Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131372e302f32342d3234203d3e203236363035.roa
File:                     3230302e31362e3131372e302f32342d3234203d3e203236363035.roa (raw, json)
Hash identifier:          M6dvwvFq2PuKx8pyHw2JfcVd74s9YWlVgsTgIjGUFY8=
Subject key identifier:   2E:A2:9B:0D:46:31:2E:8F:5C:CF:F2:E7:4D:FD:07:BD:81:D6:E5:93
Certificate issuer:       /CN=B8B396C17C90DFE052D24EB8A035A959AA99A930
Certificate serial:       50B4A0E7E61E15E678A1E3625A511D23495FD5EA
Authority key identifier: B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131372e302f32342d3234203d3e203236363035.roa
Signing time:             Tue 04 Feb 2025 18:40:11 +0000
ROA not before:           Tue 04 Feb 2025 18:35:11 +0000
ROA not after:            Tue 03 Feb 2026 18:40:11 +0000
asID:                     26605
IP address blocks:        200.16.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b4:a0:e7:e6:1e:15:e6:78:a1:e3:62:5a:51:1d:23:49:5f:d5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8B396C17C90DFE052D24EB8A035A959AA99A930
        Validity
            Not Before: Feb  4 18:35:11 2025 GMT
            Not After : Feb  3 18:40:11 2026 GMT
        Subject: CN=2EA29B0D46312E8F5CCFF2E74DFD07BD81D6E593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:69:7d:5d:f2:46:8d:cd:da:5c:47:05:b3:
                    4b:ef:4c:64:68:15:db:23:c7:bd:25:61:d2:ce:0f:
                    c3:22:f9:74:9b:0d:f0:7b:c0:b8:f7:89:77:fb:f4:
                    64:27:5a:2f:98:74:8a:b2:00:d4:13:d7:a8:c7:9c:
                    63:e8:4a:82:f2:02:0d:13:c1:b5:89:5e:24:93:0d:
                    fe:96:e6:9e:bb:7b:ec:85:b9:f9:e2:31:6f:b6:58:
                    12:c3:38:d6:03:55:bf:1d:1d:a7:69:82:1f:dd:a1:
                    ed:6f:87:3d:34:62:f8:d7:7f:2d:5c:64:55:cf:36:
                    6b:2b:0e:c5:05:6e:e6:a5:c1:5a:eb:12:8d:9a:a5:
                    6e:d1:95:71:e5:6c:35:f9:5a:aa:01:d3:5f:6b:89:
                    b4:4b:7d:79:8e:86:0f:82:ce:e3:85:f2:c6:3a:a9:
                    f0:aa:1e:7c:02:71:ca:89:88:06:b7:93:4b:73:49:
                    f6:a4:0f:08:d9:9f:fd:72:81:34:e1:6f:3c:77:c9:
                    e6:2d:02:66:c1:64:95:fb:aa:5b:e8:e6:76:d7:02:
                    3d:09:f9:24:df:77:15:79:c7:9b:be:35:e2:19:b6:
                    19:96:8e:e7:ce:e2:03:74:db:3e:61:0c:db:04:79:
                    ff:ac:c0:bf:9c:7a:40:d0:15:5e:66:4c:1b:fe:51:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A2:9B:0D:46:31:2E:8F:5C:CF:F2:E7:4D:FD:07:BD:81:D6:E5:93
            X509v3 Authority Key Identifier:
                keyid:B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131372e302f32342d3234203d3e203236363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a3:a6:f9:8a:cf:f1:13:a8:e0:28:0b:c1:23:5c:5a:df:78:
         26:2f:7c:a8:8c:54:46:2d:68:5c:a8:0c:60:38:e9:5e:e1:e3:
         9a:05:26:bc:90:48:2d:99:cf:17:d9:4f:5d:e1:04:19:7b:b3:
         86:7e:c0:a3:e4:26:bb:f7:4c:f1:17:d4:c8:a5:90:d4:82:96:
         eb:33:bd:c6:f8:40:90:c8:dd:50:2a:7a:fb:a8:f7:85:2f:67:
         41:b5:05:19:bc:5e:11:30:c3:ea:e9:2b:c1:0b:f0:aa:11:a3:
         4e:43:1d:a7:91:d6:5a:af:31:fe:3e:e3:76:d7:ad:05:df:21:
         be:13:21:44:bc:72:2a:89:5f:9f:5a:1b:69:ff:b2:81:ec:52:
         8c:ee:08:bb:ac:80:0a:ff:73:f3:1e:d5:54:2a:fe:82:c4:1f:
         b8:c5:c9:77:9e:7d:05:a3:50:5e:99:77:fb:cc:01:01:a7:0c:
         6b:65:b1:79:a9:5c:a9:d8:a2:40:27:01:aa:74:b8:7e:93:4b:
         68:e6:0f:d2:c0:87:f8:d0:a8:be:3d:81:79:69:a1:f4:59:59:
         4b:03:2f:ab:aa:1c:df:c3:1a:23:96:3f:5d:cc:40:f8:c9:f4:
         15:cc:53:a1:81:58:40:ce:92:74:b8:e2:54:e7:c5:07:fb:22:
         f8:04:13:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:05:00 2025 by rpki-client