Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3137302e302f32342d3234203d3e20323734303439.roa
File:                     3230302e35302e3137302e302f32342d3234203d3e20323734303439.roa (raw, json)
Hash identifier:          QpfOtEIjuaEd3xXkuH4wd74oI05TjN+6PIC38j2/jFw=
Subject key identifier:   FA:89:0F:DC:13:BD:93:70:98:37:3B:86:8B:B4:C3:16:B4:A4:11:A0
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       4A996EFDA8B3C0805783DBB3A5E2B3C9CFB2BF33
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3137302e302f32342d3234203d3e20323734303439.roa
Signing time:             Mon 11 May 2026 17:42:04 +0000
ROA not before:           Mon 11 May 2026 17:37:04 +0000
ROA not after:            Mon 10 May 2027 17:42:04 +0000
asID:                     274049
IP address blocks:        200.50.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 11:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:99:6e:fd:a8:b3:c0:80:57:83:db:b3:a5:e2:b3:c9:cf:b2:bf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: May 11 17:37:04 2026 GMT
            Not After : May 10 17:42:04 2027 GMT
        Subject: CN=FA890FDC13BD937098373B868BB4C316B4A411A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:8d:53:53:20:ad:90:a9:77:a3:a7:ea:2c:
                    ed:bf:0c:b8:60:6b:30:31:e4:53:15:9e:eb:06:d3:
                    6e:dd:e5:d9:e5:05:3a:b7:21:06:b3:6e:ae:81:3a:
                    a5:39:d4:0e:8f:c1:c4:22:0d:5c:4f:54:8f:f2:61:
                    39:25:7f:55:0f:1d:06:3f:c2:9b:f6:ec:fa:05:a6:
                    6f:88:f5:e2:74:d5:bd:5b:b8:1b:92:04:10:9e:ce:
                    ba:e7:5d:01:dd:29:af:ba:1e:cb:bd:2b:0a:c0:9c:
                    a9:4a:ef:d4:5d:a4:b5:91:e8:b1:6f:d4:eb:83:ea:
                    23:11:29:3a:86:e4:40:1f:bb:83:73:fd:cf:fd:b2:
                    9f:41:30:8a:08:a8:5b:50:e7:9d:5d:9d:d1:95:cb:
                    76:a0:b9:ae:3a:2e:91:40:16:40:21:0a:c7:fc:83:
                    f9:83:84:17:44:c7:c7:18:6d:ef:75:46:fc:6a:16:
                    98:4b:cc:6f:b2:d2:84:0c:76:9a:51:0a:62:90:0b:
                    ef:9d:1b:a6:35:81:5b:6b:18:4e:b8:c4:28:e1:da:
                    3f:f9:74:e3:60:e1:41:ff:20:6c:36:0e:fe:56:35:
                    e1:5c:a2:21:0c:b7:e2:cc:27:31:23:62:3c:9e:5e:
                    2c:e9:c5:d3:80:9b:aa:1f:1a:58:79:d7:e6:41:f6:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:89:0F:DC:13:BD:93:70:98:37:3B:86:8B:B4:C3:16:B4:A4:11:A0
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e35302e3137302e302f32342d3234203d3e20323734303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:92:7d:fc:f9:19:40:bf:f4:39:ea:63:be:23:ec:34:43:
         14:46:06:49:0f:29:4a:63:03:a8:b7:ae:1a:78:91:62:b7:ec:
