Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231382e302f32332d3234203d3e203233303331.roa
File:                     3230302e3131322e3231382e302f32332d3234203d3e203233303331.roa (raw, json)
Hash identifier:          oxSx6Fy4FQuXSPDGgJLXN/74FuWllmyM1dpRiK2Hmk4=
Subject key identifier:   17:0B:81:73:9D:0D:DF:13:59:65:C7:7D:B5:7C:FB:C2:51:E8:E5:F3
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       52372AB09E0D4148AABCBDDB4DE35DFE3A40AB8C
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231382e302f32332d3234203d3e203233303331.roa
Signing time:             Wed 06 Aug 2025 22:34:58 +0000
ROA not before:           Wed 06 Aug 2025 22:29:58 +0000
ROA not after:            Wed 05 Aug 2026 22:34:58 +0000
asID:                     23031
IP address blocks:        200.112.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:37:2a:b0:9e:0d:41:48:aa:bc:bd:db:4d:e3:5d:fe:3a:40:ab:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Aug  6 22:29:58 2025 GMT
            Not After : Aug  5 22:34:58 2026 GMT
        Subject: CN=170B81739D0DDF135965C77DB57CFBC251E8E5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:93:93:cd:8d:f4:a5:ae:83:0b:c5:ee:21:ca:
                    af:4e:ac:6e:4a:5b:3e:2f:0d:8e:55:96:40:5c:5c:
                    21:b5:06:b4:e8:b0:e6:97:a5:59:c9:86:a9:19:7c:
                    69:6a:2e:ec:6c:3f:4a:3c:bb:fe:23:4b:3e:4a:22:
                    19:d8:49:3c:53:47:55:9f:e4:6c:5a:50:55:d5:7e:
                    45:b0:4c:a9:39:1a:f1:69:c9:f3:fa:2f:2d:90:93:
                    cb:5d:80:dc:16:52:18:a2:cb:40:c4:ff:c5:6a:d3:
                    1f:30:a4:b7:06:f1:ef:bd:b0:c5:2f:25:a1:75:d7:
                    fe:44:c4:eb:c5:dd:f4:35:06:c7:df:84:71:eb:79:
                    19:c8:42:e3:58:70:1d:e4:1b:41:47:46:22:91:9d:
                    00:87:fa:1f:b7:00:67:f5:ba:86:5a:b0:e7:e9:10:
                    30:59:8a:7e:52:32:45:1d:c9:b6:70:29:f7:ab:1f:
                    5f:a4:0c:94:5b:cb:56:75:8c:ae:58:7e:1e:cd:59:
                    2f:f3:42:33:af:97:cb:30:fd:88:86:4c:60:ab:0b:
                    6a:3e:b4:7a:44:0c:49:2d:c5:b9:27:61:aa:aa:72:
                    05:6c:d7:c1:9e:bd:a1:63:3f:07:ed:e1:de:16:b0:
                    c2:0a:56:39:38:ba:b7:a2:fc:52:f2:84:6a:9b:d0:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0B:81:73:9D:0D:DF:13:59:65:C7:7D:B5:7C:FB:C2:51:E8:E5:F3
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231382e302f32332d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:5e:19:48:30:70:77:ae:37:11:21:12:1a:3b:99:d0:62:61:
         1f:f0:3b:dd:93:6a:68:b3:2a:59:25:c6:87:e4:17:0a:d6:82:
         d3:aa:74:53:93:8f:66:9f:43:c8:65:bb:76:56:76:ad:c8:f5:
         37:a0:af:c1:1b:a9:58:d9:e4:58:e4:0c:32:38:8a:f0:10:9b:
         fb:24:58:9c:81:b9:3b:75:ca:9c:0f:51:fb:05:79:81:8a:7d:
         d1:d3:47:a8:e0:5e:fa:4a:8a:c0:42:7a:e6:18:94:0b:e9:02:
         eb:71:cd:40:7f:03:ca:89:28:45:05:27:3f:3e:eb:b7:b7:f9:
         bb:f4:42:bd:6e:9d:a9:44:b3:57:99:c6:91:d8:42:9d:4a:a4:
         c4:47:4d:00:a7:51:22:68:5c:08:61:a8:a1:01:e2:d6:f9:9b:
         37:19:86:4b:69:26:e8:b0:35:69:cb:dd:c1:d2:bf:a9:0b:be:
         4c:7d:45:1d:b1:d7:3d:ac:1e:f1:b7:da:f5:85:bd:20:f6:57:
         1d:b7:92:c6:63:ed:68:5b:f8:0a:c4:5d:ec:2a:53:8f:4c:a0:
         92:5c:4e:93:73:22:83:ff:c3:93:b9:17:e0:88:b6:eb:fe:45:
         17:59:ab:47:ba:c0:da:66:f7:8b:22:19:21:6f:e9:d2:8e:4b:
         38:c5:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:39:17 2025 by rpki-client