Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3139322e302f32302d3230203d3e203130323639.roa
File:                     3137392e34322e3139322e302f32302d3230203d3e203130323639.roa (raw, json)
Hash identifier:          TBwhtxeEGjQDbCfpPr2Y6J2qkUMyvB7s/OKZGVUwpEY=
Subject key identifier:   45:13:DC:72:E2:4A:AA:89:8C:55:62:2A:BF:78:22:F5:67:47:03:78
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       2FE1948EA8FA4190AD7B227F9C3C4558EBFDBFDE
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3139322e302f32302d3230203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:37 +0000
ROA not before:           Tue 05 Mar 2024 17:41:37 +0000
ROA not after:            Tue 04 Mar 2025 17:46:37 +0000
asID:                     10269
IP address blocks:        179.42.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e1:94:8e:a8:fa:41:90:ad:7b:22:7f:9c:3c:45:58:eb:fd:bf:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:37 2024 GMT
            Not After : Mar  4 17:46:37 2025 GMT
        Subject: CN=4513DC72E24AAA898C55622ABF7822F567470378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:fb:34:11:87:5e:24:a2:2c:d3:c0:67:04:
                    b3:ba:57:4b:d3:cb:3d:ba:d1:80:18:ee:db:f5:8c:
                    5e:15:18:63:4f:3e:7a:fe:85:a1:f5:13:27:df:5b:
                    80:4d:9d:16:5d:00:c7:f8:0b:42:1f:66:5c:ba:a2:
                    26:e4:2f:b7:d3:68:76:9e:b6:a3:6f:22:51:5b:7b:
                    9b:4c:8a:9e:39:17:1b:ca:a1:56:8e:03:e0:ac:7e:
                    24:8c:3b:67:41:6b:b7:be:16:71:90:66:23:42:90:
                    07:2c:c4:d2:6d:5c:05:dd:9a:92:a5:30:df:34:15:
                    d7:c4:09:94:a4:76:b3:7e:ac:62:39:c9:22:d5:4c:
                    25:de:4a:d0:01:b5:7d:85:17:89:e9:46:eb:45:d1:
                    0d:ec:17:c8:0f:ff:9a:86:63:14:6e:b7:f8:e8:c8:
                    06:bf:70:4a:a1:35:87:1e:70:10:c4:60:ba:e7:09:
                    d0:33:98:7f:98:69:c8:8f:50:48:8d:1a:13:74:6c:
                    d1:16:51:fc:70:f6:e7:42:56:c4:0f:f1:95:cd:14:
                    16:45:57:e3:d2:46:cb:a7:1d:41:c3:17:31:65:d3:
                    5c:e7:22:eb:0b:bd:b8:a8:7d:80:6c:c9:e4:00:5c:
                    f6:94:2d:20:80:11:4b:8d:b0:30:c7:11:43:c1:62:
                    99:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:13:DC:72:E2:4A:AA:89:8C:55:62:2A:BF:78:22:F5:67:47:03:78
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3139322e302f32302d3230203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:d3:fc:38:42:30:04:4b:7c:0b:f1:fb:d6:56:c9:df:3a:34:
         ce:93:06:02:57:4b:6a:15:69:94:7a:86:04:15:8a:66:7c:e0:
         79:bc:9f:2a:b7:86:39:05:32:16:24:ea:7f:a7:f6:f7:7f:d8:
         25:c3:a2:56:ee:af:fa:45:48:f9:a1:e3:5f:87:96:de:5e:f7:
         5d:10:61:0a:88:45:84:84:0f:3e:5e:30:2e:36:ed:23:dc:c8:
         74:2b:ec:05:a3:69:ff:de:41:73:d9:60:6d:7d:a5:2b:53:98:
         e6:2b:ab:59:c4:3d:8b:14:10:1d:9b:6a:33:a1:2f:1b:35:8c:
         53:1e:4a:ba:84:37:5f:1b:60:9f:e9:85:77:ce:30:cf:17:32:
         ce:af:66:a5:d1:58:14:4d:8b:f9:74:a1:76:84:07:7a:b2:55:
         4f:36:6e:06:64:66:ff:bd:e0:5b:2f:fb:33:1a:53:60:34:58:
         e9:e0:7c:bb:b6:e7:e3:e4:ef:54:1a:b4:06:c2:bd:b8:b0:d5:
         f8:b0:51:a9:38:5a:32:aa:99:e1:ea:8e:65:42:72:d4:e7:55:
         e5:bf:24:62:6a:1a:e2:6d:4f:ea:52:5d:44:16:cf:3b:59:c9:
         e5:6b:09:c5:05:b2:7f:8a:df:b2:df:6d:29:c8:fe:65:f2:fb:
         29:5c:f1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:35 2024 by rpki-client on console-ams.rpki-client.org