Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36302e302f32332d3234203d3e203130363137.roa
File:                     3230302e3132332e36302e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          KSBMMRv03XiBFmuJrbK1kNErlS153OOgBUdrt5zsUG4=
Subject key identifier:   81:EE:04:A5:02:06:BA:1D:8D:A1:43:55:D2:B6:B9:3B:64:F0:FD:6E
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       48749725F91AB802A815CBE516DD20D8037AAF45
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36302e302f32332d3234203d3e203130363137.roa
Signing time:             Tue 22 Jul 2025 01:26:07 +0000
ROA not before:           Tue 22 Jul 2025 01:21:07 +0000
ROA not after:            Tue 21 Jul 2026 01:26:07 +0000
asID:                     10617
IP address blocks:        200.123.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:74:97:25:f9:1a:b8:02:a8:15:cb:e5:16:dd:20:d8:03:7a:af:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Jul 22 01:21:07 2025 GMT
            Not After : Jul 21 01:26:07 2026 GMT
        Subject: CN=81EE04A50206BA1D8DA14355D2B6B93B64F0FD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ad:02:2d:f2:1d:64:bb:10:1f:98:a2:9b:3e:
                    33:8b:3f:61:27:ca:00:a1:33:83:c2:20:31:6b:21:
                    81:18:fd:7d:95:b5:12:79:81:c6:65:3c:0c:23:f7:
                    fd:c1:53:a1:75:01:71:40:67:2f:0d:85:54:fc:fa:
                    ae:5b:7a:20:99:89:39:33:ae:95:da:2f:16:16:57:
                    c3:e6:5f:f6:00:7a:37:ae:e2:78:ae:e9:0f:74:46:
                    86:38:17:b7:a1:6a:ba:05:9b:0b:c2:9a:42:ea:d7:
                    d3:6e:cd:d6:ad:2e:f1:0f:77:c1:ae:ae:65:2b:a5:
                    bf:8b:d9:7e:76:76:4b:50:31:0c:7e:0c:d6:3e:5c:
                    be:3a:27:4f:cf:1a:df:20:d3:e2:e9:70:49:1c:4d:
                    7d:28:81:9f:4c:51:49:2b:f2:96:b9:86:67:dc:56:
                    1c:88:54:f0:a3:5c:59:d7:62:4b:df:ae:1e:76:04:
                    99:1a:ea:fc:88:c0:4c:1b:1f:27:e2:b3:da:0d:fa:
                    9f:b1:ba:31:56:2c:3c:1f:70:aa:a1:50:d7:44:d2:
                    c1:b6:a1:d7:1e:01:2a:9e:6b:c5:c1:f4:bf:c7:0f:
                    21:45:52:d6:3b:43:cf:7b:e6:aa:dc:73:c7:f7:95:
                    83:2e:4b:66:c8:46:75:2a:38:a0:08:e6:8e:0a:64:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EE:04:A5:02:06:BA:1D:8D:A1:43:55:D2:B6:B9:3B:64:F0:FD:6E
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36302e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:65:05:b3:60:18:23:1d:01:8a:31:ff:c8:47:78:67:91:
         51:3e:a1:75:d5:4f:57:b0:5b:c3:6a:26:82:d2:98:a9:d4:e4:
         d1:b0:12:c6:47:47:93:d7:1a:e1:ef:20:0d:36:5f:ce:da:40:
         d6:ed:77:a3:c2:47:d9:a4:ad:d4:39:ce:fb:c2:cc:9e:df:f9:
         61:69:89:7c:90:92:f2:c0:56:f5:89:7e:77:d2:be:b9:c0:cd:
         d1:42:3f:cd:4b:f2:6f:a5:d1:78:ea:36:ba:2a:20:a2:e3:29:
         02:d1:5c:ae:0a:50:9f:bc:25:c5:f1:e2:0e:9d:fc:4f:b7:67:
         9f:a7:87:2a:89:3a:cc:c1:e0:b7:4d:fc:53:90:de:9c:6e:86:
         ea:6c:c8:22:68:de:ce:32:33:08:df:a3:23:79:cc:83:fa:58:
         c0:c3:2c:af:75:26:ce:5b:19:b9:cb:7c:7d:1c:db:f8:ae:a3:
         f0:05:c2:b2:7e:b1:e3:b6:46:03:73:81:2b:20:97:4e:59:8b:
         ad:d9:7a:8b:51:d0:57:39:4b:df:b1:fb:bc:d2:6f:5c:3e:1b:
         7e:ac:ba:18:0f:19:f5:34:60:6e:d7:e4:44:e2:f0:08:ae:73:
         af:ad:46:a8:c7:df:b5:ba:68:cc:66:9b:18:68:2f:40:c4:9e:
         16:d5:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:02:03 2025 by rpki-client