Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3139312e302f32342d3234203d3e203532333939.roa
File:                     3230302e35302e3139312e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          Mq1203MGy+C+/G4R1xRZNOLjmUab40GyInOt111pUbA=
Subject key identifier:   CE:EB:0D:C2:C3:35:D3:09:78:62:05:52:FA:E4:F2:B8:21:67:87:85
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       3A2FB6AC0B77BC2CEDE41F3C9606C839C58857BB
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3139312e302f32342d3234203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 18:22:06 +0000
ROA not before:           Tue 05 Mar 2024 18:17:06 +0000
ROA not after:            Tue 04 Mar 2025 18:22:06 +0000
asID:                     52399
IP address blocks:        200.50.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2f:b6:ac:0b:77:bc:2c:ed:e4:1f:3c:96:06:c8:39:c5:88:57:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Mar  5 18:17:06 2024 GMT
            Not After : Mar  4 18:22:06 2025 GMT
        Subject: CN=CEEB0DC2C335D30978620552FAE4F2B821678785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:4b:b9:52:64:73:7f:26:f6:8b:0e:14:7d:
                    8c:0b:ec:a2:db:14:4b:f4:9b:86:70:70:b9:37:a6:
                    8d:4d:5e:46:d2:f0:ff:d8:e9:1d:af:25:6b:01:ca:
                    0c:8a:f8:8c:60:02:fd:41:78:91:69:22:c0:20:35:
                    65:bf:64:e7:3b:a6:1f:4e:8e:68:9d:7f:da:01:16:
                    8d:50:d2:b3:f0:38:d9:a5:e6:05:50:fd:14:f6:75:
                    c0:00:19:0a:73:d2:61:22:60:18:36:cc:49:a2:10:
                    76:fe:14:41:b3:ea:dc:e2:54:17:eb:bc:01:22:be:
                    d7:8b:50:ee:74:e1:0a:54:47:9d:a1:5a:fa:2d:30:
                    69:8a:62:f7:46:98:b6:02:52:a9:10:05:8e:b6:7d:
                    0a:46:30:56:8a:8e:3f:b4:c2:e1:f3:12:13:30:ca:
                    1d:0a:fa:c5:63:2c:bf:f6:81:33:99:60:9c:c3:e2:
                    50:76:fa:68:a1:ad:a2:91:f2:23:b0:52:47:d3:1e:
                    e0:b3:51:ea:87:6d:c3:9b:96:b9:ff:08:a9:c0:00:
                    57:64:66:f7:bd:29:a5:34:d5:48:72:c1:8c:e7:e9:
                    de:8b:7c:b2:96:6d:d1:64:b6:ac:3e:8f:b5:5d:0f:
                    e8:ac:21:da:1c:3c:b8:ac:a7:2b:2d:a1:dc:db:c7:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:0D:C2:C3:35:D3:09:78:62:05:52:FA:E4:F2:B8:21:67:87:85
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3139312e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:aa:25:c2:c5:72:27:61:0b:c1:41:c8:ce:12:37:0b:0c:97:
         67:78:7f:6d:ee:2d:eb:51:ac:4c:1b:b8:e5:ff:60:b6:67:e0:
         a0:07:99:36:be:87:f5:68:29:15:58:0d:85:03:7f:4f:f7:30:
         8f:77:1c:54:36:67:96:a1:a4:41:69:c8:47:8a:00:3b:c5:b3:
         29:6f:f7:3c:b8:e3:09:0c:a8:7e:5a:d9:37:29:05:30:7b:88:
         3d:7a:ff:62:fc:05:c7:a5:64:8f:b0:a2:60:73:6f:6b:c4:92:
         44:53:42:b1:d8:1d:02:d8:2d:8e:1f:ff:d5:8b:7d:27:0c:3c:
         de:4f:6e:2d:98:9f:55:27:20:89:4d:de:34:a0:05:6e:47:b2:
         ec:40:c8:a8:6c:e9:6e:4f:15:4c:7b:d4:6e:cf:28:93:71:e9:
         07:5e:06:ae:81:2a:a7:d3:1d:0b:79:93:08:34:09:ba:c3:d5:
         5f:12:59:71:3b:23:ff:99:d0:ba:02:80:1b:ff:e1:d1:9b:26:
         e2:10:10:38:6c:59:03:61:04:c2:3f:8c:59:56:86:dd:4f:7f:
         18:d2:e0:71:11:28:03:9e:9f:d1:86:c0:17:ff:d7:87:8d:df:
         b4:48:bb:68:fa:83:11:59:3a:5f:eb:7e:23:36:a5:3d:bb:c5:
         2f:e2:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org