Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35362e302f32332d3234203d3e203532343434.roa
File:                     3230302e3132332e35362e302f32332d3234203d3e203532343434.roa (raw, json)
Hash identifier:          A0+DX4LcV6XfFSgSXhmMFYdLYP/OKaCy1VdyHc5C9IY=
Subject key identifier:   BD:C6:E9:50:D1:38:3D:DD:23:78:49:E3:88:9F:44:00:E6:93:D2:55
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       2EEF4C49F09824566EF428BCC5B07B42555E2C79
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35362e302f32332d3234203d3e203532343434.roa
Signing time:             Tue 14 Apr 2026 14:38:47 +0000
ROA not before:           Tue 14 Apr 2026 14:33:47 +0000
ROA not after:            Tue 13 Apr 2027 14:38:47 +0000
asID:                     52444
IP address blocks:        200.123.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ef:4c:49:f0:98:24:56:6e:f4:28:bc:c5:b0:7b:42:55:5e:2c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Apr 14 14:33:47 2026 GMT
            Not After : Apr 13 14:38:47 2027 GMT
        Subject: CN=BDC6E950D1383DDD237849E3889F4400E693D255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:62:4b:9f:6e:5b:71:66:ae:df:5a:9c:54:8a:
                    ed:64:3b:3e:2f:5b:83:04:1e:b3:f0:62:63:c3:f5:
                    b1:34:4e:55:42:44:0f:da:3c:36:f5:3e:d9:c4:30:
                    71:15:d1:ff:b8:0b:9e:b7:71:f6:4c:21:24:16:fc:
                    a7:67:94:7c:5b:c2:55:1e:45:2c:2d:b3:06:b1:bb:
                    7d:f1:68:fe:49:26:cf:51:d0:c8:55:df:27:b3:c2:
                    fc:6c:0c:53:74:ae:b5:ba:d9:02:ca:dc:a7:4b:79:
                    ad:a2:d2:ad:2f:10:63:ff:fd:b9:6c:ff:9e:19:16:
                    bd:e5:5f:09:97:de:c5:a7:05:08:e0:ad:c1:5d:e4:
                    ee:ba:2d:d7:ed:c9:b4:27:50:8b:32:6d:37:cc:d2:
                    2a:eb:0a:e0:a3:1c:46:48:80:fb:fc:a7:4e:04:96:
                    7e:d3:da:4c:2d:d0:47:dd:14:26:af:a6:6d:c6:3e:
                    c2:61:bb:87:d7:85:72:94:b3:eb:74:3c:27:87:36:
                    51:35:97:9e:9a:0e:59:64:ac:b3:6c:09:a9:5e:f4:
                    85:ce:ed:4f:87:63:59:ea:fe:82:db:40:ad:94:f5:
                    8f:c9:8e:e4:fb:ee:0e:3a:fd:a1:dd:ed:51:ca:69:
                    d7:85:8c:dd:2e:d4:76:f1:43:16:6e:61:db:f7:b3:
                    2d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:E9:50:D1:38:3D:DD:23:78:49:E3:88:9F:44:00:E6:93:D2:55
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35362e302f32332d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:79:e6:08:67:42:0f:0f:b3:c5:b4:7a:96:45:15:05:73:bd:
         63:af:f3:1b:02:69:d0:10:9b:22:bd:ea:00:4f:7c:88:cf:d7:
