Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136372e302f32342d3234203d3e20323732383632.roa
File:                     3230302e35302e3136372e302f32342d3234203d3e20323732383632.roa (raw, json)
Hash identifier:          BXLR7NNzcFDphFblmrCnu+JOszXOWBWUr7PKz3pi8JI=
Subject key identifier:   4F:90:E4:46:73:10:3E:17:6C:AB:2C:93:A4:40:1E:5A:AE:64:9E:0C
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       1643D9E94763258D414AAA84F6CE9BE3A553A57E
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136372e302f32342d3234203d3e20323732383632.roa
Signing time:             Tue 04 Feb 2025 20:08:13 +0000
ROA not before:           Tue 04 Feb 2025 20:03:13 +0000
ROA not after:            Tue 03 Feb 2026 20:08:13 +0000
asID:                     272862
IP address blocks:        200.50.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:43:d9:e9:47:63:25:8d:41:4a:aa:84:f6:ce:9b:e3:a5:53:a5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Feb  4 20:03:13 2025 GMT
            Not After : Feb  3 20:08:13 2026 GMT
        Subject: CN=4F90E44673103E176CAB2C93A4401E5AAE649E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:39:ed:55:d4:f9:9a:6f:cb:b4:cc:56:b1:
                    83:22:c5:c4:bc:d8:f4:d1:89:df:a2:82:4b:b4:71:
                    d8:c3:23:80:58:3a:9a:54:1d:3d:6e:d6:f7:f9:28:
                    7f:69:37:8a:7f:8a:c0:62:3c:f2:de:3a:8e:4c:61:
                    ca:a6:a8:23:f0:a2:96:bd:59:37:37:c0:be:6a:df:
                    43:59:99:e9:84:12:07:8c:2d:45:43:70:82:42:6c:
                    99:4a:36:46:94:89:f3:dc:0b:02:de:f6:44:1e:99:
                    dc:d1:35:53:b1:7a:24:c9:53:dd:b6:5e:27:6e:d5:
                    13:da:4d:1c:cc:8f:7c:82:6e:62:d3:de:29:a1:af:
                    d5:1f:b2:60:c9:63:6a:fb:a8:40:72:49:85:27:4e:
                    9b:b9:04:62:ef:0d:d7:07:3f:4a:2c:f3:1b:37:1a:
                    b7:66:af:f4:f2:5f:75:e9:b2:83:c0:52:99:60:13:
                    c2:ae:40:b0:8b:4a:e9:c1:af:de:d2:17:f9:73:69:
                    c8:ad:2e:02:a4:54:de:79:1c:eb:36:53:ad:6a:97:
                    17:e2:9b:b4:1a:bc:d3:b2:31:5d:f3:3b:12:e1:23:
                    fe:c2:db:6e:a6:18:90:e5:92:3e:8a:44:c8:ac:76:
                    a5:d8:3b:df:c3:ae:31:2c:79:ce:8e:8a:a7:d9:e8:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:90:E4:46:73:10:3E:17:6C:AB:2C:93:A4:40:1E:5A:AE:64:9E:0C
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136372e302f32342d3234203d3e20323732383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fe:9f:bd:00:59:5b:6c:5a:70:a0:10:95:86:0b:f2:22:52:
         27:de:16:e1:4c:22:ee:34:3e:b4:3d:0c:12:4b:9f:90:3b:4d:
         07:9b:c3:c1:47:ba:23:48:84:12:88:33:80:fd:04:d4:74:e2:
         22:81:7b:54:c6:14:43:95:fb:4c:04:05:27:ba:f2:51:75:1e:
         28:ae:7f:41:09:21:31:e3:9d:93:3f:34:31:73:80:4f:ed:eb:
         e8:02:2e:2a:8c:7a:cf:28:2e:c1:06:16:1d:63:61:58:b5:47:
         a6:dd:53:ac:aa:ec:74:2f:16:69:ae:fa:98:dc:f6:28:48:b2:
         34:b1:94:77:2b:9d:21:a4:60:dc:40:9e:01:f6:9c:a7:3f:59:
         e6:13:f7:98:41:e5:73:e0:3f:65:8a:1b:2a:42:9b:55:2c:c8:
         d1:59:f5:bd:b2:aa:4e:d5:68:57:31:16:0d:b4:39:0a:5a:70:
         b5:67:93:ac:d0:87:98:e6:c3:c0:99:b4:bf:2a:d7:48:9d:7b:
         e7:62:33:40:4a:aa:a6:de:13:ac:1b:89:74:c5:54:99:9f:0e:
         4e:3b:34:aa:44:01:20:fe:1a:9e:a0:3d:21:c5:83:21:76:d3:
         9d:55:b6:4c:50:a4:e3:40:dc:f1:b6:81:7a:41:c4:a9:63:9f:
         33:05:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:43:43 2025 by rpki-client