Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3139312e302f32342d3234203d3e203532333939.roa
File:                     3230302e35302e3139312e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          EsXCiR0DZl0P+K3l5HbtoAPfrPFkii/yEOefhqxYGmg=
Subject key identifier:   83:A7:32:6D:8B:44:1A:09:9D:9C:AF:95:D6:73:A5:52:1F:40:B9:10
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       48D4A19465E5E37AE29B29196062442BD3B92204
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3139312e302f32342d3234203d3e203532333939.roa
Signing time:             Tue 04 Feb 2025 20:08:09 +0000
ROA not before:           Tue 04 Feb 2025 20:03:09 +0000
ROA not after:            Tue 03 Feb 2026 20:08:09 +0000
asID:                     52399
IP address blocks:        200.50.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d4:a1:94:65:e5:e3:7a:e2:9b:29:19:60:62:44:2b:d3:b9:22:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Feb  4 20:03:09 2025 GMT
            Not After : Feb  3 20:08:09 2026 GMT
        Subject: CN=83A7326D8B441A099D9CAF95D673A5521F40B910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:97:4d:87:54:18:03:19:ac:19:f9:75:dd:bb:
                    96:2a:fa:4a:7c:f1:e8:4a:39:fb:f6:fb:80:f5:f2:
                    66:c5:21:7c:98:41:09:de:fa:22:ec:0e:70:f5:60:
                    99:db:3c:6f:40:a5:38:1a:ac:39:e6:45:71:6b:af:
                    a6:e1:1f:7c:6b:55:de:db:5e:2b:09:e6:c6:29:cc:
                    b5:ed:f9:b3:f9:a8:9f:cd:00:cc:76:41:db:db:99:
                    38:0e:74:14:4f:99:c4:32:08:d9:41:dc:4a:83:7b:
                    eb:40:65:27:b0:e5:52:bf:6c:83:5f:43:14:b8:dd:
                    42:f2:be:96:91:f6:d1:b6:5e:cb:02:25:7f:fe:b4:
                    f3:b9:d0:79:93:f2:24:dc:04:ba:b1:4e:31:c8:c9:
                    80:97:9e:a5:e0:ef:e8:72:b9:45:41:cb:3c:a9:3b:
                    78:d7:e4:50:62:d0:0e:2c:d6:87:60:c7:86:d4:73:
                    e2:d8:68:e9:51:e3:c2:f7:60:8a:13:86:31:9a:95:
                    7f:ee:e1:ce:c6:32:8a:2f:9a:dc:20:f3:5b:d1:a2:
                    a1:b7:5d:97:21:2c:6f:7e:1a:45:6e:cb:cf:49:86:
                    5a:83:68:12:84:9e:b7:63:29:0b:55:0c:4d:75:87:
                    d8:60:f2:6d:1a:1f:b5:39:71:ed:93:a8:f9:f4:7e:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:32:6D:8B:44:1A:09:9D:9C:AF:95:D6:73:A5:52:1F:40:B9:10
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3139312e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:80:c5:f1:d0:c1:af:bb:60:d6:24:49:ab:c8:44:be:8d:53:
         b4:9a:85:1d:0f:df:fd:e8:2c:17:b3:ad:3a:a8:11:d7:27:a2:
