Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3139322e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          rfp3aYsZ6RSszUCOiwj4ngRTHI2Q/sHt4ww/JKwbO3E=
Subject key identifier:   81:37:7D:26:C5:1C:3F:9D:9E:96:71:F1:76:8B:43:CA:42:B1:C9:9D
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       116FE06827A9751EC0279DCA16E04FA4FDD816D9
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:33 +0000
ROA not before:           Tue 05 Mar 2024 17:41:33 +0000
ROA not after:            Tue 04 Mar 2025 17:46:33 +0000
asID:                     10269
IP address blocks:        200.32.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6f:e0:68:27:a9:75:1e:c0:27:9d:ca:16:e0:4f:a4:fd:d8:16:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:33 2024 GMT
            Not After : Mar  4 17:46:33 2025 GMT
        Subject: CN=81377D26C51C3F9D9E9671F1768B43CA42B1C99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:f6:6e:ef:8d:1f:63:6e:75:26:6d:f5:44:
                    db:b0:62:67:2e:f4:b5:c0:bc:5f:73:d6:79:cc:70:
                    c6:1a:07:1c:3e:49:fa:e3:23:d9:4f:ea:f7:89:dc:
                    8a:f5:6a:c4:56:37:ce:07:3d:44:ca:af:3d:6f:13:
                    0a:88:34:c8:c5:de:02:52:e7:93:24:f9:25:35:aa:
                    f6:f5:4e:d7:bf:44:00:48:88:cb:65:08:f5:32:45:
                    5c:02:f0:de:7c:61:7a:31:fa:c2:ca:04:8f:14:42:
                    34:f3:db:5a:b9:50:c3:7e:09:67:13:df:45:b4:c0:
                    f0:de:f4:f5:0a:0b:ab:83:c9:37:86:2f:e2:dd:1c:
                    a9:c0:3b:3d:01:2f:d8:d2:91:17:61:a9:08:a6:5a:
                    8e:e5:64:34:25:f2:ed:81:73:2a:51:73:87:f2:77:
                    08:86:5c:49:4e:50:bb:e6:57:14:9a:7a:a9:33:22:
                    ca:dd:51:b4:4c:53:29:e8:c5:ee:bf:bf:5f:12:19:
                    ad:38:14:9d:ae:f7:26:4e:5c:c5:4f:1e:17:40:47:
                    dd:5b:f8:57:d9:de:f9:33:1c:cb:90:f8:6f:3c:01:
                    21:e2:3e:f4:4e:95:93:48:86:82:6a:9b:13:93:45:
                    91:92:1d:79:39:f6:e8:59:eb:b7:e2:3d:4b:5d:93:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:37:7D:26:C5:1C:3F:9D:9E:96:71:F1:76:8B:43:CA:42:B1:C9:9D
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:8f:61:3a:7f:4c:b7:b7:e1:87:4b:76:e2:09:d0:85:68:
         1e:88:37:19:c1:fe:ac:8c:cf:10:ed:f5:c8:9c:f1:49:a1:d4:
         e6:3e:93:b2:53:f9:c0:b4:9a:f1:67:32:5f:44:52:81:34:2b:
         73:e3:b7:cd:04:99:16:a4:90:45:61:a6:6a:3d:e8:26:b1:ed:
         70:33:42:13:04:ed:6c:ea:f1:03:1d:28:35:a2:3e:e5:41:b9:
         30:20:79:d7:74:91:ba:d6:26:44:70:f0:9c:6e:af:75:0b:f7:
         2c:70:4b:ae:b6:60:31:b0:47:fc:b6:ff:45:cd:cc:fa:f6:35:
         be:3d:5e:d7:b0:d4:27:02:b7:8d:24:99:42:c8:a1:18:ed:53:
         65:11:d7:7c:b9:ca:89:56:bc:6d:2f:00:5a:79:75:38:8a:39:
         fc:6e:ec:d8:d9:52:b0:2e:ba:8d:e1:6c:5a:bf:da:69:68:b3:
         10:29:aa:95:2f:eb:2f:8d:05:31:7d:f2:85:d9:d3:b2:86:18:
         c9:8b:f9:7e:04:8e:dc:51:93:5a:5f:9d:35:6d:9f:85:fd:ba:
         90:9e:5f:6b:76:f1:76:2d:f8:91:1e:ba:ff:97:15:ae:3c:67:
         f8:06:e1:fb:41:4e:f5:9d:3b:c3:6c:c3:7e:2f:7b:7d:27:24:
         1c:c8:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org