Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34322e302f32342d3234203d3e20323734323235.roa
File:                     3230302e3132332e34322e302f32342d3234203d3e20323734323235.roa (raw, json)
Hash identifier:          g9Ims8IIuy8pHqE3Do6HN/R1hhVU6w+dRkV1RdjeRo8=
Subject key identifier:   13:02:A7:EB:56:D1:89:97:E6:2C:81:AC:DB:CA:63:81:20:A6:AA:85
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       764E8087D5A97BBFF3B60702ED54BCD99A105935
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34322e302f32342d3234203d3e20323734323235.roa
Signing time:             Fri 17 Oct 2025 20:30:00 +0000
ROA not before:           Fri 17 Oct 2025 20:25:00 +0000
ROA not after:            Fri 16 Oct 2026 20:30:00 +0000
asID:                     274225
IP address blocks:        200.123.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4e:80:87:d5:a9:7b:bf:f3:b6:07:02:ed:54:bc:d9:9a:10:59:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Oct 17 20:25:00 2025 GMT
            Not After : Oct 16 20:30:00 2026 GMT
        Subject: CN=1302A7EB56D18997E62C81ACDBCA638120A6AA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:bb:ea:63:ff:13:48:11:75:cf:88:24:99:
                    7c:89:87:04:f6:6c:6d:f9:04:41:bf:c8:a4:c7:5a:
                    d1:62:3d:5b:c0:75:80:7b:92:5a:77:b5:fd:cb:31:
                    8b:5a:63:17:49:8f:ce:10:f2:dc:74:58:31:29:db:
                    14:74:84:26:8b:8f:2a:53:34:0b:49:0e:b5:96:f5:
                    c9:e5:a5:f4:1e:38:f7:29:8c:ce:1a:6e:0a:48:9c:
                    8b:63:3c:96:03:d5:85:e7:48:ae:28:bd:98:2c:0f:
                    06:cf:01:8a:d9:3a:1f:c9:ec:a8:79:1c:51:f4:c8:
                    f4:3a:99:ee:c1:3b:09:5d:c8:b4:6f:5b:ae:f7:fd:
                    63:23:c8:b6:bd:41:d7:f2:cf:c7:e8:95:67:3e:34:
                    82:e2:29:3e:91:fa:08:01:63:91:ab:67:29:3b:82:
                    91:4c:cc:ad:fb:e1:69:16:aa:c9:7f:dd:f3:0a:df:
                    1a:b3:61:0a:b8:b9:a7:fa:c0:35:61:54:a0:ff:2f:
                    23:42:b6:fd:6d:57:76:c1:37:8c:33:05:af:b0:40:
                    16:ce:dd:f5:cf:68:e1:dc:ec:51:28:59:2d:a4:86:
                    39:69:04:06:31:ce:10:67:ef:19:2a:42:37:28:7a:
                    bf:7c:76:3c:37:aa:56:eb:31:cc:18:28:e9:6c:e1:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:02:A7:EB:56:D1:89:97:E6:2C:81:AC:DB:CA:63:81:20:A6:AA:85
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34322e302f32342d3234203d3e20323734323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:a2:10:1a:d8:0f:0a:b6:7b:16:4d:1e:f6:68:d6:f3:0a:5f:
         09:76:1b:eb:57:57:fb:0d:94:a8:7a:7b:35:10:0f:8a:87:e8:
         f8:2c:cd:6e:0b:53:ec:52:4c:a5:40:3a:b1:0f:ff:e3:9d:31:
         61:70:8e:19:e2:f4:ec:09:df:00:63:6d:04:4c:eb:ac:a4:99:
         85:34:66:b9:b0:a7:22:ba:23:b0:46:c0:63:2b:78:51:fb:53:
         c4:40:39:3b:22:42:21:1f:6d:2a:22:ea:e9:ac:ee:ce:7b:50:
         5f:07:83:73:3e:85:d3:c3:1a:92:46:38:24:8b:fe:8a:db:3a:
         b1:24:04:d7:59:7d:79:1c:1a:d0:2c:84:69:6e:80:e4:7f:5b:
         91:30:c1:30:03:66:24:32:82:bd:85:c3:58:91:64:64:a0:1c:
         5c:00:b1:e8:3c:ad:32:aa:43:59:e5:86:90:45:88:85:b7:8d:
         f9:4f:e9:e2:23:6e:a0:3d:1a:74:c9:8c:7a:c5:3d:dc:19:ea:
         a3:17:ce:7d:d0:13:65:91:f7:10:43:d0:71:c9:32:a4:d7:0a:
         c2:f0:7f:82:44:0a:dd:78:19:fc:aa:b6:ff:22:42:60:06:61:
         ba:87:8d:99:8a:00:82:39:d2:c5:a4:27:1e:3c:47:56:17:14:
         2d:2a:13:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:57:52 2025 by rpki-client