         98:5d:b0:e3:ec:d8:01:68:73:93:d3:d4:18:a5:49:33:e6:e3:
         2b:49:c5:65:c0:11:e2:52:e0:71:8c:b8:7e:f9:f6:2e:da:ed:
         85:e8:d7:92:2d:d2:3c:b3:ea:28:4c:f1:62:75:b6:c8:90:a2:
         74:9f:18:54:0c:1f:1b:29:9a:80:68:2c:eb:24:f9:f5:23:6c:
         6a:91:6f:bf:d6:2f:90:b0:22:68:41:7f:73:fc:33:ae:95:57:
         d6:93:25:17:d6:82:d8:f9:f3:e7:5f:3c:ed:f5:fd:99:51:08:
         6d:65:cd:b4:ca:0f:ab:0d:cd:3f:0e:ad:ca:83:55:f4:08:ce:
         08:c5:2d:e9:ac:15:4d:76:9b:e1:4c:69:85:86:4e:60:96:ff:
         b7:35:6e:8d:5a:2f:16:67:33:e6:c6:e0:08:73:16:47:27:cd:
         5f:d5:c8:f1:d7:a4:dd:24:80:86:e1:92:3c:25:6e:ba:79:28:
         0d:a4:88:e9:ee:67:21:78:d1:39:fe:00:ac:6d:cc:8e:39:44:
         d4:9f:9f:3c:58:25:b7:82:f9:01:01:b4:1b:09:df:ce:7d:31:
         e8:1f:3a:c2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSplu/aizwIBXg9uzpeKzyc+yvzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQwNUZGOTYyQzEyNDBCMkU4Q0M2OEI0RUE0MUQxODdD
NTUwOTU5MTAeFw0yNjA1MTExNzM3MDRaFw0yNzA1MTAxNzQyMDRaMDMxMTAvBgNV
BAMTKEZBODkwRkRDMTNCRDkzNzA5ODM3M0I4NjhCQjRDMzE2QjRBNDExQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiI1TUyCtkKl3o6fqLO2/DLhg
azAx5FMVnusG027d5dnlBTq3IQazbq6BOqU51A6PwcQiDVxPVI/yYTklf1UPHQY/
wpv27PoFpm+I9eJ01b1buBuSBBCezrrnXQHdKa+6Hsu9KwrAnKlK79RdpLWR6LFv
1OuD6iMRKTqG5EAfu4Nz/c/9sp9BMIoIqFtQ551dndGVy3agua46LpFAFkAhCsf8
g/mDhBdEx8cYbe91RvxqFphLzG+y0oQMdppRCmKQC++dG6Y1gVtrGE64xCjh2j/5
dONg4UH/IGw2Dv5WNeFcoiEMt+LMJzEjYjyeXizpxdOAm6ofGlh51+ZB9lgXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU+okP3BO9k3CYNzuGi7TDFrSkEaAwHwYDVR0j
BBgwFoAU7QX/liwSQLLozGi06kHRh8VQlZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkM4MUUzQzhCRkMwMjhFRkFDRjA4NjE0OTUxRkQwREI5
QTg2MjMyQ0MyNUNGOEI2MDZCQTcwNzVENjA2M0Y1LzAvRUQwNUZGOTYyQzEyNDBC
MkU4Q0M2OEI0RUE0MUQxODdDNTUwOTU5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDA1RkY5NjJDMTI0MEIyRThD
QzY4QjRFQTQxRDE4N0M1NTA5NTkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJDODFFM0M4QkZDMDI4RUZBQ0YwODYxNDk1MUZEMERCOUE4NjIzMkND
MjVDRjhCNjA2QkE3MDc1RDYwNjNGNS8wLzMyMzAzMDJlMzUzMDJlMzEzNzMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM0MzAzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyDKq
MA0GCSqGSIb3DQEBCwUAA4IBAQBtXpJ9/PkZQL/0OepjviPsNEMURgZJDylKYwOo
t64aeJFit+yYXbDj7NgBaHOT09QYpUkz5uMrScVlwBHiUuBxjLh++fYu2u2F6NeS
LdI8s+ooTPFidbbIkKJ0nxhUDB8bKZqAaCzrJPn1I2xqkW+/1i+QsCJoQX9z/DOu
lVfWkyUX1oLY+fPnXzzt9f2ZUQhtZc20yg+rDc0/Dq3Kg1X0CM4IxS3prBVNdpvh
TGmFhk5glv+3NW6NWi8WZzPmxuAIcxZHJ81f1cjx16TdJICG4ZI8JW66eSgNpIjp
7mcheNE5/gCsbcyOOUTUn588WCW3gvkBAbQbCd/OfTHoHzrC
-----END CERTIFICATE-----
Generated at Wed May 13 18:11:52 2026 by rpki-client