Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e20323733313132.roa
File:                     3230392e34352e32302e302f32342d3234203d3e20323733313132.roa (raw, json)
Hash identifier:          GVsBK8OKtSKeHqjPlAm2wQdJiSxFvBtWhmYH+CStUB4=
Subject key identifier:   72:38:22:4E:D0:3D:AB:05:97:F5:4C:43:82:C7:DE:85:D3:0C:BF:D7
Certificate issuer:       /CN=830123DD60A275D6932F9910FF8F5827E6D8A206
Certificate serial:       5B37163130EF3592D4FD1EF818BD92D46DF16A0B
Authority key identifier: 83:01:23:DD:60:A2:75:D6:93:2F:99:10:FF:8F:58:27:E6:D8:A2:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/830123DD60A275D6932F9910FF8F5827E6D8A206.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e20323733313132.roa
Signing time:             Sun 20 Jul 2025 05:25:56 +0000
ROA not before:           Sun 20 Jul 2025 05:20:56 +0000
ROA not after:            Sun 19 Jul 2026 05:25:56 +0000
asID:                     273112
IP address blocks:        209.45.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/830123DD60A275D6932F9910FF8F5827E6D8A206.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/830123DD60A275D6932F9910FF8F5827E6D8A206.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/830123DD60A275D6932F9910FF8F5827E6D8A206.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:37:16:31:30:ef:35:92:d4:fd:1e:f8:18:bd:92:d4:6d:f1:6a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830123DD60A275D6932F9910FF8F5827E6D8A206
        Validity
            Not Before: Jul 20 05:20:56 2025 GMT
            Not After : Jul 19 05:25:56 2026 GMT
        Subject: CN=7238224ED03DAB0597F54C4382C7DE85D30CBFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:c4:09:a7:a6:4f:20:8f:cd:8d:96:b7:56:
                    b5:44:82:47:03:0f:dd:d5:67:77:a6:eb:69:df:37:
                    f7:f5:e4:91:5b:84:86:a3:d9:ef:c3:a9:7a:89:ff:
                    45:88:e0:83:f8:83:ef:21:35:6d:85:ef:85:fc:2d:
                    bc:ec:a3:ab:73:1a:c4:27:32:a1:f3:70:06:04:27:
                    0f:f9:70:1e:1e:6f:76:77:7a:9c:50:26:2b:c0:2b:
                    61:55:ec:db:9b:ee:bd:4f:ff:bb:15:28:00:b2:7d:
                    b5:c8:1f:27:a7:55:0f:b3:10:7d:7b:ee:2c:86:6c:
                    83:92:22:17:d7:25:dc:ad:01:ed:87:b3:1d:3d:8e:
                    8a:b7:83:c7:63:fc:07:e9:66:97:d2:21:55:b6:d7:
                    71:5b:e8:01:ee:2e:a2:a8:89:38:0d:0a:05:c5:d0:
                    34:78:31:76:b0:6a:e6:46:2a:5b:ca:90:83:da:76:
                    9f:db:f8:60:47:37:80:8f:34:e8:1f:2a:e6:04:f4:
                    48:c4:de:e4:04:1f:7f:77:63:54:09:ec:23:e4:ab:
                    88:3c:79:3c:29:c6:b9:2d:51:a8:98:8d:5a:d2:72:
                    81:51:f7:59:31:61:bf:03:be:74:0e:bf:d9:20:29:
                    71:a7:7a:97:ca:6b:3b:28:6a:da:0c:aa:75:ca:43:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:38:22:4E:D0:3D:AB:05:97:F5:4C:43:82:C7:DE:85:D3:0C:BF:D7
            X509v3 Authority Key Identifier:
                keyid:83:01:23:DD:60:A2:75:D6:93:2F:99:10:FF:8F:58:27:E6:D8:A2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/830123DD60A275D6932F9910FF8F5827E6D8A206.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/830123DD60A275D6932F9910FF8F5827E6D8A206.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6AC5F5369D37487E526BDC129212B6016F5E6B928C68D1308A029FAFC9CD20D/0/3230392e34352e32302e302f32342d3234203d3e20323733313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.45.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:9d:69:e6:eb:d8:a7:05:da:6f:d6:e9:60:7d:7a:9a:8e:ef:
         a1:82:0e:32:6e:1a:0b:51:e7:5e:01:97:75:13:84:02:d0:ef:
         fd:f7:da:ee:a2:28:8e:e0:31:d7:b0:bf:8f:d5:cc:f1:3b:5a:
         e0:8b:2e:a1:08:4b:b3:8e:60:c8:d8:2c:18:31:44:37:97:d9:
         a0:c3:2c:1e:7d:e6:17:e3:cb:c3:ef:eb:b6:66:0b:59:85:44:
         76:32:c3:9b:d6:00:2b:45:4c:a4:f7:3c:c3:98:09:b5:cf:a3:
         fb:af:32:a1:a9:c5:e5:5a:72:a6:c5:dd:b7:c6:b0:3e:6d:87:
         9f:c4:02:41:a7:19:f8:34:40:25:2c:b2:91:2d:9e:60:12:90:
         8a:b1:30:d3:46:ea:62:52:fc:61:aa:03:4f:82:f1:d8:4b:5d:
         92:8b:da:ca:db:42:0f:93:f0:8d:5d:dc:84:be:90:17:6d:66:
         9a:b9:5a:11:aa:f7:cd:12:37:ea:8f:a7:28:c9:15:30:56:f0:
         15:99:91:a1:07:ea:09:f5:74:bd:41:21:5a:8b:be:46:87:2e:
         76:dc:54:4f:31:57:b9:33:95:24:ae:4d:a5:2e:d4:37:5c:91:
         1b:b2:7b:87:18:d6:cd:6f:ec:ac:65:f9:84:dc:81:61:f3:f7:
         f7:3d:80:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:20:55 2025 by rpki-client