Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3137302e302f32342d3234203d3e20323635373736.roa
File:                     3230302e35302e3137302e302f32342d3234203d3e20323635373736.roa (raw, json)
Hash identifier:          H8ylKpENct16d21B5BYH3VoIJGaDrt6nn7Qu/Go9m0k=
Subject key identifier:   80:E6:30:EB:43:20:92:41:83:13:E2:37:47:8A:0D:1F:80:71:AE:24
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       1A75736216D20653FF88BD8E41A60F027AA4A306
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3137302e302f32342d3234203d3e20323635373736.roa
Signing time:             Tue 04 Feb 2025 20:08:07 +0000
ROA not before:           Tue 04 Feb 2025 20:03:07 +0000
ROA not after:            Tue 03 Feb 2026 20:08:07 +0000
asID:                     265776
IP address blocks:        200.50.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:75:73:62:16:d2:06:53:ff:88:bd:8e:41:a6:0f:02:7a:a4:a3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Feb  4 20:03:07 2025 GMT
            Not After : Feb  3 20:08:07 2026 GMT
        Subject: CN=80E630EB432092418313E237478A0D1F8071AE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:a9:f2:97:d7:dc:2f:26:33:44:60:fd:7b:
                    22:37:a6:b1:1e:92:60:69:f0:e1:20:45:f3:f7:e6:
                    bd:13:5e:45:2f:8c:c9:a1:87:63:3f:9b:84:8e:b2:
                    94:2a:90:ce:8d:0e:b6:a0:42:b8:0b:e6:14:32:42:
                    07:55:38:c9:b5:9d:08:a9:22:e9:3f:52:88:22:c2:
                    fe:3c:fd:ac:72:9d:ce:f4:c5:d2:b6:4f:79:18:12:
                    67:a6:0a:3d:a3:22:12:d0:fb:da:38:57:89:81:21:
                    dd:84:77:f4:7d:4d:f4:7c:11:7e:d5:f5:e4:ea:aa:
                    1b:61:1f:4b:56:84:fb:2f:36:75:de:c1:94:ea:a7:
                    bf:2c:e8:17:2c:54:f5:96:10:fc:ee:cb:0d:c5:ef:
                    90:b8:92:21:ef:b9:ae:5d:65:ef:8c:8e:28:06:51:
                    e5:69:e5:85:1e:86:86:af:fc:70:63:72:41:19:39:
                    30:95:f3:66:b8:6b:60:a9:c1:7e:3f:89:44:20:51:
                    84:1b:07:45:2c:d5:8b:21:3d:c8:cf:22:47:2e:d5:
                    74:02:90:54:55:e6:44:98:6e:a6:9b:aa:49:ec:e3:
                    5d:2f:08:64:c5:72:7b:56:c7:f6:2e:7b:23:31:92:
                    b5:c2:18:10:f2:a0:df:30:7e:81:3b:4e:1a:94:ad:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E6:30:EB:43:20:92:41:83:13:E2:37:47:8A:0D:1F:80:71:AE:24
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3137302e302f32342d3234203d3e20323635373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e7:75:1b:15:f7:bd:ca:97:6b:d4:e7:2b:b1:f7:c8:70:96:
         bc:b1:8a:96:41:8d:f5:57:d8:4d:a4:08:ad:1c:5e:14:28:3b:
         49:6f:16:46:63:05:fc:c8:f3:21:4f:25:70:97:b1:43:02:92:
         34:50:76:15:04:cd:43:a1:2d:f6:ba:ce:94:bc:7f:2e:75:0a:
         e6:c4:60:21:97:3d:e9:eb:8e:8e:f2:95:df:03:c9:cf:b8:d0:
         0c:bf:c0:c5:3e:8a:b5:19:17:37:61:cc:e6:ae:5d:49:6e:52:
         59:38:2e:e6:2e:a9:2b:ce:51:ef:9e:72:48:25:7c:f6:1e:51:
         bf:2a:b1:6a:be:40:5a:cb:9a:da:1a:33:09:4d:ca:ea:67:a9:
         db:4b:92:b0:94:f1:8a:e7:fe:ac:5d:f0:b2:ea:8f:88:f8:0c:
         e7:b9:e0:66:6a:1e:87:9a:0b:fa:52:3d:e7:98:96:1c:5f:6b:
         c6:f3:9f:24:90:de:5d:6d:ee:09:5d:7c:eb:13:5b:01:0a:71:
         7a:db:11:70:ce:83:90:d0:5b:68:d4:3e:67:80:6a:01:39:ea:
         09:9f:2a:10:2d:d3:12:c7:2e:27:0f:b4:66:2e:7c:50:ee:ae:
         ea:5b:29:8b:7b:fa:bb:9e:54:55:9d:33:52:ef:14:11:df:6d:
         b0:2b:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:07 2025 by rpki-client