Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35392e302f32342d3234203d3e203130363137.roa
File:                     3230302e3132332e35392e302f32342d3234203d3e203130363137.roa (raw, json)
Hash identifier:          0Xni6ER3qdU8GRMwDoh4crCzM7n6rMo0rqGKUtv/gDk=
Subject key identifier:   3D:DA:9F:0A:B1:40:19:AE:08:BC:A2:5A:0E:56:D9:74:10:41:B6:E9
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       1E8AC182CF81646DCA733FEED667E4E8567BD71F
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35392e302f32342d3234203d3e203130363137.roa
Signing time:             Tue 22 Jul 2025 01:26:07 +0000
ROA not before:           Tue 22 Jul 2025 01:21:07 +0000
ROA not after:            Tue 21 Jul 2026 01:26:07 +0000
asID:                     10617
IP address blocks:        200.123.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8a:c1:82:cf:81:64:6d:ca:73:3f:ee:d6:67:e4:e8:56:7b:d7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Jul 22 01:21:07 2025 GMT
            Not After : Jul 21 01:26:07 2026 GMT
        Subject: CN=3DDA9F0AB14019AE08BCA25A0E56D9741041B6E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:5f:d5:82:29:46:c0:a3:2e:c4:73:5f:be:
                    39:e7:25:3e:ad:95:68:52:9f:2d:f2:01:ba:89:69:
                    60:ea:ed:5b:17:7b:6f:35:af:b4:e5:08:7a:47:07:
                    98:af:06:ce:12:01:58:21:7c:10:e2:c7:8f:7b:4d:
                    a3:eb:72:51:ad:a7:52:ab:26:3d:df:50:3c:d3:5a:
                    13:82:c4:51:48:a5:3d:f3:bb:a1:0b:48:2e:23:c7:
                    0b:6e:ec:57:5f:58:46:03:23:6f:35:30:13:f6:02:
                    79:55:1e:9c:74:5d:eb:b8:79:aa:71:0d:24:6b:14:
                    5c:03:53:9c:10:40:5c:6e:34:10:b1:55:3c:d1:ce:
                    df:29:fd:3c:50:86:a3:00:86:42:31:c4:f4:4d:6f:
                    f7:bf:53:16:d5:12:4b:c6:0b:92:06:0f:d4:2b:34:
                    b6:f1:e0:a6:9f:96:11:c9:20:4d:d7:d5:c9:69:e1:
                    61:a5:e4:67:9e:cb:42:8f:c2:c3:5f:28:89:ea:15:
                    09:e1:14:e2:e2:4e:4a:d7:d1:6c:2a:b3:be:6d:66:
                    4b:6e:ac:31:18:8a:45:cb:0f:73:06:c6:6b:51:3e:
                    9e:7e:8b:4c:be:b6:04:e8:c0:08:9e:c8:cf:67:dc:
                    25:d1:af:83:79:26:6e:72:1f:7c:51:05:7c:4b:c3:
                    77:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DA:9F:0A:B1:40:19:AE:08:BC:A2:5A:0E:56:D9:74:10:41:B6:E9
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35392e302f32342d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:2f:ef:1d:81:ca:76:c9:46:53:d3:00:40:d3:6f:d4:6f:4c:
         da:a4:4d:ef:ad:cf:0c:91:fd:83:5c:09:7b:5a:4e:0a:22:9d:
