Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3139302e302f32342d3234203d3e20323732383632.roa
File:                     3230302e35302e3139302e302f32342d3234203d3e20323732383632.roa (raw, json)
Hash identifier:          QoiCipl6WmKfrcsOxBHMapr7foU73/hg03Oci4IFPDE=
Subject key identifier:   B8:AF:D3:61:A5:A3:40:06:33:29:EE:84:1C:72:05:CB:2D:89:F8:A5
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       05BA833662A2FE70D8593B005CBF2AB57000C268
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3139302e302f32342d3234203d3e20323732383632.roa
Signing time:             Tue 05 Mar 2024 18:22:07 +0000
ROA not before:           Tue 05 Mar 2024 18:17:07 +0000
ROA not after:            Tue 04 Mar 2025 18:22:07 +0000
asID:                     272862
IP address blocks:        200.50.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ba:83:36:62:a2:fe:70:d8:59:3b:00:5c:bf:2a:b5:70:00:c2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:07 2024 GMT
            Not After : Mar  4 18:22:07 2025 GMT
        Subject: CN=B8AFD361A5A340063329EE841C7205CB2D89F8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:87:e4:ea:12:41:24:b4:5d:ce:26:58:9c:
                    5c:54:f5:52:c5:c1:2c:b6:55:b7:4c:4a:4b:92:52:
                    e3:f2:62:8c:d8:79:33:f3:76:fb:fb:4a:fe:8d:21:
                    3e:c7:15:a3:00:38:a3:07:90:d7:8d:6a:a6:fd:47:
                    81:c4:1a:ec:48:b4:60:94:84:72:47:cd:cb:55:72:
                    19:5e:e3:c1:0a:54:74:28:43:20:b8:70:0d:07:e1:
                    fb:50:51:b4:b9:cd:cf:5f:4e:ff:44:18:ba:0f:17:
                    d1:fe:f5:08:e7:84:5e:27:3f:40:43:a7:3a:22:a7:
                    e1:dd:48:66:7a:16:b8:7f:84:4a:2d:2a:ee:d7:0a:
                    f9:12:05:52:c1:0d:55:86:ca:0f:22:7f:8f:be:58:
                    a6:9b:83:cc:65:02:a7:4d:cb:4d:f0:09:7f:69:44:
                    97:47:93:6e:01:7a:cb:38:2d:48:42:3f:46:c8:35:
                    6d:2e:79:7b:75:b1:62:1c:31:15:69:3e:c6:e3:52:
                    97:2a:3e:f0:85:8e:64:c6:3c:a9:47:c7:c3:f6:79:
                    c5:d4:a0:be:a8:9d:1e:36:ca:df:26:3f:aa:00:28:
                    26:7c:d9:30:33:4f:bd:f9:11:1d:a2:8f:9f:65:b9:
                    12:2f:30:df:8f:aa:ee:44:52:b8:43:bf:6b:ce:e1:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AF:D3:61:A5:A3:40:06:33:29:EE:84:1C:72:05:CB:2D:89:F8:A5
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3139302e302f32342d3234203d3e20323732383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:b7:bf:4f:04:04:3f:c3:78:a2:2f:cd:ab:d8:9e:dc:e8:
         4c:37:ef:93:ac:ba:25:8a:78:3a:ef:40:e6:ac:b3:7c:fc:f5:
         fd:f7:54:d3:9c:90:02:65:2e:2b:9f:5a:b3:b8:31:f6:c8:fb:
         84:64:91:cd:c1:5f:3e:de:80:e0:34:4d:7f:5e:dd:d1:6c:07:
         cd:05:c1:19:4f:01:db:d9:f7:d0:3c:68:e9:1e:b8:c3:ff:f1:
         5b:c3:e5:a1:3d:fe:ed:d4:4c:90:a2:fe:1c:fe:49:0d:f6:4c:
         71:84:8e:bb:f4:dc:db:bd:ce:58:6b:15:d7:8e:3a:38:03:c2:
         d6:68:83:6d:09:88:0d:20:ff:87:ff:19:1c:0f:9c:2a:f2:04:
         8b:92:98:4e:ab:ef:10:18:ae:3e:79:01:fd:c4:d5:a2:a7:fc:
         23:7d:d9:02:73:f0:81:55:ee:ae:42:af:2d:18:f7:2b:2c:fd:
         c7:ce:98:29:79:3e:1c:9e:d1:b7:81:4d:a0:9f:4f:99:2a:7f:
         db:db:ee:54:8b:d2:e8:72:67:1a:0a:9a:e0:ea:c3:9e:ca:c8:
         e7:85:c9:b4:e8:73:c8:c2:1e:18:b2:1d:ef:cf:aa:3c:05:40:
         87:b0:ae:85:36:2f:9c:85:bb:ff:21:23:bc:1d:b4:a0:4d:17:
         6a:43:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:57:45 2024 by rpki-client on console-ams.rpki-client.org