Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35302e302f32342d3234203d3e20323732383835.roa
File:                     3230302e3132332e35302e302f32342d3234203d3e20323732383835.roa (raw, json)
Hash identifier:          0tJaqtSt/abjaZKXfyIrY+qathhUhREoL2S6Xcv4oS8=
Subject key identifier:   87:32:C2:78:F6:FA:76:17:44:93:A1:1B:0A:81:1B:03:9A:68:72:3F
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       14FCF5D33ED3582F831D430F5F57018F0CC7E6D2
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35302e302f32342d3234203d3e20323732383835.roa
Signing time:             Tue 04 Feb 2025 20:08:05 +0000
ROA not before:           Tue 04 Feb 2025 20:03:05 +0000
ROA not after:            Tue 03 Feb 2026 20:08:05 +0000
asID:                     272885
IP address blocks:        200.123.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fc:f5:d3:3e:d3:58:2f:83:1d:43:0f:5f:57:01:8f:0c:c7:e6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Feb  4 20:03:05 2025 GMT
            Not After : Feb  3 20:08:05 2026 GMT
        Subject: CN=8732C278F6FA76174493A11B0A811B039A68723F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:2e:82:4f:f5:93:70:4a:c5:ab:e0:61:f5:
                    2a:7a:7d:f6:d4:d1:e0:e6:c3:90:06:bd:40:ac:ef:
                    c2:f1:c2:3f:a7:3c:f2:f2:e3:08:49:6f:03:33:5d:
                    bb:e5:9f:6b:ac:3d:f2:8e:77:ac:14:aa:6c:a2:b1:
                    f0:92:1c:9a:cf:dd:1a:c9:c1:34:94:1e:3f:89:ce:
                    e3:6b:40:31:ab:0e:99:0d:a9:d1:f2:99:e1:35:2b:
                    c8:34:c5:e4:b2:e6:3c:6f:48:e2:35:8b:b0:91:de:
                    c7:05:85:e9:3b:f1:07:c5:68:23:be:7f:2c:1b:c2:
                    a7:32:65:41:7a:2d:8e:b5:1f:7a:d8:42:18:31:60:
                    7d:b3:c1:e2:43:10:e3:bd:d3:66:0f:dd:b8:a9:1b:
                    b1:eb:1b:5c:bb:22:fa:7f:ea:01:f2:9a:eb:84:39:
                    f8:77:82:1e:7c:eb:95:2b:a9:33:ff:8f:cd:4d:f1:
                    cd:eb:ca:8b:83:a7:f9:30:8f:6c:68:a0:74:5b:81:
                    a2:87:be:28:b0:9c:39:ba:84:63:ff:8f:5d:95:4a:
                    36:37:ee:de:56:80:3c:8f:98:32:a9:43:cc:69:53:
                    b8:54:d8:a0:66:0d:5b:97:0e:90:a9:1f:26:c2:e8:
                    6d:2a:c5:73:b2:40:e3:b5:36:ca:42:6d:1d:c1:06:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:32:C2:78:F6:FA:76:17:44:93:A1:1B:0A:81:1B:03:9A:68:72:3F
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e35302e302f32342d3234203d3e20323732383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:60:39:7a:e1:18:1c:a3:57:36:dc:e2:1a:f5:54:fa:c2:85:
         65:2d:2c:97:43:ca:89:2b:6d:fb:eb:62:b0:ec:85:e1:7d:87:
         c0:23:14:80:a1:7e:04:59:5a:2e:3f:16:75:f2:4e:6d:fa:79:
         cd:c5:bc:47:51:32:ec:6d:4d:fe:22:3b:02:15:6e:28:3d:c4:
         c9:e6:ce:f8:e2:68:26:c6:c0:e7:d8:64:20:ef:7c:bd:0d:9b:
         eb:6f:9f:1d:60:4c:10:d2:0b:e5:7a:1b:43:b9:a7:0a:64:93:
         d5:b4:11:2e:32:cf:bc:fe:6d:34:8e:4a:69:f0:9b:8a:96:b5:
         dc:b5:a3:c6:29:d5:81:10:5d:3a:b9:e2:57:38:2d:fe:16:81:
         2d:14:43:61:ce:74:f3:e2:10:61:77:5f:61:a8:2b:7b:71:ee:
         be:99:b7:5c:39:f9:2a:74:45:11:91:46:fd:b4:db:33:ac:d2:
         55:97:ea:ac:05:6a:12:8d:e8:a3:b3:70:59:48:72:88:fb:82:
         b5:e9:d1:7e:6b:bd:6a:21:85:07:89:42:3f:d9:b0:8d:d9:0f:
         93:26:ee:3c:9a:26:69:d2:4f:35:3e:ac:c3:16:62:26:3c:84:
         30:56:20:b2:74:70:a4:e0:b9:16:23:48:ba:46:67:2d:8a:12:
         4f:f0:8b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:01:31 2025 by rpki-client