Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e302e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e302e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          CBu5VOEFy/RoBC88XvVDcwjF43fJoaiKvrMk8urOXmg=
Subject key identifier:   30:3D:6C:DC:E7:B5:A4:F8:8F:D6:B8:FE:9D:0C:F4:30:26:2C:AF:07
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       5CC18CD95E94B95A5001E0D35767AD5512FE5D39
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e302e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 15 Apr 2025 13:55:01 +0000
ROA not before:           Tue 15 Apr 2025 13:50:01 +0000
ROA not after:            Tue 14 Apr 2026 13:55:01 +0000
asID:                     27756
IP address blocks:        200.115.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c1:8c:d9:5e:94:b9:5a:50:01:e0:d3:57:67:ad:55:12:fe:5d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Apr 15 13:50:01 2025 GMT
            Not After : Apr 14 13:55:01 2026 GMT
        Subject: CN=303D6CDCE7B5A4F88FD6B8FE9D0CF430262CAF07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:aa:8b:d5:80:ca:ec:09:d4:c2:a7:33:1f:
                    28:20:18:c7:59:20:ef:a2:56:22:cb:8d:83:bd:37:
                    cd:e9:f8:cb:69:b3:bc:28:c4:ab:2b:ff:0d:00:d2:
                    eb:aa:61:f8:fb:58:74:2f:d3:ab:72:05:a7:cf:dd:
                    d6:8b:c4:0f:91:13:8a:62:7d:7e:ba:98:46:1e:e4:
                    7b:0d:ed:16:6e:cd:74:cb:13:91:e7:0b:0e:9d:0a:
                    c6:0e:16:71:bd:f8:92:4b:53:7a:f8:9b:d2:7e:b9:
                    fc:40:25:df:a9:b5:27:fe:8c:8d:f9:41:dc:3d:2f:
                    ba:15:1d:7d:34:44:fe:b1:18:3f:84:1e:a6:a4:65:
                    8a:d1:f6:77:61:a5:53:68:38:ee:14:43:e0:a4:03:
                    1e:d2:af:8c:2b:86:86:d6:b0:79:ac:4d:96:39:fc:
                    f5:bb:39:a6:3e:3b:8f:61:65:d9:98:e4:7e:6a:e4:
                    5c:df:96:7e:9d:e5:ec:96:a3:fe:af:c3:fa:ec:ac:
                    09:23:3a:44:5e:76:9e:e6:2d:b8:14:a3:86:df:17:
                    03:e3:62:5b:66:06:ee:8f:2f:9f:b1:8d:df:f4:e3:
                    ac:62:8c:80:de:61:ce:62:94:cc:22:82:d5:df:44:
                    eb:30:0e:2e:1d:e0:8f:06:b1:7f:94:86:83:1b:c4:
                    64:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3D:6C:DC:E7:B5:A4:F8:8F:D6:B8:FE:9D:0C:F4:30:26:2C:AF:07
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e302e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:98:5b:e8:8c:1f:f3:70:82:1c:30:fe:39:26:9a:00:d0:
         8a:e9:00:41:16:1c:d8:8b:99:13:10:5f:11:6c:f7:95:b8:f3:
         6d:f9:4e:fe:4d:e2:8b:43:78:ff:ac:c3:c2:8e:33:39:a8:5b:
         0e:86:81:e2:85:74:1c:10:2d:f3:6d:43:ca:03:eb:44:38:6c:
         f5:1d:4e:d1:80:0d:81:b4:76:bc:9d:d2:61:df:9e:cb:f4:c8:
         50:ce:eb:38:74:40:67:47:2a:14:02:20:cc:16:15:90:e5:ec:
         86:07:97:f6:dd:32:0b:e4:7e:65:ba:05:40:44:09:0e:ea:41:
         f2:42:3e:1c:c4:2e:22:3a:3a:1b:01:ac:a2:a5:d0:76:9a:31:
         31:8a:4e:90:01:dd:a4:3e:14:af:68:2e:7e:ad:db:2a:e7:12:
         4b:6b:80:b3:23:9d:30:10:dd:98:fc:79:c4:04:16:3e:79:25:
         c5:a7:44:c0:1a:b1:c1:7a:4e:5b:49:21:08:6d:d9:6b:b1:e6:
         d7:f0:4d:55:30:55:ec:e1:4d:31:9e:f3:ab:80:f6:fb:41:bc:
         02:6e:d6:d2:a2:f3:fd:6f:60:37:08:0e:86:4d:32:76:2a:60:
         81:22:25:12:c9:ea:7b:a6:5d:90:91:e4:eb:1f:ce:23:80:46:
         46:44:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net