Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269955.roa
File:                     AS269955.roa (raw, json)
Hash identifier:          ubss1zvF9N37fK9LFcrEx8N8aZDtCI6yEI6kAKQ/gZY=
Subject key identifier:   A1:B2:72:A3:8C:45:6E:F0:62:9E:B2:D8:6A:8D:1B:10:35:0F:19:61
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       2DE0B34CB8A93D84D6CBB17794F23349CAD76AE6
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269955.roa
Signing time:             Mon 21 Jul 2025 20:26:03 +0000
ROA not before:           Mon 21 Jul 2025 20:21:03 +0000
ROA not after:            Mon 20 Jul 2026 20:26:03 +0000
asID:                     269955
IP address blocks:        200.7.210.176/28 maxlen: 30
                          200.24.213.64/28 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e0:b3:4c:b8:a9:3d:84:d6:cb:b1:77:94:f2:33:49:ca:d7:6a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Jul 21 20:21:03 2025 GMT
            Not After : Jul 20 20:26:03 2026 GMT
        Subject: CN=A1B272A38C456EF0629EB2D86A8D1B10350F1961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:ad:cf:ea:c1:05:48:5c:f6:91:57:00:67:
                    1e:25:ea:fd:df:26:1f:56:94:44:c7:eb:0a:21:53:
                    ab:ef:7a:36:22:72:66:d0:72:86:c7:0f:6b:ee:68:
                    ba:6e:1f:91:92:0f:ae:41:52:63:ab:2a:61:81:20:
                    a6:86:a9:c6:ed:e4:ac:21:0d:95:13:ea:35:ea:ab:
                    3d:fe:ab:9b:5f:85:13:d1:71:fd:e0:ed:2b:d1:c1:
                    9a:55:70:3a:fa:92:e5:56:61:cc:75:69:4c:d7:97:
                    da:ae:8f:a7:c7:1d:38:70:c2:ed:4f:65:57:0f:13:
                    f2:b9:28:4f:65:81:8f:9c:bd:48:4c:dd:7b:2b:23:
                    35:6b:fd:15:16:9c:fc:cf:92:f4:1b:6d:f5:e9:0f:
                    4e:b8:5e:53:6e:3c:f4:df:59:5d:69:8f:a8:8a:79:
                    35:23:94:54:df:75:e3:2d:ac:83:8d:51:f7:75:96:
                    e7:db:0c:7c:72:28:a7:ba:2c:63:12:9b:8d:e8:9c:
                    f9:9e:26:a0:5e:99:dd:14:5d:de:94:b8:b1:a0:b5:
                    80:1f:42:26:c2:e3:d8:ba:41:0f:66:b4:b0:a9:7e:
                    a0:86:da:b0:7a:73:80:11:fc:b4:fb:bd:c9:a7:4e:
                    50:be:ea:74:2d:44:57:16:39:f9:e5:44:f9:41:b0:
                    f4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B2:72:A3:8C:45:6E:F0:62:9E:B2:D8:6A:8D:1B:10:35:0F:19:61
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269955.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.210.176/28
                  200.24.213.64/28

    Signature Algorithm: sha256WithRSAEncryption
         b8:e8:91:cf:27:58:c0:62:e6:f8:59:a0:10:f4:a7:4b:3d:5b:
         38:90:d8:58:ac:e4:19:43:92:39:3f:93:a3:4b:d3:c3:cc:88:
         08:a6:f7:f4:87:36:f0:e5:c8:3f:a9:06:ee:df:6c:72:6e:6f:
         af:c6:93:26:8e:de:84:5b:50:58:22:28:c2:67:b7:82:b2:41:
         6c:9f:98:0d:35:e2:7b:76:6c:8b:58:25:fc:8d:05:50:36:86:
         31:f5:b4:47:a6:67:14:7a:b6:7f:2a:b5:bd:f2:b2:60:9d:69:
         5f:cc:41:41:f6:59:4b:ab:74:7b:8e:bc:7d:8d:96:ad:d0:33:
         91:09:ef:d9:0e:8c:11:c4:04:9e:28:62:08:2a:15:4b:43:67:
         71:18:74:c4:22:a8:03:62:19:34:34:c6:e6:4b:f0:af:91:3f:
         5a:a8:4f:59:69:67:67:56:a0:ec:20:09:83:17:da:d6:bc:91:
         16:ce:8a:1a:68:49:ff:d0:14:58:e7:1d:26:79:16:3b:57:ae:
         41:8f:8e:40:d9:f8:4b:8b:29:aa:4d:e3:4a:93:8b:64:bf:cf:
         5d:cf:31:18:07:00:37:27:08:7d:b8:b4:51:ae:99:2d:94:cb:
         f1:80:4b:79:60:9c:a9:1d:46:de:d4:6a:ff:35:59:fd:90:0a:
         60:27:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:36:56 2025 by rpki-client