Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3230382e302f32302d3230203d3e203130323639.roa
File:                     3137392e34322e3230382e302f32302d3230203d3e203130323639.roa (raw, json)
Hash identifier:          bT6KugdXx8rblfRqU/y1tN1ervpGOMY4L1AdLnjAF1c=
Subject key identifier:   01:8E:F4:3D:C1:8C:5F:79:38:0C:0B:7C:89:B4:73:6F:F0:61:FA:C7
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       58CBB0AA5F01B02D040BD3B949F11884C107516B
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3230382e302f32302d3230203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:20 +0000
ROA not before:           Tue 04 Feb 2025 18:07:20 +0000
ROA not after:            Tue 03 Feb 2026 18:12:20 +0000
asID:                     10269
IP address blocks:        179.42.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cb:b0:aa:5f:01:b0:2d:04:0b:d3:b9:49:f1:18:84:c1:07:51:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:20 2025 GMT
            Not After : Feb  3 18:12:20 2026 GMT
        Subject: CN=018EF43DC18C5F79380C0B7C89B4736FF061FAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:9d:f3:f4:75:dc:3f:21:d6:3a:43:ba:93:
                    4a:4e:e3:b8:fd:db:9a:27:f8:94:5c:e0:14:47:fe:
                    08:67:ae:d1:43:47:15:f4:92:38:cc:b5:27:21:a1:
                    22:9e:57:07:9d:5c:bb:da:dd:27:e9:23:b6:0e:74:
                    07:56:e5:ab:bd:c2:5f:8c:7c:96:ee:45:ac:b5:19:
                    80:93:5b:34:21:96:26:49:9a:e2:50:2a:c1:1b:b1:
                    6f:46:ef:67:da:1d:52:d1:c3:be:47:79:09:7d:82:
                    3f:9f:a3:da:71:c7:ca:10:59:51:19:88:13:54:c5:
                    d5:3f:bc:b6:60:3d:f0:66:9d:9c:d9:2a:c1:8b:0b:
                    d8:fa:96:c0:95:f8:30:e5:71:bb:23:00:ff:8a:d0:
                    d8:9a:bb:b6:c8:29:69:ca:31:24:b2:a9:21:9b:0d:
                    b6:68:8f:99:23:9b:65:ec:01:c6:05:05:53:39:7c:
                    78:e1:c6:62:c5:bf:9e:f3:6e:60:65:97:1d:8a:a7:
                    7f:94:3a:0d:d0:07:74:a7:b5:08:5a:e5:40:b6:cf:
                    36:7b:8b:28:0d:35:1a:6d:32:5b:55:93:e2:4d:51:
                    f2:e3:d7:03:c3:ed:d3:13:92:c1:bd:38:ee:2a:82:
                    e1:77:1a:8a:02:16:f2:33:77:f4:9d:cb:f8:5b:1a:
                    f3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:F4:3D:C1:8C:5F:79:38:0C:0B:7C:89:B4:73:6F:F0:61:FA:C7
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3230382e302f32302d3230203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:b2:41:25:59:93:49:d9:c2:b9:f8:50:90:c0:a5:df:5a:dc:
         43:bd:bc:49:6f:cb:2a:cc:62:ba:fc:72:4b:e5:96:c3:c7:76:
         82:0f:c3:db:77:67:f0:fc:00:04:4f:fa:ec:dd:bf:50:a7:da:
         ca:e5:fd:a3:9f:e0:72:50:e1:53:12:91:56:8b:dc:90:1e:48:
         98:57:a0:c5:7d:5a:ce:48:a0:4a:13:19:ab:7c:81:1d:c8:1c:
         44:d3:5e:c2:33:4a:f6:e8:c4:71:6d:71:dd:e7:c5:16:f4:85:
         25:73:f0:3e:4e:d4:37:9f:4d:2f:f7:62:b3:e0:1b:ca:a0:d7:
         bc:39:1b:e8:99:44:75:c4:74:fd:ce:d1:13:23:13:b3:8c:dd:
         6a:97:16:b8:c1:b7:6d:e5:6b:01:fa:18:17:4d:f6:a0:d6:1b:
         2a:fb:66:74:cd:05:82:f5:58:b7:eb:53:13:65:c3:de:91:b2:
         06:d5:08:4e:e6:11:4e:80:6b:91:0b:24:be:7c:28:4f:18:6e:
         9a:41:7b:68:bd:c9:f7:1a:fe:67:8b:f7:a2:44:2a:22:af:38:
         e6:ff:7b:9e:3b:2c:79:68:e9:00:49:85:b8:f2:68:62:46:1d:
         a4:19:89:29:9e:12:c5:d9:ff:fd:e4:fb:2f:5d:be:a7:64:46:
         d7:77:bf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:05 2025 by rpki-client