Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231382e302f32342d3234203d3e20323733303638.roa
File:                     3230302e3131322e3231382e302f32342d3234203d3e20323733303638.roa (raw, json)
Hash identifier:          Qweg8TZmHNjVgCL3NJKFUKOMuQ5O7aHgtuhAfUBheR4=
Subject key identifier:   77:C6:7E:D3:FA:56:50:49:DD:45:48:6A:A1:8E:12:45:9C:89:FD:A9
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       7480E8F07ABF79B08C90E47ED5369A2CE4F344E0
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231382e302f32342d3234203d3e20323733303638.roa
Signing time:             Wed 06 Aug 2025 22:34:57 +0000
ROA not before:           Wed 06 Aug 2025 22:29:57 +0000
ROA not after:            Wed 05 Aug 2026 22:34:57 +0000
asID:                     273068
IP address blocks:        200.112.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:80:e8:f0:7a:bf:79:b0:8c:90:e4:7e:d5:36:9a:2c:e4:f3:44:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Aug  6 22:29:57 2025 GMT
            Not After : Aug  5 22:34:57 2026 GMT
        Subject: CN=77C67ED3FA565049DD45486AA18E12459C89FDA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:9d:fe:37:07:5b:ad:2c:58:b6:cc:24:28:
                    85:85:90:d7:31:13:59:63:45:1e:56:cf:c6:6f:51:
                    ae:92:bb:38:31:66:63:68:49:2e:48:6b:b2:ac:0b:
                    f9:9e:24:5b:70:fe:75:14:ba:74:70:e5:19:05:1e:
                    c2:bc:80:e0:29:75:08:08:14:49:88:36:94:8e:9f:
                    fd:11:22:43:e1:61:3b:98:d3:d3:cd:91:c4:cb:a1:
                    82:34:53:98:f2:07:9f:51:84:24:ec:e4:b3:de:03:
                    b4:a0:90:fb:55:49:dd:d7:dc:cb:94:61:00:cf:6c:
                    6d:c7:9d:22:e4:3c:6f:4e:67:7b:8d:e5:af:3e:53:
                    1d:70:52:99:c9:d7:63:84:47:53:23:f2:ee:35:ba:
                    b7:cf:83:00:71:53:a7:63:27:dc:48:6f:00:76:1e:
                    66:19:ad:7c:1d:3b:39:28:8e:19:78:37:8a:40:eb:
                    b4:f6:7f:dd:8e:02:09:fd:93:5d:48:37:ae:77:ba:
                    b3:8b:7f:87:7e:d4:e1:4b:d2:d7:98:73:2b:72:08:
                    2c:38:95:65:10:7c:45:30:69:c4:25:07:ec:d2:45:
                    f4:4e:fc:a4:7f:8e:eb:5a:c4:3f:e1:07:13:cb:2f:
                    1e:09:28:72:c3:93:cd:9b:ab:fd:8b:7d:bf:be:ea:
                    33:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:7E:D3:FA:56:50:49:DD:45:48:6A:A1:8E:12:45:9C:89:FD:A9
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3231382e302f32342d3234203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:10:6f:8c:53:28:dd:14:70:63:a1:0d:47:6c:94:3d:2a:e2:
         73:a6:f9:92:12:13:e3:a5:fd:e2:f3:5a:81:01:2c:18:c1:6c:
         2e:2d:89:6c:f6:4d:0d:74:4c:94:b6:bd:96:b0:9c:ba:2e:c8:
         40:10:1c:87:af:0c:e6:52:75:07:c9:a0:f2:78:6d:b9:15:4a:
         22:9a:ec:35:18:7b:50:74:25:c0:f4:f7:9d:e5:f4:15:7a:4d:
         e4:62:d3:c3:54:36:7a:af:85:17:b0:7a:9c:e4:31:17:b7:09:
         84:df:1a:51:64:b4:88:70:88:65:93:9a:1f:c8:5c:a1:2b:9c:
         2c:69:84:94:b4:0e:9c:0f:16:16:ff:2d:4d:e8:f5:21:f1:50:
         db:8f:c3:8a:fb:ba:09:fa:27:14:3e:7d:f1:ce:35:b8:6c:d7:
         c3:f7:88:88:e6:6b:10:d2:1c:6d:dd:85:2f:b0:22:81:c3:5f:
         22:d4:60:90:77:73:0c:ad:28:1b:af:dd:52:e7:81:f3:1b:38:
         1c:c6:e5:b9:7d:64:9b:d5:99:a7:bc:f6:08:ba:4c:a2:be:50:
         56:38:fe:a3:fa:3b:c4:82:d3:3e:3d:71:90:42:a9:78:2e:34:
         b7:cc:84:8e:e0:bf:8b:1e:3d:fb:77:19:2f:df:18:13:8b:95:
         9c:9d:0f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:40:15 2025 by rpki-client