Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35312e302f32342d3234203d3e20323735303039.roa
File:                     3230302e3132332e35312e302f32342d3234203d3e20323735303039.roa (raw, json)
Hash identifier:          hESwVzpRbsk2cM+lU/Lfv6qgxD67fQwRAcGTlQhtPRA=
Subject key identifier:   EA:3D:70:EC:35:CA:06:83:FC:62:00:F1:81:72:6F:06:3B:8E:D2:E8
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       1AA086D7D916D0BB5C7985BE449020E065196D2F
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35312e302f32342d3234203d3e20323735303039.roa
Signing time:             Wed 12 Aug 2026 18:30:00 +0000
ROA not before:           Wed 12 Aug 2026 18:25:00 +0000
ROA not after:            Wed 11 Aug 2027 18:30:00 +0000
asID:                     275009
IP address blocks:        200.123.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a0:86:d7:d9:16:d0:bb:5c:79:85:be:44:90:20:e0:65:19:6d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Aug 12 18:25:00 2026 GMT
            Not After : Aug 11 18:30:00 2027 GMT
        Subject: CN=EA3D70EC35CA0683FC6200F181726F063B8ED2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:4c:8a:82:ce:57:77:eb:c2:b3:ad:7a:ab:
                    2e:38:6a:85:51:c8:dc:2a:f4:90:ab:34:44:ce:6a:
                    59:fa:75:7c:db:ca:4e:d9:60:ad:d9:a9:d5:15:8e:
                    8b:a8:3e:02:77:dc:a0:da:34:3c:4b:e9:2a:43:f3:
                    60:fc:5c:78:3c:96:a8:9e:94:5c:4d:f6:5a:90:a8:
                    c4:33:ce:e1:d0:24:24:6e:c3:e0:2f:4a:f2:48:02:
                    54:8e:98:ac:e0:87:cf:0c:9b:9c:c9:10:d8:a5:82:
                    aa:c5:69:eb:90:3a:c1:9d:21:8b:19:70:8f:9f:d0:
                    aa:ce:1f:1f:38:1b:b9:7d:c8:19:fa:b7:3c:5c:30:
                    90:30:17:da:72:51:d1:41:3b:b1:c6:11:e8:5e:92:
                    e9:6e:3d:8b:81:71:9b:4b:29:bc:41:6c:1c:6e:f8:
                    f0:c7:80:e1:a6:b7:39:54:e0:e6:36:bd:9d:33:5b:
                    b9:de:2c:28:7c:62:18:5f:1e:06:95:ab:26:b8:71:
                    be:7b:53:2b:c6:a4:41:6b:3c:99:87:74:2e:bf:6b:
                    3b:53:99:95:db:ca:e8:a3:92:49:4e:05:b2:bc:e6:
                    81:07:4c:b9:1d:3a:75:e4:3a:9f:3b:95:b0:a3:35:
                    29:ac:bf:43:5d:10:3b:65:3a:76:c6:bb:5b:83:80:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3D:70:EC:35:CA:06:83:FC:62:00:F1:81:72:6F:06:3B:8E:D2:E8
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35312e302f32342d3234203d3e20323735303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f9:11:74:25:1f:7c:7b:44:3c:0f:31:11:21:4b:75:a7:47:
         63:74:b5:ce:9b:6c:e3:6e:d5:db:6a:b7:d1:b1:4e:4e:ef:0a:
         e8:55:90:61:42:ea:c8:16:f6:8b:ba:12:1b:32:38:40:b5:f8:
         1b:de:e9:1d:e3:fa:fe:c3:21:a2:d3:e4:58:06:58:2c:23:e7:
         84:10:ef:78:0a:c5:b2:59:df:4d:5c:62:68:48:2c:a0:62:bc:
         6e:28:2a:a5:ad:87:60:85:d8:f7:30:39:cc:ac:57:df:8b:f2:
         15:e3:a6:d4:e5:c1:f1:82:33:ec:aa:14:c7:3c:d5:45:aa:4d:
         03:c6:4e:9c:d2:22:4f:eb:9d:a8:62:6d:61:9d:b9:a0:e8:5d:
         ce:13:5f:2e:b1:e2:64:76:88:3d:bc:4a:d3:f7:b3:6c:fc:82:
         f6:25:45:ae:0a:94:dd:b1:b4:65:d2:ac:6f:1c:c2:dc:85:a1:
         e0:4a:19:89:7c:61:f4:71:b5:68:f8:08:92:51:d6:37:b9:0d:
         84:d6:9f:29:ac:52:6e:cc:d8:c3:3b:c1:e3:c9:9f:8f:e4:6f:
         03:b5:99:9a:e4:58:af:d9:e0:c6:ea:b2:9b:35:35:46:6c:7f:
         5a:29:41:42:f4:6d:fc:5d:c0:df:ce:5a:fe:b6:d6:e1:b5:6f:
         c5:12:b3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:42:51 2026 by rpki-client