Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3137302e302f32342d3234203d3e20323635373736.roa
File:                     3230302e35302e3137302e302f32342d3234203d3e20323635373736.roa (raw, json)
Hash identifier:          2mMGK/2pLibncdFaQeF5/v2b4b7kdaEkBPhwaCKq6Tc=
Subject key identifier:   42:1C:A3:23:CD:31:90:16:08:2E:13:A4:1C:B2:F1:A3:A7:EE:EE:38
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       2E6BDCD8BB2C81D6FC6F247DA256AC29BA583700
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3137302e302f32342d3234203d3e20323635373736.roa
Signing time:             Tue 05 Mar 2024 18:22:02 +0000
ROA not before:           Tue 05 Mar 2024 18:17:02 +0000
ROA not after:            Tue 04 Mar 2025 18:22:02 +0000
asID:                     265776
IP address blocks:        200.50.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6b:dc:d8:bb:2c:81:d6:fc:6f:24:7d:a2:56:ac:29:ba:58:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:02 2024 GMT
            Not After : Mar  4 18:22:02 2025 GMT
        Subject: CN=421CA323CD319016082E13A41CB2F1A3A7EEEE38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:dd:8e:ef:30:a9:ea:d6:41:b5:1d:b9:ef:
                    6c:19:01:de:bc:c7:38:f5:8f:68:2e:ac:61:2d:99:
                    9e:6f:d0:d4:4e:35:81:12:03:c7:c8:4d:26:2d:f1:
                    b1:5e:a8:0b:90:53:1c:a0:84:9d:d5:cc:db:5c:b6:
                    0f:38:b1:8b:8a:38:54:da:b3:4c:f4:95:7a:05:9f:
                    ba:b8:f9:e6:55:96:06:6c:f5:be:8d:5b:a8:43:a8:
                    08:3e:b5:5d:18:3c:be:68:67:d6:89:16:26:ed:fa:
                    f0:76:23:43:4b:54:c4:45:ee:73:73:7d:42:92:fd:
                    01:07:7d:52:29:8a:3f:47:93:8e:59:df:bc:ed:ce:
                    37:a5:f3:33:54:c5:72:a8:73:cc:7f:5f:20:ac:19:
                    7b:53:34:9c:15:8d:07:19:d6:f5:56:9a:ee:dd:d5:
                    7a:3e:a7:5d:47:c2:dd:cd:da:a0:5e:30:9d:80:05:
                    9b:bf:f9:ae:db:9a:47:29:0f:7c:27:53:fc:79:eb:
                    51:cb:3a:c2:0e:f7:dd:ae:ad:0e:3f:c8:cf:8d:75:
                    18:43:3a:07:05:6c:36:ba:76:e9:0d:04:50:b3:c4:
                    a3:c9:8d:03:13:a7:0d:2f:ad:de:44:91:0a:b1:09:
                    79:56:9b:53:1f:ef:a2:f6:84:ea:f1:88:cd:00:c0:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1C:A3:23:CD:31:90:16:08:2E:13:A4:1C:B2:F1:A3:A7:EE:EE:38
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3137302e302f32342d3234203d3e20323635373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:08:f2:39:ff:9b:cc:6e:8d:c9:20:a6:62:79:01:e3:ef:c0:
         55:b8:62:0a:d9:b6:18:72:33:0a:85:e2:55:a4:6a:be:72:5a:
         24:db:43:b0:13:08:5e:d3:d5:06:1b:96:a3:4b:88:de:d2:50:
         39:5c:0d:3d:33:2d:f5:f7:a7:a2:42:89:f1:32:db:0a:75:e6:
         2b:ca:c3:bd:b7:ea:f7:85:5c:8b:38:60:cf:67:05:84:08:83:
         4d:8f:a1:0e:0a:52:13:19:d8:12:6e:45:ba:44:30:63:08:d8:
         c1:28:0f:70:47:93:4e:cd:c0:6a:d3:1f:35:27:97:b7:63:11:
         4a:04:cd:f6:a2:0d:9e:63:c0:c1:78:58:13:ef:31:7b:f3:8c:
         35:05:77:30:71:f9:66:21:92:8b:63:e5:c6:93:47:9d:25:d0:
         f8:c2:d5:f6:02:02:d8:96:f9:df:48:47:8d:b3:89:73:3a:45:
         77:26:f3:fe:af:26:10:6f:13:e2:d7:d2:2a:31:26:95:3d:19:
         ad:2c:cb:6b:d2:9b:40:00:bd:29:66:c6:0d:58:15:5d:96:0c:
         cb:1a:f2:f9:47:7d:ec:fc:3d:bb:1b:e1:9d:fc:0a:70:05:85:
         0b:9f:0b:0c:01:e1:e7:7e:f7:bd:1a:0a:c4:93:ee:f3:ae:f5:
         89:56:0d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org