Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136352e302f32342d3234203d3e20323635363839.roa
File:                     3230302e35302e3136352e302f32342d3234203d3e20323635363839.roa (raw, json)
Hash identifier:          9wMEmb7rV573jkONqfpDq4H85NOUToT3jZnbLhrVSvU=
Subject key identifier:   B5:82:61:8F:49:60:4E:20:0D:36:D1:60:CB:6B:9D:8F:0B:86:CD:F4
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       4C8E7B5083696AEB9606F857DD098E65166EB4ED
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136352e302f32342d3234203d3e20323635363839.roa
Signing time:             Tue 05 Mar 2024 18:21:58 +0000
ROA not before:           Tue 05 Mar 2024 18:16:58 +0000
ROA not after:            Tue 04 Mar 2025 18:21:58 +0000
asID:                     265689
IP address blocks:        200.50.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8e:7b:50:83:69:6a:eb:96:06:f8:57:dd:09:8e:65:16:6e:b4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:16:58 2024 GMT
            Not After : Mar  4 18:21:58 2025 GMT
        Subject: CN=B582618F49604E200D36D160CB6B9D8F0B86CDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:76:12:64:48:bc:34:38:c5:56:8a:53:c3:
                    83:77:f0:46:db:80:7e:ba:ab:56:29:af:35:e9:c2:
                    d1:e8:a8:33:a0:8b:fe:a7:42:18:89:e2:59:c6:bc:
                    3b:a6:bd:a1:41:7f:69:ad:d1:82:09:e0:74:8c:cf:
                    22:0f:8c:ac:46:2a:0a:cb:fa:eb:04:84:eb:68:80:
                    f4:84:69:d1:41:ae:6d:f9:3d:42:74:a5:2c:80:c8:
                    c9:5c:a2:e1:58:33:c4:99:22:b4:1b:80:b0:c6:17:
                    94:19:25:6a:79:1f:5f:20:cd:72:86:ff:c0:9e:eb:
                    48:55:a5:81:e3:6e:ee:99:ef:8e:81:1c:c0:b4:91:
                    ee:1d:ec:7d:e0:fd:22:ac:de:cc:31:e6:4f:98:09:
                    b4:94:da:14:06:38:da:13:70:d7:3a:c9:0a:52:a7:
                    e0:1a:99:c4:8e:8a:43:87:bc:21:9d:00:33:ae:50:
                    72:4f:48:9b:b1:41:c6:a1:0e:95:0d:ff:f0:86:df:
                    e4:a5:de:25:7f:95:a2:85:f5:aa:9d:ab:a2:63:42:
                    43:87:f5:14:0e:11:2b:ca:0a:99:30:b1:7e:0c:a9:
                    c7:5c:e0:18:75:48:e6:ef:d3:35:65:75:7d:99:59:
                    13:ad:07:1f:3a:fd:b8:02:47:8e:fb:c6:02:8e:b3:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:82:61:8F:49:60:4E:20:0D:36:D1:60:CB:6B:9D:8F:0B:86:CD:F4
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136352e302f32342d3234203d3e20323635363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a9:0e:f9:05:17:99:3f:b2:a4:e7:43:34:39:3c:9c:ac:21:
         ee:89:d8:f1:c0:fb:0f:ba:82:de:cf:22:ec:3f:0b:d6:72:cb:
