Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3232342e302f31392d3139203d3e203130323639.roa
File:                     3137392e34322e3232342e302f31392d3139203d3e203130323639.roa (raw, json)
Hash identifier:          N3RzZ+JTUhiRKwnuT6m+3eKhnUgfDk7iNTXpcwmCJB4=
Subject key identifier:   25:35:CA:31:28:67:D8:46:1E:0C:AA:B4:39:82:68:EE:BA:82:A1:91
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       4EB5BBF83CDE44D845810702640558332D674394
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3232342e302f31392d3139203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:31 +0000
ROA not before:           Tue 05 Mar 2024 17:41:31 +0000
ROA not after:            Tue 04 Mar 2025 17:46:31 +0000
asID:                     10269
IP address blocks:        179.42.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b5:bb:f8:3c:de:44:d8:45:81:07:02:64:05:58:33:2d:67:43:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:31 2024 GMT
            Not After : Mar  4 17:46:31 2025 GMT
        Subject: CN=2535CA312867D8461E0CAAB4398268EEBA82A191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:45:d6:c3:8f:82:3f:d7:55:03:13:bc:cd:
                    98:17:e4:1e:e3:8d:4c:92:78:32:5d:69:ab:4a:65:
                    72:c4:11:dd:80:3f:6f:f1:67:35:a6:eb:0c:92:9e:
                    87:bf:8e:e7:60:44:14:5b:66:81:ae:68:36:6f:67:
                    df:3f:71:b3:d4:54:d1:7e:a0:7f:4c:87:44:72:5c:
                    78:90:ca:7c:c9:0b:f7:eb:9a:4c:bc:a8:6b:b3:a9:
                    41:7d:8b:7a:d6:ca:b8:a2:45:4d:74:c2:c4:2a:a9:
                    db:fc:7e:f4:63:bb:4c:c1:d3:89:a9:ee:3a:7d:f5:
                    dd:4d:9e:00:a7:69:c8:3b:cb:9f:48:f4:af:e2:87:
                    d0:ef:3f:1a:aa:cb:42:1a:98:8f:6f:52:16:2f:eb:
                    8e:f8:ad:11:fb:c8:50:ce:fc:c6:79:95:c1:50:8e:
                    d7:4a:d3:ec:7c:c1:d9:32:b2:4b:9b:c8:84:a8:5d:
                    2d:64:37:c2:81:9b:88:30:18:95:08:7f:47:ef:10:
                    c6:6d:90:a3:46:e1:7c:1a:27:6d:5b:f6:46:64:4f:
                    8d:8f:71:f7:5e:52:4d:c5:c8:21:7a:ad:d3:ff:d7:
                    10:84:67:9a:f0:60:b1:be:f0:8e:ea:e1:4b:84:b8:
                    30:e1:37:6f:cc:96:23:eb:07:46:8e:9b:16:b4:f9:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:35:CA:31:28:67:D8:46:1E:0C:AA:B4:39:82:68:EE:BA:82:A1:91
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3232342e302f31392d3139203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:31:47:ea:16:91:a5:78:a0:0d:82:cc:e6:ee:42:ce:ff:
         d5:f4:45:80:68:ef:29:20:bd:a3:f6:f5:15:3b:91:4e:65:95:
         7c:a6:8d:39:88:e7:4c:4f:26:20:bb:bd:41:f0:3f:a4:e0:01:
         16:e9:80:77:ef:8b:65:f6:aa:fa:c0:d0:a3:7c:43:92:a2:d2:
         34:5b:f0:f8:b2:cb:a7:56:7d:81:5c:10:af:c2:11:a9:8f:06:
         d3:e0:de:3b:27:23:49:b5:7f:51:2f:45:37:11:0d:85:ac:7e:
         ce:c1:82:8f:7c:9e:70:ad:3c:7f:ce:72:6f:99:f3:37:0e:be:
         52:f5:30:93:5e:e1:89:df:6b:24:51:07:9e:b7:b2:f6:2d:c9:
         4c:69:4c:2e:7a:b5:bb:03:25:97:8b:85:5d:ed:c7:0f:5b:e7:
         81:ad:a3:57:ec:46:3a:e7:91:36:f4:a6:cb:2c:ef:32:bb:b4:
         06:50:c3:e2:c4:69:21:19:85:a5:24:e9:33:64:aa:7b:af:de:
         8b:cb:15:b8:41:c8:79:25:64:3d:4d:67:a8:f8:fd:74:28:d8:
         7a:44:e8:3e:6c:8d:c1:96:09:7a:f0:4d:9f:49:dd:b5:ea:b2:
         65:99:00:03:58:96:da:5b:38:98:25:f1:91:f8:72:cb:db:b3:
         45:cb:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:51 2024 by rpki-client on console-ams.rpki-client.org