Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136302e302f32332d3234203d3e203130363937.roa
File:                     3230302e35302e3136302e302f32332d3234203d3e203130363937.roa (raw, json)
Hash identifier:          ElDWM241hXUVOsw5uy8ENIPjG188WbfnHEAtueVN10s=
Subject key identifier:   1A:EE:D3:08:B2:82:D4:1C:0A:82:E9:F4:15:3F:12:74:EA:4B:7C:85
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       14F815C60290EB04EBE5D766B3CFDDBC7733BCAB
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136302e302f32332d3234203d3e203130363937.roa
Signing time:             Tue 05 Mar 2024 18:22:06 +0000
ROA not before:           Tue 05 Mar 2024 18:17:06 +0000
ROA not after:            Tue 04 Mar 2025 18:22:06 +0000
asID:                     10697
IP address blocks:        200.50.160.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f8:15:c6:02:90:eb:04:eb:e5:d7:66:b3:cf:dd:bc:77:33:bc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:06 2024 GMT
            Not After : Mar  4 18:22:06 2025 GMT
        Subject: CN=1AEED308B282D41C0A82E9F4153F1274EA4B7C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:c2:3d:ca:53:0e:8f:52:3b:34:ad:bf:08:
                    af:e4:46:d3:10:26:60:bb:04:48:92:e7:e7:b5:27:
                    3f:00:b7:9e:78:6f:a8:28:9b:84:7a:e5:09:ee:bb:
                    27:d7:b8:9a:71:0a:6f:b0:c3:22:eb:1f:eb:4f:26:
                    52:41:6b:75:0e:34:ac:09:ab:e5:6f:34:67:44:a5:
                    61:7a:9c:24:a3:b7:48:95:fe:94:60:07:60:60:a0:
                    d2:e0:cf:10:87:b7:73:75:88:3b:ca:4c:3b:04:eb:
                    ad:07:c7:a8:ca:c9:53:20:21:3e:73:62:95:91:c3:
                    93:76:6a:19:1a:1f:1b:61:c9:5e:fd:e2:23:98:4f:
                    f3:0e:c4:32:2c:2d:fe:2a:44:68:05:97:0d:f2:30:
                    91:b0:5f:07:07:b8:12:b3:19:6f:14:6e:5d:18:cb:
                    cc:60:16:e0:55:45:99:7c:2d:46:c5:d7:62:50:1c:
                    56:04:9f:a7:0b:99:b8:62:3f:6a:ce:49:ba:32:9c:
                    02:65:b3:cd:9f:01:5f:53:ae:78:f1:36:7a:0c:17:
                    1c:63:5c:71:fc:4f:44:63:51:17:c2:37:42:3a:4f:
                    e3:03:b7:49:62:3b:5e:2d:77:c9:6c:bc:2f:99:c5:
                    9c:6d:63:6a:18:9c:1a:f8:06:b3:c0:50:28:3f:64:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EE:D3:08:B2:82:D4:1C:0A:82:E9:F4:15:3F:12:74:EA:4B:7C:85
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136302e302f32332d3234203d3e203130363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:98:75:89:59:99:23:51:01:3d:45:07:0c:61:95:75:a7:4d:
         47:bd:fd:1f:c8:6a:09:1a:b7:dc:5b:1e:83:55:cf:b8:fe:74:
         14:01:a5:69:c5:9d:41:b3:f7:44:b8:0e:ae:86:fd:c8:e7:6d:
         e1:5b:43:9b:be:18:d6:b3:00:f3:ee:0c:5c:54:e9:57:7a:dc:
         dc:98:8e:a7:e7:f5:e6:5e:40:30:f4:be:7d:77:02:b2:0c:f2:
         42:4d:0d:8e:2a:af:19:cd:31:6c:be:74:18:1e:3e:a2:50:39:
         7d:35:e1:61:a3:87:80:49:b9:ac:53:c9:06:3c:fd:bc:d5:55:
         d7:bc:46:f8:0a:9a:31:a1:23:d9:ee:f9:97:6c:5b:3b:93:da:
         93:6d:f0:1b:a1:ff:65:cc:ce:c9:bd:be:38:d7:67:73:e7:cb:
         1a:29:4e:1f:4e:ad:63:ad:bf:c0:1a:e1:74:be:fb:09:f4:92:
         86:79:48:5f:a7:07:79:f2:c8:2c:34:a0:d8:9d:17:24:77:7f:
         6c:30:7f:b4:76:ea:e7:2c:03:76:07:be:46:55:e4:ef:1b:26:
         9f:71:d7:47:45:c6:38:63:3d:5a:48:e7:0c:2d:d8:fa:36:4d:
         73:fc:55:6f:80:f7:9f:10:3c:ff:d2:fa:bb:82:b2:0b:9f:a9:
         3d:c1:03:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org