Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f31382d3138203d3e203130323639.roa
File:                     3230302e33322e3139322e302f31382d3138203d3e203130323639.roa (raw, json)
Hash identifier:          sfKZZ3avxn2kDKjlFJ7CAk5Ub/hQUSUEOFNdIvu+dGQ=
Subject key identifier:   D5:1A:BF:48:BB:32:C2:68:FB:77:46:E4:36:8C:C2:27:D8:F9:A1:8B
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       24752F271C1F2C643C312CF6464050B56CB024DF
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f31382d3138203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:36 +0000
ROA not before:           Tue 05 Mar 2024 17:41:36 +0000
ROA not after:            Tue 04 Mar 2025 17:46:36 +0000
asID:                     10269
IP address blocks:        200.32.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Jun 2024 10:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:75:2f:27:1c:1f:2c:64:3c:31:2c:f6:46:40:50:b5:6c:b0:24:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:36 2024 GMT
            Not After : Mar  4 17:46:36 2025 GMT
        Subject: CN=D51ABF48BB32C268FB7746E4368CC227D8F9A18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:c8:b2:f4:48:5a:c5:c4:0d:5d:40:41:0e:
                    d4:44:53:a9:06:5a:5b:c2:8f:6c:bf:24:3b:09:c2:
                    89:48:9a:06:86:a1:bd:a7:b3:77:2f:4b:8d:16:a2:
                    c2:d1:6e:e6:d0:70:75:ce:9f:b0:4c:fc:fa:40:9a:
                    41:41:42:2d:de:80:20:bf:72:1f:a5:6b:20:13:cb:
                    e9:d2:62:af:21:30:df:fe:88:19:bd:7b:c5:2d:87:
                    0d:ca:fd:64:ae:ab:49:96:82:ae:60:6b:ac:d2:e4:
                    a9:70:c4:68:47:f8:78:22:a1:d8:d1:8f:9d:b3:20:
                    73:3b:83:6f:d4:8a:98:dc:c9:92:6a:0d:bb:f7:7c:
                    b7:97:c8:cb:f9:f9:12:54:b2:96:81:25:a2:2d:ad:
                    0c:2c:6c:64:38:eb:9c:49:be:f5:fd:53:68:51:52:
                    31:25:b1:fa:34:af:c4:57:85:ae:34:50:d7:98:ad:
                    43:d9:6a:68:23:ff:56:84:ee:fc:16:3d:cc:de:34:
                    2e:30:9b:76:68:f2:4b:e4:69:64:68:de:6a:56:99:
                    0f:7a:a0:2f:de:eb:0e:7c:a9:1e:fb:e5:56:bf:01:
                    09:0c:96:3b:8a:f9:0e:83:58:19:40:d0:d2:60:a7:
                    a6:91:d5:29:e9:19:32:84:c8:a4:7b:6d:24:9b:d2:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1A:BF:48:BB:32:C2:68:FB:77:46:E4:36:8C:C2:27:D8:F9:A1:8B
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f31382d3138203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:01:38:66:90:bc:58:4b:b1:bf:4b:20:d3:5c:db:d1:3c:4e:
         3c:6e:e8:1d:32:87:f5:4f:47:62:d4:cf:18:54:ad:12:86:07:
         8f:0b:2e:bc:89:f3:1c:5c:a9:c2:4d:f2:f8:a2:01:63:42:d3:
         53:c9:3c:f6:c7:02:4c:e6:18:68:0e:85:d4:ba:05:c5:15:4c:
         36:fb:90:f8:89:23:d5:0b:b5:0e:01:0a:8e:ba:a7:54:2d:9c:
         ea:d7:69:5d:07:85:90:4e:ca:8f:b8:af:4f:d9:23:14:49:23:
         20:b9:5c:5d:8f:d9:fa:fe:5b:94:74:0a:07:07:f4:bc:c5:e0:
         00:4f:f7:02:a9:1e:d1:40:79:77:18:70:ed:e3:18:49:d0:a9:
         94:f2:41:0b:77:71:61:0b:d6:f9:4d:2a:62:17:31:22:49:14:
         4d:e3:74:01:c0:b7:e3:0a:d6:f3:83:e3:3e:6c:54:68:31:30:
         f6:cd:61:11:73:4c:47:c5:51:04:c9:6a:cf:8c:cb:23:4b:53:
         be:bf:23:60:d8:ff:d0:49:80:8b:ee:23:a3:f8:62:2b:1f:c9:
         5c:6e:6c:4e:89:31:71:f8:c1:77:40:0c:0b:cc:b0:5d:2f:b2:
         14:e5:c4:8f:2b:8c:f2:1f:d0:74:d7:92:5e:f3:f4:a5:10:c7:
         63:c9:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:53:23 2024 by rpki-client on console-fra.rpki-client.org