Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/3230302e3130382e3139312e302f32342d3234203d3e20323639393935.roa
File:                     3230302e3130382e3139312e302f32342d3234203d3e20323639393935.roa (raw, json)
Hash identifier:          HTar7+pZfbldc2ylEfFBE6h06Z0KculQNaqKWJvTnig=
Subject key identifier:   E9:AF:C7:94:F9:2B:39:8B:13:80:CB:96:18:61:C6:55:C9:D1:E4:00
Certificate issuer:       /CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0
Certificate serial:       7703FE05F16B239B6BD6C7B970BD3A8DB5F85B78
Authority key identifier: D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/3230302e3130382e3139312e302f32342d3234203d3e20323639393935.roa
Signing time:             Mon 04 Aug 2025 15:55:00 +0000
ROA not before:           Mon 04 Aug 2025 15:50:00 +0000
ROA not after:            Mon 03 Aug 2026 15:55:00 +0000
asID:                     269995
IP address blocks:        200.108.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 18 Aug 2025 05:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:03:fe:05:f1:6b:23:9b:6b:d6:c7:b9:70:bd:3a:8d:b5:f8:5b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0
        Validity
            Not Before: Aug  4 15:50:00 2025 GMT
            Not After : Aug  3 15:55:00 2026 GMT
        Subject: CN=E9AFC794F92B398B1380CB961861C655C9D1E400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:94:b4:60:b8:64:42:7b:12:ab:88:b0:f3:
                    97:52:55:79:8f:9b:38:29:2c:fc:c0:94:e7:6c:04:
                    60:b5:c4:9d:88:b4:97:1c:df:ee:93:2b:83:a0:5b:
                    5c:58:d3:62:95:95:a2:ba:02:d1:06:af:a4:18:5a:
                    fd:ac:57:e2:f9:cf:73:17:97:77:c6:86:51:ca:0c:
                    c6:6e:15:17:3c:0a:c3:f7:8f:69:ce:ed:3c:51:30:
                    53:b6:45:d1:de:c2:b3:85:0a:1a:92:d2:3e:ac:56:
                    3d:fc:7e:81:82:f1:b9:6d:2d:d5:dc:c9:0e:08:05:
                    12:77:88:b9:87:92:5b:e4:cb:15:b2:99:5a:64:de:
                    35:81:73:50:8f:82:1b:ca:61:3a:9c:17:06:26:a8:
                    98:9b:a7:33:f7:d0:da:38:d0:69:1d:57:cd:3d:e6:
                    f6:8b:8a:c3:6a:01:83:2d:56:b3:88:04:39:3c:75:
                    6e:11:09:60:fb:29:33:1b:ac:12:7d:9b:6c:f8:06:
                    14:cd:bb:9a:63:0e:e0:de:20:7d:1e:4f:ae:ff:9b:
                    54:6b:22:e5:8f:cc:41:01:55:44:8d:c0:64:43:59:
                    ea:94:56:c3:e1:06:00:86:f0:9c:30:19:d8:57:29:
                    8b:fa:f2:46:1c:b4:45:03:36:f8:db:87:45:be:89:
                    5e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AF:C7:94:F9:2B:39:8B:13:80:CB:96:18:61:C6:55:C9:D1:E4:00
            X509v3 Authority Key Identifier:
                keyid:D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/3230302e3130382e3139312e302f32342d3234203d3e20323639393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:29:47:9f:e3:05:a2:49:45:b5:96:f4:f4:8a:e5:68:ce:20:
         cd:13:35:7f:1c:67:ed:de:6a:01:6a:5a:5e:80:ee:89:06:94:
         ad:21:4c:65:2a:e6:ea:d8:ff:6f:af:8b:cf:2a:71:32:82:74:
         b8:38:41:37:88:35:e2:a4:51:5f:6a:72:a0:ed:1f:80:5d:33:
         71:1c:f6:61:9f:23:91:6b:23:64:0a:85:93:8a:09:d3:df:60:
         f3:c2:60:fc:dd:34:3a:02:21:a0:d3:65:2d:bb:f4:f5:6e:08:
         0a:bc:25:fc:cd:0e:26:ce:28:10:c8:33:28:4e:35:8c:ec:a0:
         38:6c:94:c4:7a:9c:7a:5c:2d:a5:02:d7:83:99:76:c9:16:95:
         a0:f4:ba:8b:8f:89:06:f4:ec:85:c2:e8:f7:8d:f9:78:61:c6:
         1f:4c:f8:aa:1e:09:cb:e2:6e:55:75:1f:ca:f0:5e:d6:18:d7:
         d8:2b:4a:e2:ad:01:a7:3f:4c:d7:89:1c:57:50:2c:28:17:f8:
         bf:19:71:82:7a:12:ce:9a:76:a9:0c:09:5e:ff:8a:ee:39:5e:
         84:48:a2:aa:26:85:97:89:72:9f:b5:e0:8d:0d:58:1c:9a:43:
         bf:a9:95:e8:ab:ac:3d:75:5e:bc:5a:ba:86:3a:97:96:8d:0b:
         10:4e:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 09:01:27 2025 by rpki-client