Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135352e302f32342d3234203d3e20323732383732.roa
File:                     3230302e35302e3135352e302f32342d3234203d3e20323732383732.roa (raw, json)
Hash identifier:          r6QdnU0s3HLwXhmSlEg2rPuFaGC9tqizh8btNJswYAs=
Subject key identifier:   79:E0:43:BD:E1:9A:95:2C:E4:AB:93:C9:BB:3F:8D:87:D7:15:E6:F2
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       5B234D3CAA71A2190C2157AEA0A9B97AB82475BF
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135352e302f32342d3234203d3e20323732383732.roa
Signing time:             Fri 02 May 2025 00:17:29 +0000
ROA not before:           Fri 02 May 2025 00:12:29 +0000
ROA not after:            Fri 01 May 2026 00:17:29 +0000
asID:                     272872
IP address blocks:        200.50.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 18:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:23:4d:3c:aa:71:a2:19:0c:21:57:ae:a0:a9:b9:7a:b8:24:75:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: May  2 00:12:29 2025 GMT
            Not After : May  1 00:17:29 2026 GMT
        Subject: CN=79E043BDE19A952CE4AB93C9BB3F8D87D715E6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:57:ec:a0:d4:34:49:a9:b5:84:e3:d2:b1:
                    b2:aa:67:d4:f6:66:d7:43:03:bf:31:94:33:09:42:
                    7f:c3:64:80:1b:09:42:03:9f:db:48:db:36:92:ae:
                    d8:d6:cb:b6:06:30:4c:6a:92:8a:2f:e7:94:14:31:
                    3b:1a:e2:b1:f0:b9:68:37:e6:f1:3e:c2:40:55:59:
                    ec:68:9c:66:cd:87:3a:e9:02:67:65:99:99:bd:43:
                    bb:76:5e:af:b1:1f:18:e0:86:af:70:2c:57:58:c4:
                    e0:5f:aa:6f:6b:65:6a:70:7a:25:24:a1:5c:27:a1:
                    d1:1a:ad:46:77:13:51:46:0a:45:7a:8d:00:2b:b6:
                    1e:a1:4d:8e:15:09:59:fb:92:0b:f2:20:54:10:e0:
                    34:c6:5f:8f:e8:5d:94:46:4e:90:8e:25:b4:e6:dc:
                    3a:67:e9:34:6b:8d:82:59:71:f5:fc:6d:b3:f6:7d:
                    51:ce:e4:5c:6a:27:09:1e:5c:c3:35:7c:8c:c3:d5:
                    3f:e2:c5:f4:3b:a8:84:d1:cd:5b:66:ee:c7:2d:2a:
                    a7:27:f8:50:2c:52:1b:32:da:7b:ce:2e:cf:84:ed:
                    12:f4:a0:eb:0f:6e:4b:c9:9e:bd:c7:bd:5f:bd:f4:
                    d7:fc:a1:76:b3:2d:30:90:63:7b:cc:9c:06:b9:c7:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E0:43:BD:E1:9A:95:2C:E4:AB:93:C9:BB:3F:8D:87:D7:15:E6:F2
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135352e302f32342d3234203d3e20323732383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:d3:69:e6:15:60:d6:eb:35:ea:e2:4c:cd:5a:61:d8:7e:
         30:24:d5:83:76:48:5c:d2:d8:1c:6b:92:49:ed:4b:34:26:14:
         ec:d0:32:eb:06:ad:4f:7d:e5:aa:38:0d:a2:9a:85:58:dd:07:
         a3:59:24:9c:2c:ef:fb:f4:71:97:eb:6a:ec:35:23:d8:2e:75:
         45:b4:65:a0:e3:48:3a:4d:07:f6:06:1f:b7:d3:fe:b9:7f:dc:
         5b:0f:fb:87:a9:6f:18:e4:4a:c9:9b:90:db:02:7d:36:ed:64:
         8d:4b:f0:a1:28:90:6c:70:67:12:c3:65:f3:72:63:20:d9:e9:
         72:59:47:30:d5:75:66:7f:d8:7e:29:53:8b:ef:6d:a4:14:42:
         3c:02:c7:57:4f:6d:12:42:a9:96:1b:d9:8f:65:b7:a5:92:de:
         28:d9:97:90:35:2a:e7:06:10:64:0d:c3:4d:9c:de:e7:4f:67:
         1a:af:24:27:48:fb:df:02:68:2e:77:41:09:b7:63:84:41:bc:
         ee:41:e0:b2:87:e2:36:22:aa:3d:73:6f:54:a4:c8:8a:d6:b7:
         87:8d:13:32:49:a1:05:8a:dc:bc:d2:db:30:4e:20:30:38:75:
         e8:a7:3e:cf:08:c5:4f:e5:26:5c:50:7e:fd:67:cb:54:2f:f1:
         62:1b:d3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:59:47 2025 by rpki-client