:62:44:79:ce:
                    af:c8:db:52:3c:ca:b3:1f:b6:15:0f:68:7f:28:e1:
                    12:5a:14:62:ba:67:25:87:bb:bd:a9:05:42:8f:df:
                    10:6e:3c:5a:c2:50:13:0e:d2:02:49:8d:bc:92:5b:
                    c0:45:cc:65:e0:50:cf:45:f3:dc:8e:7f:ea:6c:3d:
                    da:cb:da:20:7c:d8:5d:d9:9e:16:5e:10:bf:0f:48:
                    6a:ea:54:22:1a:d3:34:2d:fd:3f:34:0b:ad:5a:43:
                    69:69:9a:c8:65:86:3e:76:4f:14:2d:a8:b7:e3:23:
                    63:58:30:f2:ec:a4:fe:f9:d0:96:9e:57:5f:39:50:
                    76:ea:4b:7d:8b:31:d3:06:97:16:75:5f:2b:b4:6a:
                    a7:34:e6:3d:31:fb:bc:14:77:94:98:17:86:70:e1:
                    83:a8:99:c1:40:3d:f0:83:28:bb:7e:65:0f:48:95:
                    0b:09:82:b8:b9:73:46:af:9b:38:44:fa:f7:b5:3b:
                    33:02:e9:e2:27:cf:ea:9f:0b:bf:8d:71:91:1f:82:
                    d0:bf:81:9e:cd:8d:e3:45:25:e9:0b:75:10:c2:a6:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:38:AC:EA:7F:C5:BE:E0:8C:C8:89:A3:A4:18:06:AC:38:66:6F:8D
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e39352e3234372e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:f3:56:e6:94:3d:5b:7b:13:e7:fa:95:37:46:69:ac:be:26:
         90:d9:bc:16:1c:dc:b8:a4:42:6a:82:af:2e:81:b0:92:44:92:
         ce:5e:5b:42:3c:a5:32:7d:de:62:fc:31:33:f2:77:00:64:20:
         94:c8:f8:91:12:6f:9b:07:9f:1c:84:7f:a8:ef:a3:d5:bc:d2:
         9b:2c:32:36:c0:37:73:2a:e9:7e:2a:3c:e0:ac:e3:ae:ba:1d:
         0c:bd:9d:30:f5:bb:44:b7:d1:fb:0f:d2:c1:39:2a:b2:d2:78:
         e6:d2:f4:6a:24:ab:18:b2:04:9e:b6:55:4f:66:4c:fe:fb:db:
         91:14:b4:99:56:cb:a8:01:43:ef:27:d0:fb:cb:96:dd:b1:1e:
         f7:7e:17:9e:7b:ea:32:31:c0:9b:42:f4:89:f4:69:72:b0:bf:
         d4:d8:78:d6:25:b1:8d:61:76:09:8b:5b:47:39:bd:6f:1e:56:
         e2:ae:fe:09:30:d0:0d:dc:4d:24:47:61:81:0b:dd:d4:29:4a:
         75:8d:bf:27:f5:b4:7c:4c:ea:3a:ba:a2:68:60:fb:78:6d:c5:
         5b:82:14:cc:c4:04:21:d6:1a:2a:12:f7:a9:cb:5e:86:02:05:
         8d:a6:17:ac:2f:13:c9:d2:86:bc:c6:d6:9a:d4:68:ea:79:c1:
         f9:37:c8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:19:30 2025 by rpki-client