Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3139322e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          Ub6hz90uaQITNbNS/8ogXbVGBrbzP1l58EUvCo4MpMQ=
Subject key identifier:   E2:98:67:87:57:D3:A6:27:45:24:B0:54:AA:84:E1:6D:EA:53:D9:EA
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       1FC587968D84E84CB53CB454E31EC7CB487BF047
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:23 +0000
ROA not before:           Tue 04 Feb 2025 18:07:23 +0000
ROA not after:            Tue 03 Feb 2026 18:12:23 +0000
asID:                     10269
IP address blocks:        200.32.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c5:87:96:8d:84:e8:4c:b5:3c:b4:54:e3:1e:c7:cb:48:7b:f0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:23 2025 GMT
            Not After : Feb  3 18:12:23 2026 GMT
        Subject: CN=E298678757D3A6274524B054AA84E16DEA53D9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:eb:a4:31:44:5d:19:59:b6:a9:80:5d:c3:
                    72:d3:30:b5:e2:09:4d:00:1f:2d:b7:f5:e5:29:ad:
                    6d:8b:55:db:32:f2:7a:3d:26:8b:1a:16:66:81:10:
                    cb:af:df:6c:1c:db:75:aa:63:bb:ba:db:db:e5:1d:
                    1f:14:d5:4a:4a:c8:01:89:e3:da:d0:56:88:95:14:
                    fa:78:22:5d:af:16:5a:d0:79:c2:b7:ee:25:3f:62:
                    7c:98:1b:e6:a3:76:af:48:be:aa:82:84:9e:2b:3c:
                    26:cd:ae:21:8b:e1:95:2f:3d:07:7d:c1:55:9f:f7:
                    f0:59:d8:09:48:2f:2d:89:4e:04:3b:78:49:43:e3:
                    1a:4a:19:4b:54:a1:de:6a:ad:5b:ab:e6:f1:31:86:
                    d9:85:53:27:41:98:72:48:d3:5d:b8:bc:ef:45:31:
                    1a:78:80:ac:2c:dc:45:94:9a:cc:d0:50:2e:30:81:
                    c6:3b:6b:78:ef:63:e7:3a:a2:d5:38:4b:4b:e2:a1:
                    be:6e:85:1c:f4:a1:86:e9:9c:4a:9d:bc:0c:02:b6:
                    a5:82:69:63:92:14:4d:ab:9e:72:e9:b1:25:7f:99:
                    6e:1c:50:bf:55:98:2a:cc:5b:05:19:d9:19:60:74:
                    c1:7a:fd:23:6d:09:67:75:47:ae:0f:c6:7b:bd:bc:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:98:67:87:57:D3:A6:27:45:24:B0:54:AA:84:E1:6D:EA:53:D9:EA
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:d0:27:2c:75:44:66:63:56:ad:f1:8c:39:01:fe:9f:51:
         81:65:92:2e:28:10:4f:d8:16:d4:b9:2a:2d:e6:cc:25:90:a1:
         50:20:4e:97:da:2a:13:f5:55:81:6f:c3:6f:0f:4c:92:9b:1c:
         9d:be:5a:d8:98:b1:d2:71:16:82:72:40:c2:4a:2b:12:3f:70:
         97:d7:3e:6a:cf:11:60:dc:78:a2:74:4d:fb:31:5a:4b:fb:4f:
         6b:bb:33:8f:ad:fc:c5:06:72:96:a1:57:79:f7:46:12:6a:95:
         c4:0c:72:ad:a5:48:a9:73:12:3b:88:36:d3:b4:fe:0c:2c:41:
         82:76:40:7f:1d:35:db:e9:50:d7:e4:f9:52:f1:9e:7d:de:a4:
         4a:06:7c:35:4e:25:92:ed:f7:c4:e9:a9:fb:46:41:05:4f:52:
         ed:8b:c5:cc:6d:9e:a8:55:f1:5d:90:3e:a1:ef:7d:64:43:90:
         e5:50:c4:f0:46:ea:e2:0a:de:72:a5:11:56:74:3e:df:34:a3:
         06:44:f6:04:e6:e5:83:82:54:1e:3e:11:47:0e:31:39:2f:f5:
         ce:28:77:5d:26:08:31:cb:3f:47:4b:6b:98:9d:ac:9c:8d:3a:
         30:49:be:b6:9d:3c:ec:5f:df:30:aa:a9:82:17:c2:61:d8:31:
         27:38:fe:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:41 2025 by rpki-client