Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36302e302f32332d3234203d3e20323635363839.roa
File:                     3230302e3132332e36302e302f32332d3234203d3e20323635363839.roa (raw, json)
Hash identifier:          2pvCshhiZt++/BHOKUm+SYR9izpvXxvt3uw414N93gY=
Subject key identifier:   69:5D:62:BD:DC:86:94:2B:51:FB:A4:6B:E3:7C:67:76:9D:82:EB:D9
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       2FC1503ADAF7BA73E944E195B15A1C1CA83FF96B
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36302e302f32332d3234203d3e20323635363839.roa
Signing time:             Tue 04 Feb 2025 20:08:11 +0000
ROA not before:           Tue 04 Feb 2025 20:03:11 +0000
ROA not after:            Tue 03 Feb 2026 20:08:11 +0000
asID:                     265689
IP address blocks:        200.123.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c1:50:3a:da:f7:ba:73:e9:44:e1:95:b1:5a:1c:1c:a8:3f:f9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Feb  4 20:03:11 2025 GMT
            Not After : Feb  3 20:08:11 2026 GMT
        Subject: CN=695D62BDDC86942B51FBA46BE37C67769D82EBD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:15:03:24:69:15:b8:39:14:ff:a0:3a:04:
                    a4:f8:d9:8d:02:5a:a0:34:2b:ac:2a:ab:aa:d0:68:
                    18:3b:24:14:20:cc:3d:50:71:55:d9:8a:28:88:33:
                    67:90:5f:08:6a:51:91:b2:3b:25:79:a5:1c:65:7d:
                    c6:e2:af:60:d7:d9:70:c8:ca:a2:80:27:0d:a7:55:
                    fa:6a:a7:60:43:72:f5:30:c4:32:38:59:fc:f7:9e:
                    61:f7:3e:fa:cc:9c:f9:f5:82:74:5d:ac:c5:f3:94:
                    e8:5f:9c:74:c4:25:29:2d:e5:05:cc:84:bf:f9:a0:
                    e1:79:e9:d1:24:42:45:5d:29:82:08:8e:af:1b:0e:
                    57:01:ab:9b:ae:a7:dd:31:9c:08:ac:f0:29:14:9e:
                    f5:ba:73:4d:23:60:8e:1c:73:e4:73:60:3c:1e:af:
                    69:a7:da:64:f5:53:c3:ff:e5:4f:20:63:15:f3:49:
                    76:f4:8a:05:8f:f1:c6:d8:3a:4c:49:e3:1d:1e:85:
                    33:3f:07:bb:30:1c:88:79:e2:18:1f:e6:a3:55:09:
                    a5:81:31:6a:c0:2e:17:39:bc:dc:90:4b:16:ca:b6:
                    dc:73:96:e9:22:a6:01:d5:7a:5c:7f:9b:b8:eb:5f:
                    14:06:4c:ac:94:3f:86:32:fd:4e:df:42:7f:c0:38:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:62:BD:DC:86:94:2B:51:FB:A4:6B:E3:7C:67:76:9D:82:EB:D9
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36302e302f32332d3234203d3e20323635363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:5d:c0:e5:08:52:c1:ce:7b:a8:5a:c2:b5:0c:0e:40:2c:
         4a:ba:2b:a5:01:8d:fe:bf:fe:65:e3:2b:8a:3f:26:ea:6a:7a:
         4b:f8:b3:3c:45:74:11:47:9e:f8:8a:55:0f:4a:34:3c:80:2b:
         dc:51:81:76:c0:91:91:eb:ab:c9:92:c6:1a:2f:63:e3:b2:01:
         1e:d3:68:61:9d:fb:fe:e8:09:23:c3:b5:01:e9:62:70:34:91:
         7a:13:06:b2:21:5d:2a:eb:d4:6c:a9:0f:6f:9a:3e:39:e4:e8:
         77:da:9a:db:37:3a:93:51:fd:55:c2:84:64:79:1f:23:7f:3a:
         c3:e1:47:be:83:64:7e:5d:13:92:f5:6c:a7:a9:11:e7:94:13:
         4a:94:aa:10:26:7a:3f:62:6c:74:c9:9b:eb:f4:67:5e:69:30:
         12:ad:ff:65:43:e8:11:03:5d:3c:6b:de:a5:60:46:d5:63:02:
         13:93:54:af:e5:59:fa:06:ac:37:f2:32:d2:28:3c:51:87:57:
         50:10:c3:8d:b8:59:94:2d:39:46:b1:21:f7:d4:88:b0:59:4d:
         85:5d:37:f6:0b:e2:7b:e3:04:42:b6:89:9e:05:63:e1:35:e0:
         25:a3:9e:e0:09:02:ab:d0:aa:a2:21:98:82:a3:71:88:b1:92:
         a7:ed:34:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:52:27 2025 by rpki-client