Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136352e302f32342d3234203d3e203130363137.roa
File:                     3230302e35302e3136352e302f32342d3234203d3e203130363137.roa (raw, json)
Hash identifier:          ESZYkYTjqvJsm9G0LqEsZJ00T7bOjqfFS8ddWpjD+eU=
Subject key identifier:   88:70:72:1D:A6:A8:DF:5A:3C:FE:0E:2E:B8:71:31:2B:28:41:89:EE
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       54D14CB0060CB04A229BAB0D53118B0F5CA65409
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136352e302f32342d3234203d3e203130363137.roa
Signing time:             Tue 23 Jun 2026 01:48:56 +0000
ROA not before:           Tue 23 Jun 2026 01:43:56 +0000
ROA not after:            Tue 22 Jun 2027 01:48:56 +0000
asID:                     10617
IP address blocks:        200.50.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d1:4c:b0:06:0c:b0:4a:22:9b:ab:0d:53:11:8b:0f:5c:a6:54:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Jun 23 01:43:56 2026 GMT
            Not After : Jun 22 01:48:56 2027 GMT
        Subject: CN=8870721DA6A8DF5A3CFE0E2EB871312B284189EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:aa:cc:4f:4c:ef:6c:71:ef:e9:88:9c:e9:
                    81:be:a6:4b:03:b3:be:48:4a:0e:98:73:94:04:40:
                    09:56:c4:eb:1b:d8:cf:03:8c:4c:40:37:56:55:89:
                    36:2a:6d:de:e6:cf:b2:cb:5e:ff:13:4d:9a:3a:ab:
                    3f:e4:66:27:e2:17:ec:c1:22:45:54:04:a7:48:2f:
                    49:0e:4d:b9:17:7f:72:21:7a:e6:07:66:f4:65:fb:
                    a6:e2:55:0b:31:ef:ec:56:41:ad:79:aa:85:21:08:
                    6e:39:c2:b3:d8:48:91:ac:ab:92:2d:e0:68:3f:67:
                    16:6c:3d:53:83:b2:ed:9a:7f:c3:a6:c8:e8:42:94:
                    d3:ec:ea:38:1b:ac:c8:cf:cb:bf:46:05:24:9c:f5:
                    8e:5b:36:7f:83:6b:9a:9e:c1:e9:4d:3d:66:5c:ee:
                    03:4b:09:86:a6:6d:93:ac:14:da:28:89:09:c3:92:
                    8a:db:96:00:bf:10:4f:e1:b3:fd:66:a1:65:16:28:
                    c2:ca:4b:3f:dd:62:ae:11:ec:31:5a:44:fc:8b:4f:
                    21:34:62:0b:40:81:0b:30:0c:75:28:f6:f9:97:8a:
                    34:fd:e4:60:1e:8f:80:d9:0e:61:b4:33:d1:ec:e2:
                    2b:56:0d:26:61:e2:10:4f:11:e3:f8:fa:2f:ea:cb:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:72:1D:A6:A8:DF:5A:3C:FE:0E:2E:B8:71:31:2B:28:41:89:EE
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136352e302f32342d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:19:8e:f0:2d:8b:54:b3:1f:32:01:30:e6:84:93:3e:86:
         fc:5c:0e:de:b7:ca:ba:83:73:c6:4a:ff:bd:63:fa:eb:bc:d2:
         dc:9f:16:7f:fc:98:d5:41:7c:f4:cb:cb:e2:a6:17:50:ab:9d:
         b9:d1:96:28:c4:af:e9:6d:54:b2:40:48:fa:61:75:81:87:b1:
         c8:24:4a:b1:53:ac:25:22:a0:64:c9:61:46:b2:a0:f8:e7:25:
         c1:c7:19:33:87:24:08:72:7d:4e:a8:c2:a4:21:44:0c:e3:63:
         56:9b:14:aa:35:4f:83:28:e8:e3:20:77:ff:88:dc:30:71:9f:
         2f:0b:35:8c:25:0a:8c:c1:64:06:49:8b:76:dc:db:74:72:8d:
         32:2e:2e:23:15:65:f8:4c:f5:cd:2c:8d:9e:0a:4c:87:9e:e2:
         c4:ad:18:7d:ce:de:67:1f:d8:25:dc:1a:f7:e5:72:ed:a5:5c:
         1d:90:13:09:24:83:d8:1b:d1:06:2e:d1:84:40:ef:b9:4e:e9:
         b3:6c:53:da:23:ef:17:3d:99:ec:9a:f7:e2:d4:77:b7:ef:d4:
         4c:ad:59:f2:08:9a:9d:9e:85:bd:9d:98:b4:1a:ad:d2:fc:92:
         fb:0b:2f:49:cd:c3:8e:61:2d:21:77:13:ae:f9:68:5b:16:e2:
         7c:8d:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:04:18 2026 by rpki-client