Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/3230302e3132332e35322e302f32342d3234203d3e20323732393238.roa
File:                     3230302e3132332e35322e302f32342d3234203d3e20323732393238.roa (raw, json)
Hash identifier:          Jy5YZwKzm41xP/lVssBPdl9bT4qtVg3DvtMlBnLS3Xk=
Subject key identifier:   CD:47:35:7B:E5:C9:3B:8C:E1:F4:71:FD:82:46:76:FF:8D:C9:67:4E
Certificate issuer:       /CN=EB69B49D4076EBC1D441EA77CCE80EA12A89991D
Certificate serial:       632A3256507C968440F971AABFFCD18B91D37921
Authority key identifier: EB:69:B4:9D:40:76:EB:C1:D4:41:EA:77:CC:E8:0E:A1:2A:89:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/3230302e3132332e35322e302f32342d3234203d3e20323732393238.roa
Signing time:             Mon 25 Aug 2025 19:41:02 +0000
ROA not before:           Mon 25 Aug 2025 19:36:02 +0000
ROA not after:            Mon 24 Aug 2026 19:41:02 +0000
asID:                     272928
IP address blocks:        200.123.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 22:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2a:32:56:50:7c:96:84:40:f9:71:aa:bf:fc:d1:8b:91:d3:79:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB69B49D4076EBC1D441EA77CCE80EA12A89991D
        Validity
            Not Before: Aug 25 19:36:02 2025 GMT
            Not After : Aug 24 19:41:02 2026 GMT
        Subject: CN=CD47357BE5C93B8CE1F471FD824676FF8DC9674E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:9b:fd:51:ee:ac:0b:43:32:4f:cb:7b:7e:
                    df:c5:cf:51:79:58:2a:7b:62:b3:0b:c8:ec:23:3d:
                    20:a2:e2:fe:64:53:a1:49:6a:6d:de:b7:64:e9:af:
                    e8:c7:16:4e:c1:0c:b0:9c:a1:7e:01:14:da:3e:cb:
                    ed:a1:14:fe:b7:94:dd:4f:78:85:58:ad:42:97:bc:
                    fb:f8:b0:54:11:a4:29:a4:fb:10:e9:ec:58:81:a6:
                    05:3e:64:53:2b:94:7c:1d:25:96:53:73:9f:50:50:
                    e4:56:d7:4a:09:6a:5c:2e:3c:c2:24:4e:f3:af:53:
                    3f:dd:a9:a1:54:25:d6:c6:8b:2d:b0:6d:14:9b:fb:
                    ef:cc:53:31:b6:64:f1:e8:d2:e0:1d:12:1c:2a:43:
                    5e:21:ba:e6:5c:ff:4d:91:a0:05:39:5d:0d:28:d2:
                    c8:be:d1:4d:71:12:db:79:7c:33:5e:ea:ca:d9:d1:
                    c5:ae:aa:d3:77:75:17:d5:3f:b7:14:16:a8:de:25:
                    f1:1b:0e:a5:20:64:0a:32:ba:8b:ae:6b:c2:da:90:
                    25:88:75:a6:7d:88:79:88:7f:86:3a:6c:bf:ea:fc:
                    46:df:63:04:28:0a:c2:83:6a:6c:a9:ae:5e:66:a5:
                    61:95:1c:b0:18:32:59:d0:85:b5:60:e1:55:cc:d3:
                    f7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:47:35:7B:E5:C9:3B:8C:E1:F4:71:FD:82:46:76:FF:8D:C9:67:4E
            X509v3 Authority Key Identifier:
                keyid:EB:69:B4:9D:40:76:EB:C1:D4:41:EA:77:CC:E8:0E:A1:2A:89:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/3230302e3132332e35322e302f32342d3234203d3e20323732393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:fe:09:59:c0:6b:80:9d:68:ca:f6:97:98:b2:a9:67:5e:6e:
         f2:31:e5:fa:0b:51:5f:79:31:cf:a8:cf:97:22:02:66:4e:d9:
         8e:76:52:3c:56:7d:10:24:79:f3:02:27:5d:c6:11:b2:97:a1:
         58:49:a8:fa:06:f8:92:8c:ae:60:99:a4:d8:48:a9:65:2e:ce:
         86:ef:c0:32:f4:5a:4f:99:d6:51:ec:a5:34:f5:31:f0:10:5e:
         e6:d0:ee:6b:48:0d:1f:06:97:55:fa:6d:03:ef:a4:0a:4e:65:
         29:b3:4b:2d:38:ff:a5:18:e5:fd:ac:89:4b:09:37:cb:ab:9a:
         91:66:c9:e7:2a:96:d2:aa:84:ef:d0:10:d0:3e:dd:19:8d:4c:
         0f:ba:e1:7f:a4:f5:3f:64:3e:0e:9c:99:cc:cf:e0:00:a2:52:
         41:49:7e:58:86:1d:91:8f:8b:e5:43:cd:f1:23:46:a0:cb:6e:
         3f:14:b6:b5:cc:1a:f3:ca:ef:20:d9:a1:cc:f5:70:55:98:1d:
         3d:e3:a2:18:cb:5d:bf:a0:ff:1a:05:ed:dc:55:24:91:3c:3e:
         b2:52:2a:f2:fc:61:84:91:89:3f:a6:1a:39:8c:9b:9a:29:d5:
         43:c8:04:88:f0:01:aa:0f:68:94:28:9e:63:cf:40:f4:e1:ba:
         76:d1:3f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:50:22 2025 by rpki-client