Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136322e302f32332d3234203d3e20323635363839.roa
File:                     3230302e35302e3136322e302f32332d3234203d3e20323635363839.roa (raw, json)
Hash identifier:          8lrNHYC1icSdsNLhaoOzKPnEKlDYHP3biLlv8AOt/hU=
Subject key identifier:   1E:88:23:80:E5:D2:3B:EB:7E:08:C1:10:00:49:2E:1C:7A:9D:7E:31
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       6231F83DCD0673B958833331EC90731F2FC4F4A4
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136322e302f32332d3234203d3e20323635363839.roa
Signing time:             Tue 05 Mar 2024 18:22:05 +0000
ROA not before:           Tue 05 Mar 2024 18:17:05 +0000
ROA not after:            Tue 04 Mar 2025 18:22:05 +0000
asID:                     265689
IP address blocks:        200.50.162.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:31:f8:3d:cd:06:73:b9:58:83:33:31:ec:90:73:1f:2f:c4:f4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:05 2024 GMT
            Not After : Mar  4 18:22:05 2025 GMT
        Subject: CN=1E882380E5D23BEB7E08C11000492E1C7A9D7E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:b5:86:79:91:8b:50:6e:f2:1b:4c:6f:6c:
                    83:62:f0:05:f2:0b:2e:62:e3:75:ea:12:bc:07:24:
                    8a:5e:9f:c6:cb:11:0f:5b:e1:53:84:90:e6:34:aa:
                    65:28:6a:db:69:72:b5:50:cf:55:46:03:1d:f2:12:
                    52:80:3d:2c:b0:2a:a2:ed:5e:bd:57:f5:7f:33:a0:
                    14:11:9e:4b:3f:53:d0:45:33:18:48:9b:9e:09:79:
                    42:9c:53:af:92:51:1c:66:83:2b:96:4f:00:47:f8:
                    19:fd:0e:f4:88:14:54:bd:18:96:3f:b5:14:e8:25:
                    21:9b:d9:f9:48:7d:5e:34:a8:78:e3:83:bc:91:9b:
                    72:5a:74:d7:50:f0:94:fe:d7:48:cb:4c:ee:0a:04:
                    cb:86:84:c6:8b:29:4e:a4:af:f3:6b:21:8d:2d:2d:
                    75:78:0d:62:d3:8a:32:85:9e:3c:9a:80:e7:26:a1:
                    75:32:81:d1:22:47:d2:b1:fa:83:57:2d:a5:19:78:
                    41:af:12:40:64:80:9e:3b:56:8d:a6:e8:26:6d:cc:
                    64:66:14:5c:12:58:65:f7:0a:77:39:09:f4:fc:5e:
                    75:ae:e0:a6:0b:51:03:cb:ea:be:33:68:28:fa:aa:
                    43:fb:1d:e0:99:f2:f6:e9:3c:c7:59:7b:bd:ee:53:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:88:23:80:E5:D2:3B:EB:7E:08:C1:10:00:49:2E:1C:7A:9D:7E:31
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136322e302f32332d3234203d3e20323635363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:cc:27:21:b6:25:6a:fb:70:5d:db:18:e1:07:57:10:3b:7a:
         02:c3:8b:b4:9f:c4:69:5c:59:b4:d1:07:04:68:71:33:85:f1:
         f0:e0:9a:f8:2e:88:7b:66:e3:99:53:08:55:e1:75:ef:82:90:
         a3:27:e4:56:1b:36:58:af:da:86:c5:ca:94:be:13:5d:59:18:
         c7:52:95:49:af:9d:c9:90:02:4e:5e:77:92:33:f5:7c:61:9a:
         4c:e8:4d:bd:dc:5d:0a:1d:e0:54:1a:59:4e:e3:b1:e4:e4:18:
         87:0d:a9:ca:5a:2b:a0:d7:d8:16:a0:8a:5d:20:6a:dd:31:cb:
         07:8d:fa:2d:8c:a3:e9:e8:c8:d2:a6:72:6b:d4:0a:9e:65:21:
         ea:f8:4d:21:b2:a5:bc:7c:db:1f:3c:cc:11:bf:bf:a3:d2:2d:
         05:2e:58:d9:c5:1d:5a:a8:ac:4a:58:45:06:7b:f7:c8:a4:e5:
         25:5a:40:4a:8e:82:5e:cf:70:21:ec:78:32:de:2f:e0:fe:b2:
         7f:56:5e:65:71:0d:bd:17:22:a5:0f:3e:8a:f7:f2:30:7d:87:
         2c:04:6b:26:3a:87:46:23:04:f1:7b:86:97:66:ff:34:90:5c:
         6b:8b:37:fe:15:22:b4:92:3d:4f:a9:e0:31:bf:30:b7:57:b4:
         97:d7:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org