Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa
File:                     3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa (raw, json)
Hash identifier:          /3I3LYl+OKTzI45OxXfS0TMbghsrv0BTH5VaK+fTzZ8=
Subject key identifier:   45:9B:F0:5B:0C:D0:25:98:C9:FA:ED:EA:8F:C3:2A:26:B6:0C:2D:FC
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       E2DA127797DC2894E5A1C1257996A0EE9F3E04
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa
Signing time:             Tue 04 Feb 2025 20:08:07 +0000
ROA not before:           Tue 04 Feb 2025 20:03:07 +0000
ROA not after:            Tue 03 Feb 2026 20:08:07 +0000
asID:                     272885
IP address blocks:        200.123.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e2:da:12:77:97:dc:28:94:e5:a1:c1:25:79:96:a0:ee:9f:3e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Feb  4 20:03:07 2025 GMT
            Not After : Feb  3 20:08:07 2026 GMT
        Subject: CN=459BF05B0CD02598C9FAEDEA8FC32A26B60C2DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4d:54:de:f9:d5:73:ef:37:af:44:6d:94:ef:
                    97:b7:fa:52:51:9e:f6:be:3a:8d:f1:d0:07:db:54:
                    33:16:27:1f:67:1d:cb:4b:bb:3f:36:15:1f:81:dc:
                    a3:18:1b:8d:15:1b:48:e6:d1:c7:2c:88:46:c9:de:
                    32:64:52:3b:44:46:14:5f:82:b2:c1:f0:01:31:8c:
                    a9:d6:09:59:c1:84:c3:8b:c6:bb:00:5a:be:63:2a:
                    41:c4:db:ba:df:53:23:ca:65:44:eb:7a:4f:7a:02:
                    1b:e1:0c:6e:66:37:35:4a:15:9d:27:a3:af:dd:91:
                    39:1b:3b:97:4a:f0:3b:3d:96:b0:d9:42:3d:3b:4d:
                    7d:f6:8f:4b:9d:98:77:63:02:82:21:6a:e5:a1:10:
                    6f:9f:3a:1f:dc:ba:4d:77:e5:7e:54:e7:1c:e4:2d:
                    fa:e5:a1:c6:87:ae:6a:87:0c:3c:82:a5:f2:43:b3:
                    8e:00:ad:06:bb:e6:c5:54:89:b9:77:12:0c:9a:66:
                    a4:f2:77:0b:c0:37:3f:96:1e:c1:91:7f:e3:c8:55:
                    48:08:6b:7b:b0:ba:d8:c7:44:dd:f3:18:92:40:af:
                    da:91:84:e4:cc:89:47:f0:9f:78:0d:25:a0:97:a3:
                    26:d8:b7:c7:6c:75:86:bc:5b:70:56:a8:35:6f:be:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9B:F0:5B:0C:D0:25:98:C9:FA:ED:EA:8F:C3:2A:26:B6:0C:2D:FC
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:bd:d3:7b:07:97:92:48:ee:c9:1c:d1:9a:bd:f4:9a:8f:c8:
         c8:78:b6:99:5e:cd:ff:2c:40:53:b8:5a:3f:fb:dc:ce:92:46:
         38:23:86:3b:e7:a3:de:0c:ad:9a:1c:cc:5a:15:2c:a9:77:ac:
         8b:20:72:ce:5c:15:83:13:21:07:3d:6e:29:d7:d6:50:41:c6:
         30:05:43:41:99:75:0f:c5:1f:9b:27:a7:08:97:24:c9:3e:d3:
         34:d9:96:d6:54:aa:b1:2e:98:d4:13:40:b7:1a:7c:f1:d0:e9:
         70:e1:17:f7:2c:29:90:36:1a:74:01:a7:04:03:7a:4d:c3:12:
         07:4b:7a:38:94:a6:88:67:41:c7:59:e8:48:c2:fa:73:d5:0e:
         f8:18:9a:c6:6a:93:03:44:4e:d6:f8:c1:8d:b3:10:a0:c4:11:
         3a:23:b8:d8:77:6e:39:8e:bc:8b:ce:90:b6:24:cd:f4:48:c2:
         bf:60:0e:55:1a:55:c7:e8:71:60:60:e0:39:9f:90:1e:9c:1d:
         a1:1d:a4:1a:69:9d:48:76:a1:e1:b1:be:f9:a7:11:c4:d5:63:
         c8:12:23:06:af:7f:ad:4f:3c:16:d9:79:8a:52:a5:58:cb:68:
         d3:cb:69:47:88:5a:26:c0:ce:de:c2:5a:36:f0:90:59:fd:2a:
         d7:71:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:38:11 2025 by rpki-client