Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e372e302f32342d3234203d3e203237373536.roa
File:                     3230302e3131352e372e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          oKTUNvmdAkYNYdSFXTgXaNYUju8oBm2aijxTs52z50M=
Subject key identifier:   E7:AE:53:4C:AA:8A:2E:96:91:17:06:69:A9:48:58:0C:D0:1D:99:B0
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       3AF3B78C6DDB6FE6BF3106A603B7E402F2F29EDF
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e372e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 15 Apr 2025 13:55:01 +0000
ROA not before:           Tue 15 Apr 2025 13:50:01 +0000
ROA not after:            Tue 14 Apr 2026 13:55:01 +0000
asID:                     27756
IP address blocks:        200.115.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f3:b7:8c:6d:db:6f:e6:bf:31:06:a6:03:b7:e4:02:f2:f2:9e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Apr 15 13:50:01 2025 GMT
            Not After : Apr 14 13:55:01 2026 GMT
        Subject: CN=E7AE534CAA8A2E9691170669A948580CD01D99B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:3b:5a:15:a3:83:13:4d:56:dd:f5:20:c0:
                    87:f8:c6:2b:70:27:e5:88:dd:49:cc:b4:41:06:cc:
                    25:2d:51:2b:92:9e:46:f4:13:22:f2:a0:23:a7:a1:
                    67:eb:3a:d8:d9:bb:77:15:ea:6e:87:28:8f:14:8d:
                    7d:aa:5b:87:f5:85:7c:00:01:c7:25:e7:66:84:9a:
                    11:cf:65:9f:cc:84:a5:ef:b6:c0:b1:59:f3:84:b0:
                    36:7f:8e:fb:e3:f9:6d:91:45:05:25:ea:a6:b1:70:
                    d3:fb:01:fa:1d:64:0d:74:aa:58:be:8b:15:00:4a:
                    3b:1d:50:7c:6b:9a:c1:d8:66:de:68:c6:38:67:c5:
                    e3:2e:e5:61:22:83:57:df:f4:3b:20:48:a2:2a:85:
                    b5:6a:d0:99:b4:3d:58:48:5f:b4:b3:ea:a6:16:a7:
                    03:6f:39:f9:1b:1d:9c:0b:d5:20:7f:b0:72:87:cc:
                    b7:9f:30:17:2d:38:7b:c2:36:e3:7d:de:67:87:f7:
                    29:86:bf:bb:0e:28:e9:33:97:12:e3:4e:95:7c:af:
                    7a:2d:9e:e5:ae:76:51:47:2d:52:1d:7e:94:4f:d8:
                    d5:1f:51:29:6d:b6:5f:9a:43:76:b9:c4:6d:df:84:
                    bf:6a:2a:a9:79:67:4a:b9:c0:c8:af:cf:c6:9c:90:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AE:53:4C:AA:8A:2E:96:91:17:06:69:A9:48:58:0C:D0:1D:99:B0
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e372e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:a3:6f:9a:f6:b6:ae:a4:1d:6f:d4:e4:88:f4:e2:87:02:
         1a:61:19:ae:e8:ce:c4:14:19:72:f9:ee:8a:d5:25:c8:5e:e1:
         70:7b:b2:b2:c0:92:eb:58:54:4e:91:f3:92:ae:c1:d1:52:b2:
         54:a1:ed:de:fd:1f:fc:f6:bb:ce:79:a8:e7:e7:2c:4d:95:72:
         c1:31:c5:a0:ae:65:4b:ed:3c:7f:a5:a5:57:97:5c:f2:73:8f:
         24:61:2b:91:b3:95:81:30:11:b1:10:a4:41:e0:cf:df:b8:23:
         a4:e2:69:27:08:ad:08:39:8f:ed:f5:54:99:6b:0c:01:f3:38:
         b2:98:cc:33:70:06:f9:03:c8:23:14:81:ad:46:a2:3f:30:6f:
         e7:f4:4e:db:a5:ee:f9:ac:31:1e:5b:ce:8a:e2:ff:63:c5:08:
         09:5c:e7:5f:e8:bb:4a:ba:53:40:cb:81:b3:58:1c:0a:f4:3f:
         0c:1d:06:90:9c:ef:41:d8:40:e0:4a:58:13:f9:e9:39:a5:3e:
         72:8d:da:63:83:bb:c6:fd:82:e6:39:ea:8c:f2:2c:de:08:26:
         f7:bb:7a:94:53:09:33:c4:55:3e:00:0c:de:7e:8e:ed:64:c8:
         20:0d:0b:2c:35:01:fd:30:2b:ea:29:d8:42:9d:88:9c:70:9a:
         c0:e2:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net