Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34312e302f32342d3234203d3e20323733323337.roa
File:                     3230302e3132332e34312e302f32342d3234203d3e20323733323337.roa (raw, json)
Hash identifier:          iVYL+ZZBQj9TdsRJfCzB3mG2gM6WFd5oq8uWE8hmZe0=
Subject key identifier:   5A:D0:F9:B9:44:F4:F3:0F:CC:FF:1D:4F:69:57:4C:3B:88:EC:A5:58
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       59A471212DEAE6A92ED37900CCA741C1B27923C4
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34312e302f32342d3234203d3e20323733323337.roa
Signing time:             Tue 28 Oct 2025 00:30:00 +0000
ROA not before:           Tue 28 Oct 2025 00:25:00 +0000
ROA not after:            Tue 27 Oct 2026 00:30:00 +0000
asID:                     273237
IP address blocks:        200.123.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a4:71:21:2d:ea:e6:a9:2e:d3:79:00:cc:a7:41:c1:b2:79:23:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Oct 28 00:25:00 2025 GMT
            Not After : Oct 27 00:30:00 2026 GMT
        Subject: CN=5AD0F9B944F4F30FCCFF1D4F69574C3B88ECA558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:81:d5:b3:19:fa:5c:35:51:55:bc:aa:de:
                    83:49:b1:79:85:b8:2d:7b:e0:ec:0f:6c:7b:f1:71:
                    e6:32:12:f7:f9:7e:7e:4b:0e:d8:40:01:cd:a6:78:
                    79:a7:6d:23:61:d6:07:14:7a:11:c9:76:39:a3:3b:
                    a0:a9:d8:48:0f:0c:df:b1:3f:f6:dd:52:50:d4:2f:
                    bf:c3:bd:31:19:67:aa:e2:b2:00:35:b8:e5:15:2c:
                    34:a6:b7:68:4f:57:66:cd:a5:2c:8e:d5:e1:f6:9d:
                    37:47:ca:ce:80:44:63:ff:1a:93:b2:f8:ae:03:e0:
                    df:4e:bb:20:fc:1b:bf:76:d1:fe:88:41:19:24:28:
                    8b:88:71:e8:74:fd:85:cd:1f:4b:a1:4f:38:ec:02:
                    c1:86:fd:20:13:06:08:fe:4b:2a:d3:4a:05:5c:0c:
                    a8:6d:c7:d2:1d:55:ff:e7:fd:9c:4c:1b:98:13:36:
                    4d:8b:70:96:b1:20:13:18:6e:2e:75:5c:1b:b6:78:
                    dd:f8:6a:85:42:27:0f:ad:8d:88:27:ae:27:86:10:
                    df:0d:0a:fa:1c:16:86:07:b5:97:43:ff:c9:88:0a:
                    fa:a1:77:5a:f4:48:40:8c:e9:32:7b:65:2c:7e:10:
                    a2:37:52:fa:31:09:5e:36:3f:a2:4e:b8:de:62:df:
                    4e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D0:F9:B9:44:F4:F3:0F:CC:FF:1D:4F:69:57:4C:3B:88:EC:A5:58
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34312e302f32342d3234203d3e20323733323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:bf:29:c6:dc:6c:95:19:0c:c2:d6:1b:f2:5b:05:2d:0f:41:
         c6:ce:34:42:ea:50:0a:98:d3:91:ea:1e:a6:13:bd:ac:25:b6:
         b1:e2:68:0f:b6:f1:52:6b:8e:4a:86:e2:82:62:7d:79:81:1d:
         65:f5:23:1e:51:69:46:06:10:c9:96:41:96:34:c6:83:64:ee:
         75:bc:f5:5d:ba:b9:1e:0f:1e:c0:aa:7f:83:25:75:f7:1a:09:
         c5:81:c9:3d:ef:ce:b5:ce:bc:44:c6:f7:58:81:e2:ec:67:e8:
         62:f2:dd:fb:2c:1e:29:49:45:e6:02:fd:ff:32:50:c7:87:8d:
         fd:2d:69:33:07:82:3e:ba:0d:6c:2c:1f:10:b5:6b:8c:21:c6:
         c0:9b:5a:29:62:5b:1b:6f:d3:5e:46:07:67:72:15:fd:ca:d9:
         e0:42:b9:e5:81:3a:2e:27:1b:0b:42:bf:5b:20:df:ef:20:56:
         4e:4b:dc:85:d8:06:e8:9f:8b:15:e0:aa:a1:e1:f8:be:04:a0:
         8f:54:95:65:16:11:1c:d6:3f:79:73:69:5f:27:1c:01:85:07:
         18:d5:80:b7:d2:1a:01:9e:ae:56:37:3a:47:00:40:45:9e:9d:
         b8:8d:76:f0:4e:f2:83:5d:bf:c6:30:b8:21:48:60:b9:5a:8a:
         ff:18:7a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:37:05 2025 by rpki-client