         fa:45:c0:2e:75:e7:51:81:89:7d:12:6a:ef:8d:66:15:41:3b:
         d7:43:2d:71:28:ce:4f:28:58:13:90:55:eb:27:6c:8c:29:65:
         30:cd:27:29:99:a7:05:c3:9f:d2:bb:80:ce:99:78:6d:9f:65:
         06:e1:a7:eb:72:89:2f:67:aa:0f:ac:2d:2c:f6:25:c1:f0:f5:
         7a:60:a1:6f:2d:e0:8b:77:6b:af:8c:ba:89:f5:07:7d:1f:65:
         b0:00:6e:71:3e:fd:1d:8a:5f:16:6b:23:21:f6:37:3a:24:d5:
         f4:9b:f0:dc:44:12:cd:df:b7:98:08:e4:8e:b6:35:7f:8d:91:
         32:d6:35:a1:11:c2:d7:4c:9b:25:52:50:d9:8c:6f:d5:15:ab:
         b9:0d:05:24:6b:e7:43:10:b9:8f:44:be:b9:f6:87:e3:51:9d:
         fc:5d:ef:f6:f2:b4:25:cf:57:0f:99:af:ea:23:d5:6f:cf:64:
         aa:7b:52:68:6c:1a:bf:2b:e5:aa:6f:73:6a:3e:68:8b:79:f5:
         10:49:60:a1:c5:7e:e6:a1:7b:07:eb:d8:60:21:6f:fd:b3:26:
         e4:7e:fa:45
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHorBgs+BZG3Kcz/u1mfk6FZ71x8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQwNUZGOTYyQzEyNDBCMkU4Q0M2OEI0RUE0MUQxODdD
NTUwOTU5MTAeFw0yNTA3MjIwMTIxMDdaFw0yNjA3MjEwMTI2MDdaMDMxMTAvBgNV
BAMTKDNEREE5RjBBQjE0MDE5QUUwOEJDQTI1QTBFNTZEOTc0MTA0MUI2RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChdl/VgilGwKMuxHNfvjnnJT6t
lWhSny3yAbqJaWDq7VsXe281r7TlCHpHB5ivBs4SAVghfBDix497TaPrclGtp1Kr
Jj3fUDzTWhOCxFFIpT3zu6ELSC4jxwtu7FdfWEYDI281MBP2AnlVHpx0Xeu4eapx
DSRrFFwDU5wQQFxuNBCxVTzRzt8p/TxQhqMAhkIxxPRNb/e/UxbVEkvGC5IGD9Qr
NLbx4KaflhHJIE3X1clp4WGl5Geey0KPwsNfKInqFQnhFOLiTkrX0Wwqs75tZktu
rDEYikXLD3MGxmtRPp5+i0y+tgTowAieyM9n3CXRr4N5Jm5yH3xRBXxLw3cDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPdqfCrFAGa4IvKJaDlbZdBBBtukwHwYDVR0j
BBgwFoAU7QX/liwSQLLozGi06kHRh8VQlZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkM4MUUzQzhCRkMwMjhFRkFDRjA4NjE0OTUxRkQwREI5
QTg2MjMyQ0MyNUNGOEI2MDZCQTcwNzVENjA2M0Y1LzAvRUQwNUZGOTYyQzEyNDBC
MkU4Q0M2OEI0RUE0MUQxODdDNTUwOTU5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDA1RkY5NjJDMTI0MEIyRThD
QzY4QjRFQTQxRDE4N0M1NTA5NTkxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJDODFFM0M4QkZDMDI4RUZBQ0YwODYxNDk1MUZEMERCOUE4NjIzMkND
MjVDRjhCNjA2QkE3MDc1RDYwNjNGNS8wLzMyMzAzMDJlMzEzMjMzMmUzNTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDM2MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMh7OzAN
BgkqhkiG9w0BAQsFAAOCAQEAjS/vHYHKdslGU9MAQNNv1G9M2qRN763PDJH9g1wJ
e1pOCiKd+kXALnXnUYGJfRJq741mFUE710MtcSjOTyhYE5BV6ydsjCllMM0nKZmn
BcOf0ruAzpl4bZ9lBuGn63KJL2eqD6wtLPYlwfD1emChby3gi3drr4y6ifUHfR9l
sABucT79HYpfFmsjIfY3OiTV9Jvw3EQSzd+3mAjkjrY1f42RMtY1oRHC10ybJVJQ
2Yxv1RWruQ0FJGvnQxC5j0S+ufaH41Gd/F3v9vK0Jc9XD5mv6iPVb89kqntSaGwa
vyvlqm9zaj5oi3n1EElgocV+5qF7B+vYYCFv/bMm5H76RQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 12:02:02 2025 by rpki-client