Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e362e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e362e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          fP7/kentkRz2nGIzz8gv05MRawGpQRPTND9k8UfrBz8=
Subject key identifier:   BF:DE:C4:33:74:F9:F7:B3:06:28:87:2D:63:1E:79:84:C1:CE:90:DA
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       15878AB9A5A0CA5B3BADFB30E609F9DF90CBF224
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e362e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 15 Apr 2025 13:55:03 +0000
ROA not before:           Tue 15 Apr 2025 13:50:03 +0000
ROA not after:            Tue 14 Apr 2026 13:55:03 +0000
asID:                     27756
IP address blocks:        200.115.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:87:8a:b9:a5:a0:ca:5b:3b:ad:fb:30:e6:09:f9:df:90:cb:f2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Apr 15 13:50:03 2025 GMT
            Not After : Apr 14 13:55:03 2026 GMT
        Subject: CN=BFDEC43374F9F7B30628872D631E7984C1CE90DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:9f:7e:4c:0b:b4:91:25:53:fb:52:cc:d4:
                    7e:4a:0c:71:d6:0d:7e:bf:a8:e0:aa:0f:06:63:75:
                    59:59:8c:a2:52:a5:e1:01:b2:96:fe:0c:5a:74:7f:
                    f9:eb:5f:0b:40:74:dc:de:b5:d6:db:93:c1:29:50:
                    92:07:7d:8e:0c:81:dc:54:0a:b4:a6:57:ad:47:4d:
                    86:dc:fd:2c:0b:13:bf:24:70:d9:68:9f:2c:8d:54:
                    63:12:ff:6e:61:e0:4e:82:a0:da:ca:c1:07:e2:bf:
                    32:52:04:07:3b:5f:c1:be:60:0b:c5:bf:9c:17:6b:
                    24:d3:51:6d:12:f6:fe:3a:be:dd:f1:1e:86:3a:b7:
                    12:51:09:6c:f7:09:77:ad:c5:fa:67:ca:89:2d:dd:
                    36:db:c3:5b:b2:d4:48:d7:65:12:d6:d0:f0:6d:49:
                    98:82:9c:c5:70:2c:7d:97:64:74:99:d8:a7:e7:30:
                    88:5e:01:15:db:79:cc:05:60:c3:59:77:3c:a5:60:
                    cf:27:ef:f0:eb:76:85:02:bc:bd:22:ab:db:81:4f:
                    7b:72:1a:b5:38:64:ee:4e:14:35:2d:db:f1:3a:cb:
                    ab:bd:9a:c2:f7:f6:92:50:3c:d7:12:99:8d:d7:cf:
                    46:59:1f:df:38:dd:2a:81:3f:0a:84:21:78:f7:e9:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DE:C4:33:74:F9:F7:B3:06:28:87:2D:63:1E:79:84:C1:CE:90:DA
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e362e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:d9:a3:c6:6d:b7:6f:c8:57:3f:13:5e:d1:7c:df:28:a8:8f:
         bf:5e:5c:ae:2a:ab:84:5d:43:ed:aa:bc:a2:42:7a:e3:4e:d4:
         59:f9:08:cc:26:17:60:29:4d:07:df:3d:8a:4f:38:46:f2:38:
         88:48:21:e0:42:32:d5:d8:0c:24:81:65:b9:4c:10:6a:2e:b1:
         3b:22:4f:51:c8:39:43:cd:8f:16:6c:d7:0d:36:60:a2:e0:2e:
         03:e3:c5:4b:1b:7a:ce:99:94:07:f5:66:8e:54:30:07:79:ea:
         52:75:bc:09:11:ef:2d:69:1b:a3:c6:7f:fc:ee:31:42:45:28:
         ab:d8:c8:8a:ad:71:81:d8:4c:1c:60:1b:f0:d7:2f:be:48:47:
         80:49:7a:3b:53:78:7f:f6:a0:d6:14:6c:02:a5:d6:41:ae:01:
         6e:96:98:1d:64:c8:cf:37:bb:b0:fc:92:99:91:a5:ca:76:43:
         b6:aa:98:06:f7:fc:fa:94:2a:a4:61:cb:7d:de:64:da:25:3f:
         b2:aa:81:98:41:cf:49:fd:39:6c:6d:15:27:2b:fb:e2:65:31:
         4e:47:57:bf:6a:65:d6:84:89:c0:ca:cb:87:27:d7:dc:24:dc:
         7f:b5:5e:4c:05:7f:b4:a0:33:8c:20:6d:30:e0:55:4e:33:d1:
         77:5e:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net