         c1:29:e0:18:94:8d:61:b9:0e:5a:cc:d6:d8:90:6e:d4:f4:9c:
         8d:4f:e6:8d:e5:6e:fe:b1:72:36:f8:0e:ce:fb:58:d9:58:c8:
         04:0d:b2:54:96:02:72:6d:c6:ef:8d:f7:b8:37:49:6b:da:ab:
         e7:ce:7a:d6:7b:d3:5c:28:27:f9:20:5b:57:3f:c8:b8:1d:73:
         d5:be:47:f0:01:c1:76:95:2b:8f:7c:c2:c4:63:16:d3:e2:90:
         fe:ed:3e:fb:56:aa:61:63:89:05:44:c5:52:1f:19:11:41:4a:
         8a:e1:86:18:7e:2e:06:66:24:a1:5e:37:cc:3d:d7:5e:37:4c:
         f9:6c:4d:cd:5e:36:68:79:cb:69:ad:75:29:1b:f0:0d:2c:67:
         8b:1d:e9:72:13:bd:44:3c:e4:f5:c0:c9:b0:db:42:64:e0:e1:
         24:3a:64:b2:3a:26:83:fd:4a:62:b5:70:ac:92:dc:93:12:cd:
         eb:2e:9d:99:cc:6c:8c:a4:b7:6e:18:36:5f:e8:8b:e1:44:50:
         36:fa:4b:29:96:33:bf:f3:40:5d:06:71:de:a8:ca:d0:6f:bc:
         bd:ed:f3:45
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULu9MSfCYJFZu9Ci8xbB7QlVeLHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQwNUZGOTYyQzEyNDBCMkU4Q0M2OEI0RUE0MUQxODdD
NTUwOTU5MTAeFw0yNjA0MTQxNDMzNDdaFw0yNzA0MTMxNDM4NDdaMDMxMTAvBgNV
BAMTKEJEQzZFOTUwRDEzODNEREQyMzc4NDlFMzg4OUY0NDAwRTY5M0QyNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4YkufbltxZq7fWpxUiu1kOz4v
W4MEHrPwYmPD9bE0TlVCRA/aPDb1PtnEMHEV0f+4C563cfZMISQW/KdnlHxbwlUe
RSwtswaxu33xaP5JJs9R0MhV3yezwvxsDFN0rrW62QLK3KdLea2i0q0vEGP//bls
/54ZFr3lXwmX3sWnBQjgrcFd5O66LdftybQnUIsybTfM0irrCuCjHEZIgPv8p04E
ln7T2kwt0EfdFCavpm3GPsJhu4fXhXKUs+t0PCeHNlE1l56aDllkrLNsCale9IXO
7U+HY1nq/oLbQK2U9Y/JjuT77g46/aHd7VHKadeFjN0u1HbxQxZuYdv3sy0vAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvcbpUNE4Pd0jeEnjiJ9EAOaT0lUwHwYDVR0j
BBgwFoAU7QX/liwSQLLozGi06kHRh8VQlZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkM4MUUzQzhCRkMwMjhFRkFDRjA4NjE0OTUxRkQwREI5
QTg2MjMyQ0MyNUNGOEI2MDZCQTcwNzVENjA2M0Y1LzAvRUQwNUZGOTYyQzEyNDBC
MkU4Q0M2OEI0RUE0MUQxODdDNTUwOTU5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDA1RkY5NjJDMTI0MEIyRThD
QzY4QjRFQTQxRDE4N0M1NTA5NTkxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJDODFFM0M4QkZDMDI4RUZBQ0YwODYxNDk1MUZEMERCOUE4NjIzMkND
MjVDRjhCNjA2QkE3MDc1RDYwNjNGNS8wLzMyMzAzMDJlMzEzMjMzMmUzNTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjM0MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAch7ODAN
BgkqhkiG9w0BAQsFAAOCAQEANHnmCGdCDw+zxbR6lkUVBXO9Y6/zGwJp0BCbIr3q
AE98iM/XwSngGJSNYbkOWszW2JBu1PScjU/mjeVu/rFyNvgOzvtY2VjIBA2yVJYC
cm3G7433uDdJa9qr58561nvTXCgn+SBbVz/IuB1z1b5H8AHBdpUrj3zCxGMW0+KQ
/u0++1aqYWOJBUTFUh8ZEUFKiuGGGH4uBmYkoV43zD3XXjdM+WxNzV42aHnLaa11
KRvwDSxnix3pchO9RDzk9cDJsNtCZODhJDpksjomg/1KYrVwrJLckxLN6y6dmcxs
jKS3bhg2X+iL4URQNvpLKZYzv/NAXQZx3qjK0G+8ve3zRQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:30:20 2026 by rpki-client