         c6:c7:bc:c5:ea:67:81:fd:b2:ba:09:7b:03:f1:4e:87:79:d4:
         bd:31:54:b1:0c:e1:97:8f:64:88:04:ff:69:8e:28:fc:33:7a:
         ac:af:ae:65:67:30:a7:d5:5d:68:9f:09:bb:4b:29:51:d1:e5:
         12:bf:36:89:3e:8b:32:4b:c8:51:24:ce:80:04:45:f6:cc:34:
         7f:b9:93:4c:13:df:64:0c:88:52:a1:c3:24:cd:0c:00:51:22:
         51:9b:4c:d7:77:11:54:b7:52:08:91:e1:09:7c:08:a2:c0:64:
         c7:88:f9:d3:69:b8:9e:b3:fa:14:cf:0d:cc:e5:43:e1:47:7b:
         00:a7:ec:ba:fa:43:d5:cf:7f:3c:65:dd:67:3f:c6:d8:1a:97:
         dd:ec:53:0b:9a:f8:f6:a4:66:37:80:b5:27:21:c8:0b:61:f2:
         e9:a7:28:f2:3f:e8:9b:2c:42:54:25:23:49:ff:f8:fb:9b:68:
         4a:f6:45:b4:89:0c:18:19:09:c0:7f:6b:c7:ba:b9:0c:45:80:
         2a:8b:1c:d6:20:a1:e6:89:2e:1f:89:56:72:a2:a2:06:19:94:
         12:df:bf:bf
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSNShlGXl43rimykZYGJEK9O5IgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQwNUZGOTYyQzEyNDBCMkU4Q0M2OEI0RUE0MUQxODdD
NTUwOTU5MTAeFw0yNTAyMDQyMDAzMDlaFw0yNjAyMDMyMDA4MDlaMDMxMTAvBgNV
BAMTKDgzQTczMjZEOEI0NDFBMDk5RDlDQUY5NUQ2NzNBNTUyMUY0MEI5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAl02HVBgDGawZ+XXdu5Yq+kp8
8ehKOfv2+4D18mbFIXyYQQne+iLsDnD1YJnbPG9ApTgarDnmRXFrr6bhH3xrVd7b
XisJ5sYpzLXt+bP5qJ/NAMx2QdvbmTgOdBRPmcQyCNlB3EqDe+tAZSew5VK/bINf
QxS43ULyvpaR9tG2XssCJX/+tPO50HmT8iTcBLqxTjHIyYCXnqXg7+hyuUVByzyp
O3jX5FBi0A4s1odgx4bUc+LYaOlR48L3YIoThjGalX/u4c7GMoovmtwg81vRoqG3
XZchLG9+GkVuy89JhlqDaBKEnrdjKQtVDE11h9hg8m0aH7U5ce2TqPn0fgSdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUg6cybYtEGgmdnK+V1nOlUh9AuRAwHwYDVR0j
BBgwFoAU7QX/liwSQLLozGi06kHRh8VQlZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkM4MUUzQzhCRkMwMjhFRkFDRjA4NjE0OTUxRkQwREI5
QTg2MjMyQ0MyNUNGOEI2MDZCQTcwNzVENjA2M0Y1LzAvRUQwNUZGOTYyQzEyNDBC
MkU4Q0M2OEI0RUE0MUQxODdDNTUwOTU5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDA1RkY5NjJDMTI0MEIyRThD
QzY4QjRFQTQxRDE4N0M1NTA5NTkxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJDODFFM0M4QkZDMDI4RUZBQ0YwODYxNDk1MUZEMERCOUE4NjIzMkND
MjVDRjhCNjA2QkE3MDc1RDYwNjNGNS8wLzMyMzAzMDJlMzUzMDJlMzEzOTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgyvzAN
BgkqhkiG9w0BAQsFAAOCAQEAOIDF8dDBr7tg1iRJq8hEvo1TtJqFHQ/f/egsF7Ot
OqgR1yeixse8xepngf2yugl7A/FOh3nUvTFUsQzhl49kiAT/aY4o/DN6rK+uZWcw
p9VdaJ8Ju0spUdHlEr82iT6LMkvIUSTOgARF9sw0f7mTTBPfZAyIUqHDJM0MAFEi
UZtM13cRVLdSCJHhCXwIosBkx4j502m4nrP6FM8NzOVD4Ud7AKfsuvpD1c9/PGXd
Zz/G2BqX3exTC5r49qRmN4C1JyHIC2Hy6aco8j/omyxCVCUjSf/4+5toSvZFtIkM
GBkJwH9rx7q5DEWAKosc1iCh5okuH4lWcqKiBhmUEt+/vw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:13:48 2025 by rpki-client