Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136322e302f32332d3234203d3e203130363137.roa
File:                     3230302e35302e3136322e302f32332d3234203d3e203130363137.roa (raw, json)
Hash identifier:          XaCiJnrmRiKfRMMJlgwKGIJrduiY5/kCY/nULtzMAK8=
Subject key identifier:   E0:9B:E9:27:E1:81:8F:0A:42:A9:25:A5:76:B5:DB:B6:93:9B:63:64
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       1B5CA01D49B3CC6510D1E4BF035E3A1DE9D6FDA9
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136322e302f32332d3234203d3e203130363137.roa
Signing time:             Tue 22 Jul 2025 01:26:07 +0000
ROA not before:           Tue 22 Jul 2025 01:21:07 +0000
ROA not after:            Tue 21 Jul 2026 01:26:07 +0000
asID:                     10617
IP address blocks:        200.50.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5c:a0:1d:49:b3:cc:65:10:d1:e4:bf:03:5e:3a:1d:e9:d6:fd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Jul 22 01:21:07 2025 GMT
            Not After : Jul 21 01:26:07 2026 GMT
        Subject: CN=E09BE927E1818F0A42A925A576B5DBB6939B6364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:23:0b:ff:c2:fd:23:1b:e0:01:7b:fa:09:
                    fb:75:69:fc:7a:aa:53:c9:a4:c1:d4:98:7f:86:5b:
                    09:bd:57:d3:0a:5b:47:94:bb:61:08:8c:71:0e:e8:
                    1b:ef:be:d4:e2:65:a4:45:e7:8d:49:d5:08:28:15:
                    3f:fa:b6:ed:de:af:c9:bd:4e:2f:38:ec:dc:31:83:
                    f7:3d:69:5f:d8:a5:c9:39:ed:cf:c0:30:94:a0:b4:
                    b0:0c:8b:77:29:b4:f0:c2:25:23:2f:0e:3c:a0:e6:
                    82:8a:11:99:21:05:43:4a:e5:e3:2c:3e:4e:58:14:
                    0a:95:e5:31:ed:70:37:4d:ba:e9:e4:00:af:bf:b0:
                    13:52:10:7b:ed:0d:f9:b3:68:66:38:1a:82:c6:9d:
                    51:a2:ff:57:ed:ec:36:45:d0:de:e0:23:37:15:e8:
                    6e:52:a6:a1:81:35:aa:72:68:6a:43:99:b4:de:c4:
                    67:fa:c3:c7:e7:c2:41:9c:3a:d3:38:5e:b3:bc:db:
                    c7:98:3c:e5:71:86:ec:64:96:e0:ee:1e:9a:84:12:
                    3f:d3:c4:f1:ec:a0:d6:30:0c:e4:74:f9:64:af:97:
                    3b:c8:77:40:0a:96:16:ef:b6:36:9e:ad:eb:90:96:
                    fb:15:f2:b7:c7:83:bf:38:94:f9:9a:ac:d8:c8:0b:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9B:E9:27:E1:81:8F:0A:42:A9:25:A5:76:B5:DB:B6:93:9B:63:64
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136322e302f32332d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:fe:e4:04:03:37:26:7b:8c:cd:b9:bb:d2:19:ff:d7:be:c8:
         c0:12:b1:bc:e6:ea:98:b7:4f:5c:76:0c:35:35:0f:a3:ae:d8:
         1e:35:c0:2d:d8:75:8a:43:91:5f:09:91:4f:a6:34:e4:0d:21:
         ca:e6:30:e9:e1:3a:de:9a:dc:0f:ac:b7:28:84:be:b3:d7:34:
         81:57:4b:6c:10:88:7a:bd:06:4a:f7:eb:d6:9e:c3:8f:45:1c:
         e2:a4:43:82:86:d0:5d:f3:06:0e:07:66:11:6a:13:2e:5a:5c:
         02:16:45:e7:de:cb:0f:95:33:a3:b1:b8:bf:d2:14:6e:40:60:
         5c:1a:c8:3b:5b:58:49:fa:da:3c:5a:0c:af:63:14:22:0a:8c:
         47:db:e7:4c:d2:39:7b:b8:e3:b7:68:a3:f7:bb:ee:a6:ba:3d:
         43:57:34:02:6f:dc:ed:de:91:a0:8d:0a:e3:a4:f4:e2:bb:0a:
         8b:c4:c7:37:be:d0:9c:40:14:80:e5:f7:84:57:2c:ee:cc:d9:
         b9:bb:fe:7e:5d:99:cf:a8:96:36:33:e9:ee:a0:50:02:fa:52:
         59:67:c5:14:6c:9f:c3:90:85:c4:75:4a:92:49:d8:3b:06:c2:
         b3:65:ad:43:82:59:3b:58:f0:47:f8:13:47:a3:d6:c3:78:42:
         f7:ee:e6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:02:01 2025 by rpki-client