Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36332e302f32342d3234203d3e203532353130.roa
File:                     3230302e3132332e36332e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier:          OqBoye9XKbV2DkIONYSkOopsK10vREKdSBBCz5EAa4c=
Subject key identifier:   1F:AB:03:37:1B:44:09:62:B2:44:EF:F2:17:EE:B2:3B:4C:9E:1F:BD
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       1E897EBE5FCC288B557FB935280397B614E81F49
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36332e302f32342d3234203d3e203532353130.roa
Signing time:             Fri 01 Aug 2025 18:15:00 +0000
ROA not before:           Fri 01 Aug 2025 18:10:00 +0000
ROA not after:            Fri 31 Jul 2026 18:15:00 +0000
asID:                     52510
IP address blocks:        200.123.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:89:7e:be:5f:cc:28:8b:55:7f:b9:35:28:03:97:b6:14:e8:1f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Aug  1 18:10:00 2025 GMT
            Not After : Jul 31 18:15:00 2026 GMT
        Subject: CN=1FAB03371B440962B244EFF217EEB23B4C9E1FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:76:31:f1:2a:45:fd:b1:f0:06:df:f3:0c:
                    b5:8a:11:52:7d:1d:7f:b7:11:1c:8c:15:71:4b:61:
                    c9:d9:aa:d5:7c:13:f5:1e:13:c7:4b:4d:41:aa:d0:
                    b7:41:2f:c1:09:b6:2b:bb:38:18:78:c4:3d:57:5f:
                    52:34:85:52:e7:3d:05:b6:5c:92:0c:b1:89:bc:22:
                    7e:92:94:79:f3:08:3c:a6:60:47:a0:48:f8:08:31:
                    00:78:0f:55:51:eb:6f:b7:dc:cd:62:e4:08:b4:42:
                    2a:84:69:3f:fc:8f:b5:71:82:c9:50:99:cf:24:7b:
                    1f:0e:9c:cc:20:ad:cc:d3:24:d6:df:19:72:7d:f3:
                    65:62:a9:18:f8:80:f3:3c:db:48:3f:70:20:d9:c0:
                    a0:a9:90:6a:9e:f2:34:ea:4e:56:b9:60:20:fc:16:
                    c3:90:82:71:7c:f2:8e:5f:fa:c2:fc:98:73:9d:c3:
                    8c:97:da:12:b4:5e:2b:a6:61:d1:3b:5f:66:d7:22:
                    b8:13:1b:0e:e2:fb:2e:15:83:57:ac:ab:0b:5c:08:
                    04:1f:ce:88:90:9c:a8:d0:f3:02:9c:d9:56:3b:4a:
                    8a:28:be:b7:77:9d:49:bd:e8:c2:3a:dd:58:51:f9:
                    c0:29:69:be:85:7d:55:6a:f6:82:cf:69:a7:51:fe:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AB:03:37:1B:44:09:62:B2:44:EF:F2:17:EE:B2:3B:4C:9E:1F:BD
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e36332e302f32342d3234203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:42:ea:1c:25:ce:41:4b:e5:fa:ca:68:a1:19:dd:b3:23:
         d3:a2:5d:3f:2c:ea:5c:4f:7c:4e:1f:43:3b:8f:b0:17:fe:fb:
         f0:13:2d:e9:a5:d9:8e:35:0c:cc:91:5e:d1:27:b2:da:e6:2f:
         7e:2c:76:f5:25:9b:ea:8a:91:94:39:54:34:38:cd:d7:25:04:
         6e:82:bd:1a:93:40:5a:82:cc:26:00:fb:99:6b:c8:e5:59:f4:
         67:8b:f3:7b:e3:d7:88:8e:45:55:56:a9:b5:97:b0:e2:01:42:
         1a:83:69:6d:48:b2:fd:44:15:98:ea:ce:15:80:42:be:69:3c:
         a5:3d:70:a0:e7:f7:75:cd:33:0c:cc:28:e0:ca:6a:50:f4:78:
         0e:58:34:76:a3:26:3a:c3:a2:e6:38:bf:cc:0c:ec:0b:3a:2a:
         35:78:32:aa:f0:4c:6c:68:cd:9a:94:63:a4:c9:d7:c9:e8:16:
         c2:92:7c:22:fc:18:89:30:3d:07:bf:15:59:5e:56:ae:5f:b8:
         68:4e:ec:94:2d:b9:21:0f:76:37:fc:e2:a2:3e:15:f8:be:7d:
         3f:eb:9a:3b:5f:cf:f0:8d:81:5e:b1:ff:2a:6a:1f:ef:69:80:
         26:2f:df:10:da:36:b6:6a:ae:3e:11:0d:8a:bf:53:b8:73:65:
         78:2e:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:02:03 2025 by rpki-client