Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e20323732383833.roa
File:                     3230302e3131322e3232322e302f32332d3234203d3e20323732383833.roa (raw, json)
Hash identifier:          fmXQ/S4Gt4dNe5kfQ+zF3qc2kZKwGsdligQuzYd3hV4=
Subject key identifier:   CE:B8:4C:AE:01:48:D5:FC:6D:E2:6C:FF:AE:F6:5A:C8:F8:6E:E5:66
Certificate issuer:       /CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
Certificate serial:       35D15B695637115E46DFF18CECF72BA600515364
Authority key identifier: 2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e20323732383833.roa
Signing time:             Wed 06 Aug 2025 22:34:58 +0000
ROA not before:           Wed 06 Aug 2025 22:29:58 +0000
ROA not after:            Wed 05 Aug 2026 22:34:58 +0000
asID:                     272883
IP address blocks:        200.112.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d1:5b:69:56:37:11:5e:46:df:f1:8c:ec:f7:2b:a6:00:51:53:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BF2EA70064C593F25670D65BD2C1425EAE424A1
        Validity
            Not Before: Aug  6 22:29:58 2025 GMT
            Not After : Aug  5 22:34:58 2026 GMT
        Subject: CN=CEB84CAE0148D5FC6DE26CFFAEF65AC8F86EE566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:1a:5c:4d:d3:67:ce:66:a0:af:78:d5:78:
                    e4:57:4c:0a:b3:e9:5d:24:6d:11:e8:99:fa:e5:b9:
                    8d:51:bc:25:fd:b3:c4:e6:79:14:67:fc:16:b7:5e:
                    53:47:62:29:8a:05:cf:fa:6d:77:9b:b9:d3:09:3c:
                    65:8f:2e:8f:f4:82:93:72:cc:ba:18:9a:d8:fb:31:
                    21:b0:54:15:8f:47:3a:4f:6f:bb:00:1a:d5:7d:41:
                    75:f6:c0:39:f2:a6:96:77:5d:4f:23:24:26:95:a6:
                    63:42:d8:bc:5f:b7:51:cc:3f:0b:f5:09:f3:6c:18:
                    ff:27:ef:0e:c9:13:1c:dd:bb:69:13:92:38:93:eb:
                    a8:08:8c:a4:df:c6:0a:c9:c3:2e:c3:e7:e5:09:37:
                    27:24:a1:64:9c:f3:2e:85:c6:71:c4:ba:7b:cd:a9:
                    d5:2b:3e:1d:27:e8:16:d1:3a:60:0a:43:2c:7f:52:
                    f1:c8:3e:28:30:7c:1a:b6:07:b3:fa:2c:0d:61:2d:
                    44:72:16:7b:48:70:f4:d7:f6:31:c9:4a:5d:59:b2:
                    9c:f2:6b:bc:93:3c:92:09:ef:5f:5e:39:75:6d:5e:
                    8f:ae:b7:33:58:cc:b4:37:d3:2d:b8:15:cf:0b:80:
                    f7:a9:e2:58:7f:09:2c:cc:78:10:4a:36:89:f5:ea:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B8:4C:AE:01:48:D5:FC:6D:E2:6C:FF:AE:F6:5A:C8:F8:6E:E5:66
            X509v3 Authority Key Identifier:
                keyid:2B:F2:EA:70:06:4C:59:3F:25:67:0D:65:BD:2C:14:25:EA:E4:24:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BF2EA70064C593F25670D65BD2C1425EAE424A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417BEAF2DA1622668D73BDC590D6641D842D85D7AB797E655342936D8C9C2512/0/3230302e3131322e3232322e302f32332d3234203d3e20323732383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:7e:ce:52:c2:50:62:ee:ba:83:4d:58:dc:38:25:73:ad:72:
         35:09:ff:7d:f8:76:08:a1:27:38:10:63:4c:52:21:f4:7b:d6:
         bc:f3:73:0e:3f:90:5f:67:ab:ef:11:03:05:f1:0a:d9:a0:5d:
         75:ba:f0:b5:05:fb:20:79:bc:9d:ae:2c:e0:5e:4a:ed:30:1e:
         ba:6a:a8:2f:bf:03:13:7e:d0:ba:ff:8c:01:07:78:6f:d5:40:
         d5:0d:f0:0a:86:c7:a4:af:90:80:5b:24:ae:d4:cb:e4:c9:31:
         40:7c:97:6f:87:1a:3f:ac:96:0a:02:10:f0:f8:a4:50:80:f4:
         47:08:d6:a0:af:43:3c:1e:8d:51:32:c1:27:d3:2e:02:f4:09:
         59:b0:5c:5c:20:d4:9b:2d:8b:8b:57:5c:72:16:a6:7c:b9:d1:
         a8:d6:49:df:18:2b:55:1a:04:e8:a3:01:cb:60:72:e2:40:54:
         e5:e3:8a:8b:f1:7d:25:6d:14:a9:ae:a3:fd:9d:a6:47:09:f0:
         6c:5d:6c:c6:02:cb:c8:55:31:9a:f8:c3:0a:e0:8d:ea:bf:74:
         ee:81:32:ad:b9:c7:b0:da:33:6e:ce:ef:cd:19:c5:b1:b0:ae:
         dc:27:ac:0a:e1:fd:46:ec:a0:2d:f4:ee:77:ad:c8:e6:5e:37:
         e7:ad:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:39:35 2025 by rpki-client