Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34332e302f32342d3234203d3e20323733383739.roa
File:                     3230302e3132332e34332e302f32342d3234203d3e20323733383739.roa (raw, json)
Hash identifier:          TSMKzvkhhW2cG9M0QeSRQU9a/Aoy+z3/NXKDLyVqKXU=
Subject key identifier:   EF:F4:9A:86:22:91:88:7A:4C:48:47:55:83:E9:D8:FD:54:53:86:1A
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       0C4B22BA744A3936665F326BE5C21509345BC044
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34332e302f32342d3234203d3e20323733383739.roa
Signing time:             Tue 24 Mar 2026 20:50:00 +0000
ROA not before:           Tue 24 Mar 2026 20:45:00 +0000
ROA not after:            Tue 23 Mar 2027 20:50:00 +0000
asID:                     273879
IP address blocks:        200.123.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4b:22:ba:74:4a:39:36:66:5f:32:6b:e5:c2:15:09:34:5b:c0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar 24 20:45:00 2026 GMT
            Not After : Mar 23 20:50:00 2027 GMT
        Subject: CN=EFF49A862291887A4C48475583E9D8FD5453861A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:ba:2d:28:c0:f7:e0:6c:a0:13:cb:9d:12:
                    8e:71:dd:92:14:ce:fa:55:c5:0c:ee:9e:47:23:8b:
                    7a:76:1c:33:e8:b4:0f:be:68:7c:65:9b:b3:b7:e7:
                    c9:ad:4f:d0:d3:04:46:cd:c7:ef:fe:de:72:c2:58:
                    58:b2:a1:73:23:0f:15:a6:6b:d2:33:11:15:25:bd:
                    44:58:f6:98:3c:78:53:be:b5:5a:38:6d:15:d1:ec:
                    85:d1:ae:3e:67:04:74:9a:a7:c1:bc:ef:e4:3e:8d:
                    40:83:ab:c4:17:12:6e:57:fa:c9:75:51:3b:73:01:
                    77:e2:5f:b7:32:20:b7:18:1b:dc:e0:53:ed:eb:da:
                    c2:3d:f0:34:d8:71:c3:a1:a5:c4:59:8a:e1:10:62:
                    f1:5a:d5:3a:4b:8e:c0:79:fe:a8:8d:29:eb:71:b8:
                    b9:9a:1c:5b:ff:22:ac:20:bc:b9:7f:f0:89:82:6e:
                    51:bf:b7:a8:3d:36:02:c8:69:d4:2e:76:d4:40:a8:
                    7d:7b:b3:bc:e8:bf:bb:99:6c:48:94:50:2e:7b:0d:
                    18:78:03:c5:97:c4:6f:83:b1:c8:c6:aa:91:46:4b:
                    af:ea:05:51:5d:51:30:d5:05:ad:67:a2:92:94:cf:
                    4b:4f:1d:65:ef:49:9b:02:78:cb:c5:81:8b:27:aa:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:9A:86:22:91:88:7A:4C:48:47:55:83:E9:D8:FD:54:53:86:1A
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e34332e302f32342d3234203d3e20323733383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:03:40:d0:3c:f5:24:76:9e:e3:6d:da:a0:74:25:10:c3:18:
         58:78:31:3d:da:50:4c:07:48:21:00:f9:54:3f:92:89:43:26:
         e6:dd:23:ea:04:43:0a:d3:8a:c9:bc:30:c6:99:27:fc:6b:33:
         8a:66:5b:61:83:de:7c:4c:12:f3:85:4d:11:94:0a:2b:29:4d:
         a0:de:28:b3:fa:2e:19:17:d1:1d:ca:73:48:da:48:74:ff:03:
         f7:45:07:82:89:94:30:e2:a1:f4:5a:97:f3:eb:a3:a4:fe:cd:
         24:c9:c9:14:b6:d2:8d:a5:15:82:44:19:74:b6:77:16:d0:b3:
         6e:db:e8:46:7d:35:7d:3c:39:dd:d6:43:68:25:0c:9e:d1:8d:
         dd:be:2a:a0:d4:fc:52:5a:c8:8e:8f:ec:27:f3:3c:e1:da:b2:
         66:79:fc:d8:9c:ea:0d:72:03:95:cc:86:c7:cb:d7:f1:f0:99:
         8f:ec:8c:5a:cf:28:b4:8f:ab:63:cf:19:56:ee:35:5a:c7:5b:
         eb:de:6e:c5:30:6b:3b:00:9a:bf:b1:b8:e9:04:de:06:9c:96:
         55:2d:38:b9:47:3c:5c:20:b7:51:a7:f0:8b:59:4f:86:38:ff:
         15:94:61:8b:d2:af:d2:6b:1e:74:cd:66:80:39:d5:86:10:81:
         0f:10:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:50 2026 by rpki-client