Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136352e302f32342d3234203d3e203130363137.roa
File:                     3230302e35302e3136352e302f32342d3234203d3e203130363137.roa (raw, json)
Hash identifier:          sq9/3p4NAqLuuot+XAGdC03Ez24oCOSBgZ9UKuYwihc=
Subject key identifier:   A5:30:CF:66:39:CC:83:F3:DF:DA:FF:6A:7F:E3:44:9A:58:32:2C:AC
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       1DD60AFA1B67D5BF2DDF519E5E5BA8862C345DB0
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136352e302f32342d3234203d3e203130363137.roa
Signing time:             Tue 22 Jul 2025 01:26:07 +0000
ROA not before:           Tue 22 Jul 2025 01:21:07 +0000
ROA not after:            Tue 21 Jul 2026 01:26:07 +0000
asID:                     10617
IP address blocks:        200.50.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d6:0a:fa:1b:67:d5:bf:2d:df:51:9e:5e:5b:a8:86:2c:34:5d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Jul 22 01:21:07 2025 GMT
            Not After : Jul 21 01:26:07 2026 GMT
        Subject: CN=A530CF6639CC83F3DFDAFF6A7FE3449A58322CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:85:47:87:1b:c9:b2:71:82:3a:a5:7e:2e:
                    b2:56:0c:4f:da:3d:a6:93:e1:7c:a0:da:71:05:d0:
                    77:1c:2c:51:31:ec:c7:9e:33:bd:b3:11:9b:19:8a:
                    ca:65:39:ff:80:4c:2e:e8:c3:b9:e4:3e:0a:c2:18:
                    f1:37:e8:d5:6f:88:dc:2d:8a:79:fd:38:31:f2:ad:
                    46:08:95:ab:cf:c6:21:1f:ec:5a:9d:0e:5a:b1:b6:
                    ed:4b:2d:a1:60:78:84:33:b4:b3:6d:56:18:23:6c:
                    3c:4d:5c:d6:d1:fc:82:3f:38:c7:69:16:c4:f1:07:
                    58:36:83:47:bf:de:9c:1b:c7:1b:d4:2c:f9:7a:b2:
                    6a:c0:8b:7b:3c:42:0f:ab:f2:fb:fa:b7:0b:52:57:
                    b2:76:56:d4:b9:76:e3:85:4a:7d:88:ed:20:87:49:
                    af:ac:35:12:15:06:7f:8d:f0:1a:61:ea:25:f8:c5:
                    6e:61:16:17:8a:f4:dd:17:25:4a:fb:1a:ef:e4:c1:
                    41:2a:b7:85:b4:1d:46:7d:7f:e4:6d:8c:18:f1:14:
                    36:7a:8d:87:ce:0e:e0:22:1d:18:5a:3f:54:76:28:
                    da:91:2e:b0:8f:67:b6:5f:6b:50:b0:ef:c3:77:4c:
                    f9:2b:2d:6c:0f:94:fc:73:65:13:cc:ab:95:51:de:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:30:CF:66:39:CC:83:F3:DF:DA:FF:6A:7F:E3:44:9A:58:32:2C:AC
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3136352e302f32342d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:99:7a:8e:86:72:79:7d:cf:a8:11:38:b1:8b:e8:43:60:09:
         c5:7e:25:e0:4f:3a:58:80:45:85:96:65:ca:1a:0c:fc:b5:1f:
         45:d3:2d:45:0b:fd:99:2e:51:c3:74:c5:ae:b9:ea:0a:92:00:
         60:4a:8e:a8:b5:68:2f:8b:ed:e4:c2:a8:06:d3:7f:8e:de:cd:
         dc:1d:c3:c8:d8:9a:f4:a2:0a:bd:59:3f:f5:06:70:22:dd:ed:
         66:34:69:b7:1c:5f:0e:f6:1b:dd:9e:ae:82:55:34:84:07:81:
         42:69:8d:55:8d:3b:93:02:ef:7c:79:0b:87:38:82:88:97:f5:
         92:bb:35:f7:e6:6f:01:dd:a2:ae:56:b2:2e:41:11:7e:09:4b:
         f1:6a:9a:55:00:29:36:2a:de:ff:4d:c9:96:72:ac:80:8f:11:
         26:a9:8b:6d:c6:d7:7f:9d:29:c4:7f:62:8f:69:1c:64:f1:75:
         09:8e:e8:32:11:f3:ef:d0:8d:9a:11:1b:41:4a:8d:fa:57:1f:
         9f:0b:da:b2:0a:71:c1:38:57:03:e4:4f:19:3f:60:49:d7:bd:
         4f:4e:f6:db:90:58:5a:84:5c:2e:8d:85:cc:bb:9b:c3:64:df:
         3d:43:3d:4a:12:d2:7b:43:50:73:2e:21:6e:04:5c:bd:b1:bf:
         8d:fa:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:51 2025 by rpki-client