Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35382e302f32342d3234203d3e203532343434.roa
File:                     3230302e3132332e35382e302f32342d3234203d3e203532343434.roa (raw, json)
Hash identifier:          CsKx8wV/jDt6LEXgQ50T78PUHoel/Xoq/QVw/iMHlkI=
Subject key identifier:   D7:20:01:76:A7:23:CF:80:CB:F6:AC:53:A6:4E:F4:C8:6C:33:82:70
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       4EE230123A17FC9C97EF8205513500CE2CDFA2FD
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35382e302f32342d3234203d3e203532343434.roa
Signing time:             Tue 13 May 2025 14:18:43 +0000
ROA not before:           Tue 13 May 2025 14:13:43 +0000
ROA not after:            Tue 12 May 2026 14:18:43 +0000
asID:                     52444
IP address blocks:        200.123.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 20:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e2:30:12:3a:17:fc:9c:97:ef:82:05:51:35:00:ce:2c:df:a2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: May 13 14:13:43 2025 GMT
            Not After : May 12 14:18:43 2026 GMT
        Subject: CN=D7200176A723CF80CBF6AC53A64EF4C86C338270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:8c:42:5e:c1:99:ed:73:77:62:55:21:e5:
                    56:1d:b2:41:61:35:df:3a:e3:93:ff:9d:72:fd:b3:
                    c3:81:24:c9:f2:84:b2:f4:74:77:f2:30:c0:7b:3b:
                    4c:b4:7e:b9:84:03:db:4e:a8:62:bd:1a:ce:bd:6c:
                    15:80:07:58:ef:d3:e1:0a:6d:4d:1c:b7:09:1a:66:
                    63:6b:21:b5:a5:e3:11:19:cb:54:53:55:cc:08:bc:
                    86:f6:a2:76:7a:0f:b6:50:fa:df:46:41:f7:75:e7:
                    17:19:bd:03:1c:04:83:5a:44:21:60:a5:eb:2b:93:
                    f6:a3:d1:09:6c:9b:af:16:97:c2:af:f3:1f:6c:2f:
                    28:bf:42:0e:17:16:96:4f:21:b6:8f:0a:a3:d7:7f:
                    09:db:94:a2:bf:1e:ba:59:85:91:cd:6b:a0:d3:47:
                    af:9b:92:ce:2b:b2:d1:08:9c:c3:50:3d:d8:15:fb:
                    82:52:97:83:44:9a:5a:bb:74:5b:33:6b:a3:83:90:
                    73:90:41:7c:57:4a:c1:ac:73:cc:0b:74:c3:87:37:
                    2e:3e:af:52:fd:0d:41:32:95:5c:ea:08:0b:f6:70:
                    9a:0b:f6:42:c4:af:74:08:f5:1e:ea:c3:81:7a:0f:
                    e4:32:b4:64:dd:64:b2:40:81:58:d0:b7:87:b4:ba:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:20:01:76:A7:23:CF:80:CB:F6:AC:53:A6:4E:F4:C8:6C:33:82:70
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35382e302f32342d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:de:4d:2f:87:f1:79:83:22:d0:4a:35:f8:e9:fa:c1:05:4b:
         90:27:f0:db:d4:c4:10:22:73:26:d7:1d:12:bc:eb:38:d2:c2:
