Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35362e302f32332d3234203d3e203532343434.roa
File:                     3230302e3132332e35362e302f32332d3234203d3e203532343434.roa (raw, json)
Hash identifier:          PmdLmv1aqaX/tXHdb0/szCXkeIinVuxnslhPWOI4BLs=
Subject key identifier:   1A:24:CC:C8:6E:E5:39:AD:42:11:B6:B0:FE:30:F6:EA:67:97:02:9A
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       63836BC65F1D06E3DE014EF42818B97DC388A4EB
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35362e302f32332d3234203d3e203532343434.roa
Signing time:             Tue 13 May 2025 14:18:42 +0000
ROA not before:           Tue 13 May 2025 14:13:42 +0000
ROA not after:            Tue 12 May 2026 14:18:42 +0000
asID:                     52444
IP address blocks:        200.123.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 10:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:83:6b:c6:5f:1d:06:e3:de:01:4e:f4:28:18:b9:7d:c3:88:a4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: May 13 14:13:42 2025 GMT
            Not After : May 12 14:18:42 2026 GMT
        Subject: CN=1A24CCC86EE539AD4211B6B0FE30F6EA6797029A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:20:8d:44:9d:82:b7:91:99:b3:30:27:30:
                    eb:a9:4c:a1:86:ee:fc:d7:0d:00:66:95:37:42:20:
                    5d:36:76:4b:de:70:79:ee:a5:31:70:35:c7:e2:2b:
                    dd:30:91:cf:de:7b:5a:4b:0e:22:7b:e5:6c:f8:58:
                    2f:e4:2e:c5:6d:40:42:eb:1c:3c:9d:1f:58:83:cc:
                    a6:f4:32:e3:4c:7d:a7:64:f3:4e:42:b0:f7:2c:29:
                    56:39:2b:7a:fb:be:dd:58:8b:26:c4:0c:23:73:f2:
                    93:a0:63:94:cc:8b:48:8c:2b:56:30:67:36:4f:fa:
                    d3:92:ad:77:ab:74:2b:61:9a:9b:e0:55:88:be:8c:
                    3e:bb:c5:d5:bc:60:1d:ce:0a:39:ef:32:8f:fa:3e:
                    5f:70:15:ea:e8:6f:40:78:1f:68:08:91:ab:24:73:
                    8a:61:ca:83:da:0e:1d:e4:fe:3b:6a:96:72:8a:82:
                    9b:01:dd:08:88:a5:f3:0a:7a:ed:7b:1c:ca:8d:2c:
                    92:47:65:c0:d7:8f:99:06:3f:85:d6:b3:3f:79:f4:
                    b3:a3:1e:7d:65:ec:09:9e:27:ee:d2:b4:f0:46:ac:
                    8a:2e:f6:fe:ea:4e:cd:7c:c3:da:7e:43:fd:1a:3c:
                    fb:83:28:cb:4e:ef:23:0a:66:28:c0:fe:99:6f:03:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:24:CC:C8:6E:E5:39:AD:42:11:B6:B0:FE:30:F6:EA:67:97:02:9A
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35362e302f32332d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:23:5a:68:67:f8:62:dc:4f:42:0c:ce:0b:70:d8:aa:09:08:
         8f:77:23:d7:38:52:30:be:93:b3:a9:ce:08:0e:e3:11:e9:bf:
         40:50:4c:4e:35:6d:15:48:c8:3e:9f:9a:33:c0:90:21:96:47:
         42:a5:56:97:a1:7b:19:97:55:de:d5:81:c8:07:2a:44:e4:47:
         1d:b1:a0:ef:ba:16:1c:e0:2b:6b:e0:ca:39:62:31:d1:5d:5e:
         be:ea:16:07:b3:d8:76:cb:30:84:1b:d6:d3:71:0f:69:84:bb:
         c5:b0:95:ce:e3:33:f6:cb:95:8a:60:e4:6e:0d:e4:4c:a1:dc:
         65:6d:4d:fc:14:c7:4b:49:e2:64:1f:dc:96:28:22:02:7c:27:
         fe:f6:7a:a5:a1:26:a5:96:f8:dc:77:de:7c:68:a2:f9:8d:f8:
         eb:97:5f:1e:6f:11:07:7f:b2:3c:10:79:ea:a2:74:13:97:81:
         e1:3d:7c:4f:bd:e3:96:52:02:77:3f:1d:b7:83:14:a3:45:dc:
         ef:4b:e7:e9:f6:e9:3d:1c:46:13:44:49:a4:d8:30:83:44:68:
         72:8b:9d:72:1c:d1:13:e6:65:56:21:c6:5e:50:6f:f5:83:b5:
         74:f6:cf:7e:39:04:cb:70:aa:bd:82:3f:dc:17:c1:2c:dc:31:
         35:e2:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 09:35:46 2025 by rpki-client