Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136322e302f32332d3234203d3e203130363137.roa
File:                     3230302e35302e3136322e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          it3oGNx9XOD9MARrZCFkIgxEWZwOhUIKwFXYhYuQQFY=
Subject key identifier:   EC:C6:67:E9:6B:FE:4E:48:B5:8D:6F:7D:68:51:5F:8D:5D:3E:54:1C
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       376A2D5BF850737128F14C5FE16F18D8C8DDBCA6
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136322e302f32332d3234203d3e203130363137.roa
Signing time:             Tue 20 Aug 2024 01:15:00 +0000
ROA not before:           Tue 20 Aug 2024 01:10:00 +0000
ROA not after:            Tue 19 Aug 2025 01:15:00 +0000
asID:                     10617
IP address blocks:        200.50.162.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6a:2d:5b:f8:50:73:71:28:f1:4c:5f:e1:6f:18:d8:c8:dd:bc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Aug 20 01:10:00 2024 GMT
            Not After : Aug 19 01:15:00 2025 GMT
        Subject: CN=ECC667E96BFE4E48B58D6F7D68515F8D5D3E541C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3c:8b:10:f2:a5:b4:7b:8e:0c:a6:f0:6c:94:
                    3c:b7:ba:03:73:b3:f1:4c:79:8d:a4:b6:0a:0c:75:
                    6c:d5:f6:ac:81:1c:e8:cd:09:f8:ee:ab:0a:52:b6:
                    ef:5d:ed:bc:a8:e9:2b:35:88:11:f4:04:42:51:4b:
                    76:f8:4e:1f:fe:94:97:26:26:fa:f7:7b:fe:d0:1e:
                    2d:70:16:b0:60:0a:18:92:a8:e3:10:8b:2a:f5:3f:
                    c5:0f:be:18:69:b0:5b:5f:21:13:b2:95:38:b9:54:
                    aa:6c:59:9a:5c:24:07:fe:67:5b:0d:47:35:b9:ee:
                    98:86:dc:2c:3f:b0:1c:43:53:8a:91:f8:8c:bb:a7:
                    90:be:85:05:9f:55:af:e5:c8:8d:9a:85:a6:01:8e:
                    af:1f:98:68:ab:ff:6e:6d:b6:e5:68:fa:eb:fc:6a:
                    6f:5d:30:f8:64:8e:a8:fe:db:ea:24:9e:20:2c:9a:
                    f3:9a:a5:6a:f0:34:5c:bf:91:dc:0b:4d:28:a0:0b:
                    46:e7:1b:04:c8:8d:c8:2d:1a:c9:bb:7d:3d:24:79:
                    00:fc:49:9d:3c:75:9d:15:2c:ea:31:6e:ce:91:42:
                    99:f1:54:73:5b:00:13:0c:1e:f7:0f:03:60:df:64:
                    44:0d:8a:88:73:03:c0:2d:07:f8:28:8d:10:09:f0:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C6:67:E9:6B:FE:4E:48:B5:8D:6F:7D:68:51:5F:8D:5D:3E:54:1C
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136322e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:36:be:05:14:fb:60:d5:e9:16:82:4f:d3:b4:77:1e:fd:ea:
         4e:e3:74:bf:2c:45:d9:1c:18:9a:87:71:d1:d0:8d:72:d9:e1:
         5b:c8:bb:51:bb:24:8e:39:e1:83:25:65:e1:a2:48:00:d6:e2:
         15:f4:f4:71:6d:02:07:bc:ea:b3:ca:a5:1d:ba:57:fb:a8:58:
         d8:a5:10:de:c6:c6:98:fc:42:f6:63:14:1f:06:d5:25:52:78:
         ca:f0:89:b0:53:f5:a4:0c:6f:84:38:59:e8:f4:bf:e6:8b:75:
         08:9e:d2:38:e0:3a:00:e0:6d:51:c6:32:93:76:4e:93:ad:4a:
         15:96:7a:e3:64:33:41:7d:f0:b6:33:80:0f:64:7d:b5:1e:46:
         8c:bb:c3:a2:98:14:91:76:22:dd:9e:3f:27:fc:9e:1c:f9:a3:
         f5:01:e4:8c:55:47:38:7f:4e:c0:33:25:26:38:91:0d:71:5f:
         20:4d:77:db:63:81:2c:ee:3b:f7:d1:19:12:ae:16:5b:9c:3c:
         9b:0f:5f:56:1f:8e:92:d4:5a:00:66:82:b9:b7:01:63:8c:37:
         03:06:82:aa:95:3f:25:a1:34:c2:68:e1:0d:bb:79:cf:d3:a9:
         2c:7c:68:56:95:18:d0:ec:fc:84:ba:af:c6:c6:5d:d0:12:9a:
         5b:7f:2a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org