         d3:05:4a:f7:2d:ff:2c:b4:c9:95:30:da:c6:0c:e6:3a:a6:3c:
         29:c9:d3:2b:a2:c5:31:9f:b6:ab:e2:e1:fb:de:48:81:36:16:
         66:a8:2e:50:24:16:92:e1:e4:a1:6d:f4:96:98:c1:f3:20:cb:
         0c:bc:d9:2a:6f:2a:2d:92:21:6a:76:9b:39:e7:30:10:75:c2:
         b8:6a:2b:23:78:ce:ef:17:9d:5b:51:89:31:a1:ae:a3:0b:4f:
         3e:c9:64:af:28:26:59:a3:66:cd:11:a7:d1:c8:2e:ca:6a:2f:
         1e:99:4e:c5:eb:d3:29:5f:88:75:17:d7:fb:15:ba:45:22:64:
         a6:d5:71:63:18:62:ac:2c:28:b8:79:d8:b2:01:41:8d:14:74:
         e9:1d:fd:35:18:4b:c8:48:69:96:54:1c:1d:81:65:af:ae:a9:
         23:5c:a5:8a:40:32:d7:b1:48:b4:f8:a5:4b:34:90:90:cc:8a:
         a3:4f:9d:41:99:1c:14:8f:a9:71:5d:3e:a0:65:3d:ef:0c:77:
         a8:4c:9d:6b:65:6c:4a:99:69:22:bb:bc:50:88:3c:69:53:20:
         dd:d0:fe:3a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTI57UINpauuWBvhX3QmOZRZutO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQwNUZGOTYyQzEyNDBCMkU4Q0M2OEI0RUE0MUQxODdD
NTUwOTU5MTAeFw0yNDAzMDUxODE2NThaFw0yNTAzMDQxODIxNThaMDMxMTAvBgNV
BAMTKEI1ODI2MThGNDk2MDRFMjAwRDM2RDE2MENCNkI5RDhGMEI4NkNERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXXYSZEi8NDjFVopTw4N38Ebb
gH66q1YprzXpwtHoqDOgi/6nQhiJ4lnGvDumvaFBf2mt0YIJ4HSMzyIPjKxGKgrL
+usEhOtogPSEadFBrm35PUJ0pSyAyMlcouFYM8SZIrQbgLDGF5QZJWp5H18gzXKG
/8Ce60hVpYHjbu6Z746BHMC0ke4d7H3g/SKs3swx5k+YCbSU2hQGONoTcNc6yQpS
p+AamcSOikOHvCGdADOuUHJPSJuxQcahDpUN//CG3+Sl3iV/laKF9aqdq6JjQkOH
9RQOESvKCpkwsX4Mqcdc4Bh1SObv0zVldX2ZWROtBx86/bgCR477xgKOsy3hAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUtYJhj0lgTiANNtFgy2udjwuGzfQwHwYDVR0j
BBgwFoAU7QX/liwSQLLozGi06kHRh8VQlZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkM4MUUzQzhCRkMwMjhFRkFDRjA4NjE0OTUxRkQwREI5
QTg2MjMyQ0MyNUNGOEI2MDZCQTcwNzVENjA2M0Y1LzAvRUQwNUZGOTYyQzEyNDBC
MkU4Q0M2OEI0RUE0MUQxODdDNTUwOTU5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDA1RkY5NjJDMTI0MEIyRThD
QzY4QjRFQTQxRDE4N0M1NTA5NTkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJDODFFM0M4QkZDMDI4RUZBQ0YwODYxNDk1MUZEMERCOUE4NjIzMkND
MjVDRjhCNjA2QkE3MDc1RDYwNjNGNS8wLzMyMzAzMDJlMzUzMDJlMzEzNjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyDKl
MA0GCSqGSIb3DQEBCwUAA4IBAQBoqQ75BReZP7Kk50M0OTycrCHuidjxwPsPuoLe
zyLsPwvWcsvTBUr3Lf8stMmVMNrGDOY6pjwpydMrosUxn7ar4uH73kiBNhZmqC5Q
JBaS4eShbfSWmMHzIMsMvNkqbyotkiFqdps55zAQdcK4aisjeM7vF51bUYkxoa6j
C08+yWSvKCZZo2bNEafRyC7Kai8emU7F69MpX4h1F9f7FbpFImSm1XFjGGKsLCi4
ediyAUGNFHTpHf01GEvISGmWVBwdgWWvrqkjXKWKQDLXsUi0+KVLNJCQzIqjT51B
mRwUj6lxXT6gZT3vDHeoTJ1rZWxKmWkiu7xQiDxpUyDd0P46
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org