Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137302e302e3138302e302f32322d3234203d3e203130323639.roa
File:                     3137302e302e3138302e302f32322d3234203d3e203130323639.roa (raw, json)
Hash identifier:          sNgQh954XnliqYKqElsfDDXmG3Bukpe9pmnBsWLaxqU=
Subject key identifier:   EC:93:68:F3:4F:6C:53:6D:3D:F2:A6:BE:D1:79:6E:EC:D3:7C:7E:20
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       1EA78FF1CB00B97BC044D1CD876290B7E8553C81
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137302e302e3138302e302f32322d3234203d3e203130323639.roa
Signing time:             Thu 05 Sep 2024 19:35:01 +0000
ROA not before:           Thu 05 Sep 2024 19:30:01 +0000
ROA not after:            Thu 04 Sep 2025 19:35:01 +0000
asID:                     10269
IP address blocks:        170.0.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a7:8f:f1:cb:00:b9:7b:c0:44:d1:cd:87:62:90:b7:e8:55:3c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Sep  5 19:30:01 2024 GMT
            Not After : Sep  4 19:35:01 2025 GMT
        Subject: CN=EC9368F34F6C536D3DF2A6BED1796EECD37C7E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:d8:66:8f:4c:55:5b:08:78:24:7c:83:76:
                    bb:d3:86:4d:34:63:15:7e:6b:e4:b2:e9:13:29:7b:
                    57:15:8b:bd:93:0c:42:58:43:c7:55:62:8b:3b:e5:
                    24:76:c7:81:28:10:b4:81:42:92:35:c8:61:f3:42:
                    7f:6e:5b:f3:2b:5a:bd:4a:e0:cf:37:c2:a5:ef:a4:
                    6a:22:26:fd:d4:c5:6d:f1:89:c5:27:9a:ce:4b:3c:
                    70:4b:9c:1d:36:bb:0c:a0:a6:d5:5a:e5:59:e4:84:
                    e5:31:ff:9b:38:ce:4c:6a:c9:99:42:06:f0:72:7a:
                    ae:7d:e7:e0:9e:30:bd:dc:9f:95:8d:0c:ea:ce:9f:
                    49:11:dd:d5:26:da:c8:4c:bc:e5:0e:d6:62:e5:98:
                    91:fd:0e:1e:a4:fe:a2:9a:f8:58:07:56:29:6d:fe:
                    02:45:5f:f1:21:b1:99:ab:3a:35:04:c2:ac:ab:1c:
                    08:b1:04:fe:77:39:c5:c8:6e:f4:7c:f3:e5:4d:0d:
                    f2:4e:37:2f:00:58:58:cf:a4:df:20:ab:7b:9f:f9:
                    a0:f6:7a:05:b8:90:05:73:9f:bd:61:a7:cc:96:df:
                    33:8b:54:ac:16:fc:98:bd:c5:ab:98:14:1d:f9:a5:
                    c9:70:59:f8:b3:cc:7c:13:91:cf:53:fb:d3:4e:8a:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:93:68:F3:4F:6C:53:6D:3D:F2:A6:BE:D1:79:6E:EC:D3:7C:7E:20
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137302e302e3138302e302f32322d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:b1:c6:cf:c9:24:8d:70:97:88:15:a6:37:9f:2b:27:2d:9f:
         d3:b4:2a:dc:34:e5:63:fb:b9:3d:37:cf:60:87:f0:e5:e1:fd:
         66:8a:b7:ef:c2:1a:e0:be:b2:2f:98:10:cc:42:66:d7:1b:3c:
         87:d9:1d:08:39:57:4c:9d:ac:13:76:12:16:cf:fc:5c:83:b8:
         43:65:4b:5c:ed:ab:f1:71:5d:7f:db:ea:c8:67:7a:09:99:a3:
         6f:f7:5a:9c:53:14:cd:b5:be:5e:c2:17:dd:74:60:1b:25:38:
         47:e0:87:7e:11:a5:ed:5a:a3:cd:e5:03:91:5e:a6:10:8f:ec:
         e3:5c:24:f5:83:9c:9f:2c:10:d4:ac:0a:6f:90:72:e6:d3:ad:
         f4:6c:4d:34:15:51:64:90:2c:3e:41:c5:de:63:59:2f:fa:9e:
         18:30:ac:1c:c4:70:da:1a:29:5d:ff:91:de:e6:b3:42:83:1b:
         ae:25:37:c1:15:06:e8:1d:f0:61:60:60:d2:ff:ae:81:e2:1b:
         3b:c3:82:6a:8e:e4:c4:8e:fa:c6:b1:d9:dc:4a:76:23:2a:ea:
         50:2e:bc:26:7c:16:5f:db:ef:23:2f:57:a8:44:84:2f:56:f4:
         bc:e0:29:24:8d:d5:c5:30:02:cd:04:65:09:8d:ed:b9:48:43:
         0f:18:c8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:51 2024 by rpki-client on console-ams.rpki-client.org