Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e322e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e322e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          4Hau64LAeAxKVrzydGhVroaBHCxGddhG68wghIS1b7U=
Subject key identifier:   60:64:A3:8B:BF:34:35:91:8A:FE:BF:27:CB:06:6F:6B:63:0E:10:42
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       3EAC29780116D8072D745336CAB14317171DDD89
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e322e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 15 Apr 2025 13:55:02 +0000
ROA not before:           Tue 15 Apr 2025 13:50:02 +0000
ROA not after:            Tue 14 Apr 2026 13:55:02 +0000
asID:                     27756
IP address blocks:        200.115.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ac:29:78:01:16:d8:07:2d:74:53:36:ca:b1:43:17:17:1d:dd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Apr 15 13:50:02 2025 GMT
            Not After : Apr 14 13:55:02 2026 GMT
        Subject: CN=6064A38BBF3435918AFEBF27CB066F6B630E1042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:2b:c9:e6:5f:c5:ae:95:3b:55:2d:b2:f3:
                    9e:31:a0:9c:53:a1:33:7b:f3:fd:bc:19:c3:a7:33:
                    a8:11:af:19:ce:98:4b:7d:09:45:c4:02:c9:35:df:
                    fc:59:58:81:90:87:7e:ce:b7:63:8d:6f:4c:c0:e1:
                    5f:9b:d8:eb:d7:b7:29:35:c0:07:b4:41:cb:54:37:
                    2d:b2:eb:c4:ce:a1:fb:45:27:c7:6d:6b:79:dc:99:
                    ca:37:7e:56:7d:4d:77:70:5f:59:49:50:71:ee:21:
                    b5:bd:4b:f6:e2:b6:35:30:54:3d:cb:6e:1d:15:ce:
                    a7:e8:a7:35:9b:47:a9:fe:a1:6a:bd:90:81:20:08:
                    2d:e9:3a:16:08:d9:0b:5a:9c:77:68:c8:89:7b:3f:
                    ba:78:b0:a5:a7:2f:57:bb:8d:2d:99:91:19:21:f3:
                    a2:eb:cc:46:7e:8d:75:01:5a:e2:e1:05:58:bd:04:
                    53:b6:0e:78:c4:e0:97:13:5b:d5:b8:d6:f3:82:d6:
                    fc:68:5a:2f:17:3f:21:2c:01:48:76:99:90:4f:eb:
                    84:17:65:e6:b3:ee:61:40:2e:29:71:1b:b6:25:04:
                    b6:fe:6b:37:27:70:c4:0f:7c:15:67:6d:dc:0e:fa:
                    77:5d:c6:a2:17:5f:12:36:80:87:ab:d8:65:f4:2b:
                    5f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:64:A3:8B:BF:34:35:91:8A:FE:BF:27:CB:06:6F:6B:63:0E:10:42
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e322e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:98:fa:90:82:38:81:fc:99:c8:08:9b:3f:9c:86:c4:8e:
         90:71:60:37:f3:b5:6c:7f:28:8c:24:e6:61:4b:e2:88:1b:45:
         e2:f2:8a:a8:6b:29:6c:bc:ee:a7:1a:c5:96:0d:35:88:26:b1:
         b8:9e:56:de:29:fa:64:c5:b1:96:19:d0:b9:aa:c2:f4:30:55:
         e2:cb:38:4a:21:ce:9b:f6:b6:0e:79:f6:bc:5e:c3:54:e1:38:
         6e:89:72:b8:74:bf:0c:20:cc:db:b5:0a:02:3e:74:3c:f5:4c:
         39:c8:b1:b5:92:18:47:c0:e4:ef:69:08:8a:c2:7d:0d:f8:9f:
         c1:f2:02:dc:05:81:eb:37:88:56:e4:2b:05:e2:1e:cd:32:38:
         e5:48:a5:44:6b:b8:ff:29:a2:1f:d9:fc:dd:b4:48:a2:8a:0e:
         f5:e9:53:ec:38:90:b8:78:72:da:39:88:3a:c9:30:88:dd:69:
         ab:46:8a:47:bc:64:43:78:25:9f:40:94:74:bb:7d:98:59:6c:
         d6:ed:16:a0:54:1a:02:23:97:b7:c2:06:b3:31:68:6c:c5:25:
         5c:cb:92:b2:47:f4:88:52:33:cb:01:1b:c1:c9:26:4c:d1:13:
         0a:a2:fb:62:18:2c:72:fe:ca:98:4d:4d:76:bd:bf:a0:eb:de:
         42:02:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net