         b9:a6:0d:1a:3d:03:f3:86:46:9c:88:e0:d1:10:b3:c6:0e:bd:
         a5:bd:2f:6e:fa:e4:55:fa:65:55:af:30:f2:ee:58:bc:8c:f3:
         7d:3a:2f:81:4c:ec:24:ae:3b:9f:c6:f6:9e:30:c1:7a:e8:af:
         1d:95:23:44:45:f1:31:33:57:76:88:6e:6b:fa:07:14:91:e0:
         5f:49:68:03:76:b8:1d:bd:30:91:94:11:7d:d0:31:48:f6:4b:
         a5:e8:b6:7d:b4:6a:e5:35:2c:84:93:9a:ab:37:c7:13:da:12:
         f0:ff:2f:da:6b:aa:73:3c:22:39:78:2b:6a:d0:3a:06:33:62:
         23:f2:b0:50:1a:84:78:9d:76:a8:4b:78:5c:3f:af:2a:ed:88:
         79:dc:2a:09:5a:7e:72:23:e2:af:9f:d3:a7:72:95:44:36:8f:
         c9:6b:cd:92:e4:74:f8:44:4e:4f:3a:4d:cf:f8:d6:6d:f7:76:
         53:83:cd:9b:0c:7b:00:22:a9:11:55:f2:91:ec:01:95:bd:d1:
         57:76:fc:ef:30:a4:f7:2e:9a:64:d5:9e:9f:82:bf:dd:10:04:
         2f:9b:1b:65
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTuIwEjoX/JyX74IFUTUAzizfov0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQwNUZGOTYyQzEyNDBCMkU4Q0M2OEI0RUE0MUQxODdD
NTUwOTU5MTAeFw0yNTA1MTMxNDEzNDNaFw0yNjA1MTIxNDE4NDNaMDMxMTAvBgNV
BAMTKEQ3MjAwMTc2QTcyM0NGODBDQkY2QUM1M0E2NEVGNEM4NkMzMzgyNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWYxCXsGZ7XN3YlUh5VYdskFh
Nd8645P/nXL9s8OBJMnyhLL0dHfyMMB7O0y0frmEA9tOqGK9Gs69bBWAB1jv0+EK
bU0ctwkaZmNrIbWl4xEZy1RTVcwIvIb2onZ6D7ZQ+t9GQfd15xcZvQMcBINaRCFg
pesrk/aj0Qlsm68Wl8Kv8x9sLyi/Qg4XFpZPIbaPCqPXfwnblKK/HrpZhZHNa6DT
R6+bks4rstEInMNQPdgV+4JSl4NEmlq7dFsza6ODkHOQQXxXSsGsc8wLdMOHNy4+
r1L9DUEylVzqCAv2cJoL9kLEr3QI9R7qw4F6D+QytGTdZLJAgVjQt4e0utrhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1yABdqcjz4DL9qxTpk70yGwzgnAwHwYDVR0j
BBgwFoAU7QX/liwSQLLozGi06kHRh8VQlZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkM4MUUzQzhCRkMwMjhFRkFDRjA4NjE0OTUxRkQwREI5
QTg2MjMyQ0MyNUNGOEI2MDZCQTcwNzVENjA2M0Y1LzAvRUQwNUZGOTYyQzEyNDBC
MkU4Q0M2OEI0RUE0MUQxODdDNTUwOTU5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDA1RkY5NjJDMTI0MEIyRThD
QzY4QjRFQTQxRDE4N0M1NTA5NTkxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJDODFFM0M4QkZDMDI4RUZBQ0YwODYxNDk1MUZEMERCOUE4NjIzMkND
MjVDRjhCNjA2QkE3MDc1RDYwNjNGNS8wLzMyMzAzMDJlMzEzMjMzMmUzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMh7OjAN
BgkqhkiG9w0BAQsFAAOCAQEAjd5NL4fxeYMi0Eo1+On6wQVLkCfw29TEECJzJtcd
ErzrONLCuaYNGj0D84ZGnIjg0RCzxg69pb0vbvrkVfplVa8w8u5YvIzzfTovgUzs
JK47n8b2njDBeuivHZUjREXxMTNXdohua/oHFJHgX0loA3a4Hb0wkZQRfdAxSPZL
pei2fbRq5TUshJOaqzfHE9oS8P8v2muqczwiOXgratA6BjNiI/KwUBqEeJ12qEt4
XD+vKu2IedwqCVp+ciPir5/Tp3KVRDaPyWvNkuR0+EROTzpNz/jWbfd2U4PNmwx7
ACKpEVXykewBlb3RV3b87zCk9y6aZNWen4K/3RAEL5sbZQ==
-----END CERTIFICATE-----
Generated at Thu May 15 19:22:23 2025 by rpki-client