Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35382e302f32342d3234203d3e203532343434.roa
File:                     3230302e3132332e35382e302f32342d3234203d3e203532343434.roa (raw, json)
Hash identifier:          2fA7ZedFFKaSaXcQzYo7hE3r9646ca3Fy8e/HkrWjLg=
Subject key identifier:   9B:35:04:A1:C0:00:4E:3F:EA:8D:67:01:A5:F6:09:27:40:DE:C6:45
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       05195D6E8EA9878856A117AFCCFBC10C1509063A
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35382e302f32342d3234203d3e203532343434.roa
Signing time:             Tue 14 Apr 2026 14:38:47 +0000
ROA not before:           Tue 14 Apr 2026 14:33:47 +0000
ROA not after:            Tue 13 Apr 2027 14:38:47 +0000
asID:                     52444
IP address blocks:        200.123.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:19:5d:6e:8e:a9:87:88:56:a1:17:af:cc:fb:c1:0c:15:09:06:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Apr 14 14:33:47 2026 GMT
            Not After : Apr 13 14:38:47 2027 GMT
        Subject: CN=9B3504A1C0004E3FEA8D6701A5F6092740DEC645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e0:ad:8d:5e:2b:aa:7b:90:c6:3f:06:a8:83:
                    d4:ec:67:94:fc:82:5a:d6:71:68:cc:a6:48:91:54:
                    58:b7:b1:13:04:f8:96:7f:ea:a0:c6:de:a1:4c:d6:
                    93:75:8d:40:e5:df:30:87:62:bc:ae:86:4a:b5:d3:
                    42:3e:0d:06:53:dc:34:4a:ea:47:5c:c8:86:37:4d:
                    c5:2d:3d:ac:33:11:87:60:5e:7a:d3:42:83:90:a0:
                    b9:8e:f4:b1:dd:33:a6:3b:ce:22:f5:fb:5f:4a:e0:
                    99:b1:1e:fb:57:24:b5:34:4d:4b:95:96:68:ee:bd:
                    7a:c4:1b:25:4c:6f:6e:6a:36:01:b3:00:b4:9f:a4:
                    48:8a:47:88:c7:d0:5b:2f:e8:4c:cb:fc:b2:b1:9b:
                    21:11:c6:0c:7a:da:d2:69:50:0e:a9:d3:dd:25:ab:
                    e8:24:0f:cd:20:20:5c:55:89:ce:17:6e:26:b1:27:
                    15:77:42:3c:66:68:91:6e:63:4b:1b:81:61:f0:ec:
                    18:c5:1d:84:27:8a:23:f9:85:7b:dc:10:01:4c:a1:
                    c1:83:2a:dc:75:d2:f5:57:26:56:d9:87:0f:bc:f8:
                    ce:87:49:39:8b:5c:d0:79:1f:c1:85:b3:f0:61:60:
                    e8:07:e7:7b:8a:e7:cf:85:90:33:74:55:a8:20:64:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:35:04:A1:C0:00:4E:3F:EA:8D:67:01:A5:F6:09:27:40:DE:C6:45
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35382e302f32342d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:47:5c:71:55:1f:fd:6b:d2:32:fb:e2:2b:5e:30:46:e6:1a:
         1e:29:05:5b:20:7c:89:66:42:7e:33:29:aa:11:19:fe:f6:93:
         6c:cc:22:5f:62:45:e4:d1:fe:86:1f:7d:2b:03:e4:d1:9b:10:
         61:02:b5:06:ca:20:b4:7e:e6:4f:9d:5a:ee:66:fe:d9:40:7f:
         e6:84:e6:41:a6:1f:66:d2:fe:a3:d8:49:9e:da:3d:13:7f:7d:
         36:98:58:8c:4e:ce:de:e3:ad:46:b2:11:e1:fa:e6:03:39:5c:
         4d:e1:53:72:f8:46:7f:78:29:97:2a:f9:35:6f:ee:9a:3a:c5:
         4f:7a:e2:6e:3f:31:71:69:56:97:89:62:21:5a:c3:66:52:93:
         0e:ee:24:c3:55:0f:ec:ff:49:7a:f6:8a:a6:97:9e:6a:c1:00:
         88:57:9a:30:a8:4e:fe:71:2b:69:06:59:b8:46:34:fe:fa:14:
         77:78:c6:34:a3:87:6c:46:97:7a:fc:7d:d9:fc:fc:ae:fe:08:
         44:4a:64:6f:fc:e2:d0:07:1a:39:2e:9e:50:fd:0f:a3:e6:e3:
         da:55:fb:bf:f4:be:9e:41:4f:75:91:34:35:77:cc:cb:ee:11:
         75:9a:be:f3:83:c2:1b:79:41:d4:fc:12:8e:1d:53:79:a8:1d:
         ed:02:dd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:31:19 2026 by rpki-client