Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/3133302e3235302e3232382e302f32322d3234203d3e20323730303335.roa
File:                     3133302e3235302e3232382e302f32322d3234203d3e20323730303335.roa (raw, json)
Hash identifier:          Xl345Q8qKlKqn4NyDMpq0u38ykJaj0rPeAxxFy1xon8=
Subject key identifier:   50:24:6F:39:75:40:06:B9:A5:C9:33:EF:CA:BC:78:E9:8F:87:04:9E
Certificate issuer:       /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
Certificate serial:       5486247C81BC141EBB6A18C59C2363239289302C
Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/3133302e3235302e3232382e302f32322d3234203d3e20323730303335.roa
Signing time:             Tue 05 Mar 2024 18:06:48 +0000
ROA not before:           Tue 05 Mar 2024 18:01:48 +0000
ROA not after:            Tue 04 Mar 2025 18:06:48 +0000
asID:                     270035
IP address blocks:        130.250.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:86:24:7c:81:bc:14:1e:bb:6a:18:c5:9c:23:63:23:92:89:30:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
        Validity
            Not Before: Mar  5 18:01:48 2024 GMT
            Not After : Mar  4 18:06:48 2025 GMT
        Subject: CN=50246F39754006B9A5C933EFCABC78E98F87049E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:dd:83:87:c2:5b:07:6b:66:d3:ca:0b:99:
                    7c:cb:0f:99:4b:f8:25:43:b5:1a:af:41:6a:c2:6a:
                    c2:30:f2:85:70:37:fa:15:d2:1e:42:93:77:94:d8:
                    bf:ae:7e:5b:c5:8c:02:30:07:4e:d7:d5:52:fb:c9:
                    9f:54:ec:a2:6b:3a:5d:76:2a:67:c5:3e:a3:5a:0f:
                    4e:6c:9a:04:46:e6:bb:fb:d7:9c:ef:6c:bf:95:7e:
                    71:c3:ee:2d:20:d0:ed:2c:ad:67:5a:86:70:e0:2b:
                    ee:96:00:b1:ab:7c:70:af:e8:14:3f:1c:e5:fd:c2:
                    47:1c:92:39:6a:37:0e:8e:69:74:8e:01:9c:d9:c0:
                    ef:50:79:7e:f5:fa:83:76:07:55:b2:9c:56:f2:0f:
                    48:4f:02:65:9e:a4:92:81:a6:a5:a1:16:fb:d5:38:
                    de:d6:ab:c2:55:c7:04:ff:d5:7d:a8:f1:da:47:b7:
                    5e:f6:78:08:2e:08:5a:84:60:de:ee:3e:bb:a8:32:
                    fb:9c:07:d3:e5:ff:e2:1f:f3:ca:73:81:4c:cb:b2:
                    dc:c0:eb:1c:70:32:d2:a3:7f:ac:ef:48:10:f3:80:
                    d0:79:1b:62:0f:da:1d:2e:53:35:1c:1f:8b:01:38:
                    05:dd:5a:ed:fc:e3:95:76:d9:f6:7e:2e:9c:48:77:
                    8e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:24:6F:39:75:40:06:B9:A5:C9:33:EF:CA:BC:78:E9:8F:87:04:9E
            X509v3 Authority Key Identifier:
                keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/3133302e3235302e3232382e302f32322d3234203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:22:51:56:52:b6:a6:00:91:32:90:c9:e3:6a:0f:31:cb:d8:
         ed:b2:67:3b:8e:f0:f5:f6:8f:82:b2:1b:08:a5:d1:1d:27:f9:
         58:27:d3:0e:71:5f:53:5d:b1:2c:8b:dd:b1:83:f5:56:28:03:
         73:8c:40:2f:f2:47:3f:c1:66:de:b3:a8:71:22:f2:ca:3a:a6:
         58:66:88:02:31:4f:b7:c0:c4:30:54:b1:6a:e1:ab:94:be:2b:
         1a:c7:42:69:97:6f:1d:72:12:60:c1:d6:4b:c5:ea:34:61:07:
         7a:91:c1:9a:2e:3d:36:d2:e5:0a:9d:86:fb:96:64:1c:f8:b4:
         db:9a:cc:1c:7c:a1:16:4c:f6:9c:19:6c:62:d4:8c:cd:b6:28:
         08:85:57:66:5f:91:ba:e3:51:6f:88:22:ec:c0:e5:25:cd:b9:
         76:25:1d:d5:1e:9a:83:27:9a:3f:ce:10:ba:3f:57:5a:35:0f:
         26:35:ce:7d:28:92:a2:26:ce:71:30:56:8d:ff:42:c0:70:78:
         ed:ab:d4:4a:ee:0f:43:92:06:d3:31:69:2d:5f:47:96:b4:b9:
         ee:2e:e1:4e:03:fe:9c:07:2e:77:eb:e4:88:ed:c5:e8:6a:7b:
         75:62:50:d9:0d:91:52:69:51:90:1b:9a:5f:3b:69:40:6b:a4:
         da:1a:da:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 08:02:39 2024 by rpki-client on console-ams.rpki-client.org