Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33382e302f32342d3234203d3e20323734303234.roa
File:                     3230302e3132332e33382e302f32342d3234203d3e20323734303234.roa (raw, json)
Hash identifier:          qBXfWONPXq7B8aIDTM5nvem3RE6bLo/0o/ZSklCK3ao=
Subject key identifier:   CA:69:C0:08:0C:02:39:F2:90:D0:60:AA:E3:6F:11:78:8B:1F:B4:84
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       181BFA2385928CB620039C986469B54055461A09
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33382e302f32342d3234203d3e20323734303234.roa
Signing time:             Wed 27 Aug 2025 21:20:00 +0000
ROA not before:           Wed 27 Aug 2025 21:15:00 +0000
ROA not after:            Wed 26 Aug 2026 21:20:00 +0000
asID:                     274024
IP address blocks:        200.123.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Sep 2025 20:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1b:fa:23:85:92:8c:b6:20:03:9c:98:64:69:b5:40:55:46:1a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Aug 27 21:15:00 2025 GMT
            Not After : Aug 26 21:20:00 2026 GMT
        Subject: CN=CA69C0080C0239F290D060AAE36F11788B1FB484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:cd:86:ed:be:0e:d8:2e:ed:8e:6e:41:a9:
                    3b:4e:d7:9e:b7:3a:72:21:54:68:b5:2a:68:67:e9:
                    1f:cb:df:d1:46:94:fd:5e:a7:09:4f:51:92:dc:a5:
                    2d:36:0e:13:3a:d3:c1:39:77:6e:42:06:7a:a9:53:
                    10:d7:c0:f0:4a:55:b7:9b:21:a4:b6:cc:51:7e:39:
                    c2:0a:8d:90:35:fd:59:8d:b1:01:23:2d:05:73:64:
                    94:32:e9:fb:c2:d6:e6:81:d6:c1:e9:91:a9:3f:72:
                    15:ad:9c:d5:8e:dd:22:f9:c5:7d:fc:2e:0b:8d:b8:
                    ba:d5:63:77:87:b9:ed:ac:c5:3f:51:79:25:58:44:
                    5b:02:f4:50:ba:58:7f:11:76:a7:ca:40:85:06:55:
                    fe:de:76:e3:0c:d8:0e:d1:f2:b2:2a:c9:c1:24:f6:
                    51:31:95:81:3c:af:cd:04:69:46:50:7c:2f:29:bc:
                    9d:35:53:c2:3e:ec:4a:78:a8:d4:66:92:49:35:47:
                    f5:0d:c2:5e:cc:14:71:f2:61:81:c0:97:ab:9a:4a:
                    c0:c4:47:4a:98:39:5a:eb:8d:65:b9:d8:e4:bd:53:
                    3b:12:fc:5c:ec:b5:8b:ae:4a:5d:58:18:c4:9e:aa:
                    e1:1f:c3:5f:a6:f9:26:e1:43:e0:54:36:13:53:ef:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:69:C0:08:0C:02:39:F2:90:D0:60:AA:E3:6F:11:78:8B:1F:B4:84
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33382e302f32342d3234203d3e20323734303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:c2:72:9b:39:82:1a:88:4a:51:4e:8d:3e:e9:6b:4e:36:70:
         c2:8c:a7:19:3d:2f:8c:8b:11:5e:38:f2:3b:52:12:ca:9b:34:
         23:89:4b:df:00:33:fa:c5:dd:01:ab:16:03:05:2f:fb:3e:d9:
         ba:8b:b5:dd:83:de:3e:44:45:18:b1:75:89:e1:04:39:a3:df:
         9d:d4:08:82:79:a0:fa:ed:82:88:4f:2b:ab:95:95:cd:52:b9:
         63:ee:c3:19:16:be:19:b3:90:c3:a6:db:54:83:24:54:e0:ae:
         c1:df:56:08:b3:af:ce:d8:1f:c2:81:cd:13:41:4c:09:8a:2d:
         cf:d2:1a:34:e3:36:94:b7:f1:0c:f3:c2:05:79:f6:50:9a:93:
         42:40:f5:7d:65:23:b6:fd:47:8b:89:63:e7:66:ea:e6:48:09:
         32:eb:fd:80:5e:f7:41:bc:7c:ad:a3:16:03:29:36:78:7d:9c:
         63:51:47:16:65:14:65:46:c7:74:c7:4c:bd:68:c1:93:9a:12:
         78:0a:d8:78:81:c9:be:51:ac:cb:37:bb:7f:41:f9:22:a0:2f:
         f4:5c:00:58:b8:88:a6:2b:c7:20:e4:a2:9d:d2:96:6a:dc:05:
         02:e8:58:09:b0:7a:92:3c:1d:cb:59:6f:98:3a:79:6b:55:df:
         84:d3:ed:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 05:09:35 2025 by rpki-client