Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36302e302f32342d3234203d3e203233323433.roa
File:                     3230302e31322e36302e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          hR3tjCR/BRc/c9ds8gn5peiq6Glieh9VLlrWNwYbB/o=
Subject key identifier:   EE:64:01:D6:6B:D9:E1:07:78:48:02:EE:90:50:7F:B4:33:A1:D3:02
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       2D44B14F8AC08B90018F254D8964572CBDF7F919
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36302e302f32342d3234203d3e203233323433.roa
Signing time:             Sat 29 Aug 2026 02:32:59 +0000
ROA not before:           Sat 29 Aug 2026 02:27:59 +0000
ROA not after:            Sat 28 Aug 2027 02:32:59 +0000
asID:                     23243
IP address blocks:        200.12.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Sep 2026 03:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:44:b1:4f:8a:c0:8b:90:01:8f:25:4d:89:64:57:2c:bd:f7:f9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Aug 29 02:27:59 2026 GMT
            Not After : Aug 28 02:32:59 2027 GMT
        Subject: CN=EE6401D66BD9E107784802EE90507FB433A1D302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:ce:ee:5e:81:5a:84:43:00:0e:47:43:52:
                    0f:6e:df:0c:a0:a1:37:89:c8:ef:09:fa:15:1f:52:
                    18:65:48:05:e9:74:02:8b:79:06:ac:00:1f:5d:b9:
                    6f:55:22:b6:9d:c3:3d:63:a8:d7:f8:73:93:5c:3d:
                    70:08:53:56:71:e9:60:fa:0c:de:b5:52:3e:01:2f:
                    d1:75:d4:b4:a4:ef:5d:e6:9c:3b:22:53:35:c3:e0:
                    2f:30:a9:a8:53:79:07:68:5e:8b:c0:12:98:09:06:
                    53:c9:ef:91:07:a7:9b:fa:d7:14:d0:ba:56:14:82:
                    66:7e:c1:37:9f:5e:a7:dd:31:51:ed:fc:37:c8:ff:
                    62:81:15:49:8b:93:ba:0c:5e:12:fc:c8:ba:6b:1d:
                    c7:bf:9e:77:30:ca:b9:b3:03:9e:ef:b1:64:c1:b6:
                    3b:5f:af:13:50:a2:94:70:38:5b:d1:f8:f9:7b:6e:
                    cd:e4:a5:95:cc:8c:33:44:43:6f:00:e3:41:6b:a7:
                    64:1e:2d:35:83:c6:9b:30:9d:d0:9b:a4:1c:bd:2d:
                    fc:a9:54:12:be:2d:73:f6:5c:ea:34:89:b4:62:1b:
                    26:88:41:2f:41:df:5e:d2:bc:d0:95:c3:e5:02:f7:
                    b9:e0:5e:c8:51:c4:2a:e9:73:35:90:80:3c:7b:56:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:01:D6:6B:D9:E1:07:78:48:02:EE:90:50:7F:B4:33:A1:D3:02
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36302e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:61:16:35:82:87:de:cd:13:b2:65:1b:fe:21:84:2f:00:ae:
         ed:4d:21:1b:54:e2:ce:49:d8:60:35:7f:92:07:15:2c:d3:ef:
         21:f1:1a:66:80:10:dc:88:e1:ba:55:f5:35:86:1a:95:65:7f:
         c4:af:f7:67:be:5f:bf:9b:07:b6:ef:c2:79:64:d7:99:2c:1f:
         23:a9:77:4f:0d:14:16:8a:ec:5c:3f:10:63:6a:49:90:56:c3:
         de:a3:a6:a1:5a:2b:07:49:8a:a5:28:8d:ad:60:19:56:2e:0d:
         5a:48:09:c9:82:9d:ab:4f:a1:ae:50:6a:c2:bc:86:59:6e:8d:
         a0:4c:85:84:75:05:57:be:c5:78:07:d5:a6:8c:cd:a5:9c:38:
         fd:ca:a2:59:5b:72:03:25:2e:9f:97:b4:17:d4:ed:50:46:ee:
         22:57:d2:54:15:57:b6:3a:62:9d:37:8f:54:fe:57:a2:06:17:
         ba:1e:a7:d6:4c:e0:aa:b8:df:10:13:bd:05:bc:10:dc:10:85:
         54:75:10:09:97:b1:5c:ca:01:8c:c9:d0:ba:4b:0b:14:92:30:
         62:ee:7b:9e:74:2d:43:73:6b:94:77:d9:57:26:96:3c:28:e8:
         df:4e:e4:ab:bd:89:73:1f:4a:55:d1:32:c6:72:33:2e:ab:13:
         07:a2:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 21:01:30 2026 by rpki-client