Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139352e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3139352e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          c+R7sB4PnsAC0DL/el43g6XSm4xaj3mN9x/dFuV1kG0=
Subject key identifier:   CD:3E:8D:72:8E:96:C1:62:0B:9E:01:19:00:52:89:8B:8C:92:FC:F0
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       75B532991AF7B4EEDD056B2AF95121FEC8251669
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139352e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:34 +0000
ROA not before:           Tue 05 Mar 2024 17:41:34 +0000
ROA not after:            Tue 04 Mar 2025 17:46:34 +0000
asID:                     10269
IP address blocks:        200.32.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b5:32:99:1a:f7:b4:ee:dd:05:6b:2a:f9:51:21:fe:c8:25:16:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:34 2024 GMT
            Not After : Mar  4 17:46:34 2025 GMT
        Subject: CN=CD3E8D728E96C1620B9E01190052898B8C92FCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d1:5f:2c:1a:ed:ef:40:a6:1f:24:1a:3e:1f:
                    83:90:39:46:ab:6c:7f:48:33:85:78:4b:1e:fc:7a:
                    36:7a:5e:1f:c4:57:69:4d:1d:97:c8:e1:12:bd:5a:
                    70:c8:e3:0f:24:9b:12:28:8d:46:c4:50:5d:fa:17:
                    87:31:ad:80:da:62:e2:a9:b6:b6:2c:27:60:52:c6:
                    ba:e8:c7:63:5a:eb:32:37:4b:3a:30:61:26:88:5d:
                    ee:f6:8f:bd:92:fa:e1:35:5d:49:b1:e5:9f:d7:08:
                    8e:ea:64:0e:30:86:3f:f1:d0:0c:cf:14:ec:11:31:
                    0c:ac:9b:4a:b5:1a:81:17:27:3b:eb:e8:7f:eb:00:
                    20:7a:c0:f1:f9:0e:cb:a8:78:35:05:fe:be:82:9c:
                    dd:ec:17:f3:c8:1b:b0:50:b1:c4:64:3e:0a:59:54:
                    8f:42:6e:68:3b:06:f5:ec:54:2a:54:97:6a:f2:13:
                    7b:4e:f8:aa:ea:58:b0:fa:79:b5:3d:12:11:e3:04:
                    eb:fe:80:e1:33:ec:08:ef:0b:71:fe:43:87:50:62:
                    91:94:83:02:b0:3d:e5:56:d4:f0:28:01:78:90:23:
                    a2:06:ba:56:d9:a4:c6:4a:49:9a:28:90:27:77:c1:
                    af:36:1b:a9:f8:fb:40:f4:18:de:ae:e9:63:44:6f:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3E:8D:72:8E:96:C1:62:0B:9E:01:19:00:52:89:8B:8C:92:FC:F0
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139352e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:2d:12:a5:a3:6b:f4:94:d4:71:51:9e:60:85:ce:8d:73:82:
         21:2b:4d:61:63:65:76:07:c2:07:ef:e7:78:07:e3:b8:52:cf:
         b8:44:6f:b8:59:64:0c:4f:a0:7b:20:fa:74:a9:20:ec:09:9a:
         73:bc:19:18:68:60:c1:18:02:c9:55:6f:cf:d3:93:49:73:34:
         cb:19:75:7c:03:51:de:21:6e:96:b4:a6:85:c4:a9:6c:ba:80:
         6a:cc:db:aa:b9:b8:de:00:8b:82:de:f3:eb:68:07:57:d9:27:
         14:06:eb:27:d8:90:ef:81:e0:4e:8c:08:b0:93:8b:3f:0e:e6:
         6f:2c:8a:83:dc:b9:f6:8b:48:62:7e:b5:12:c1:88:0e:55:0b:
         d2:83:50:77:25:98:50:71:98:d1:7b:2a:e3:a3:b7:54:12:ec:
         7d:10:2b:d9:b0:6a:45:b0:4a:b4:5a:09:82:36:6a:67:9d:b5:
         7f:31:2d:11:e0:67:59:86:e4:ad:18:9f:f5:d9:a9:a1:fd:99:
         c0:60:95:fe:13:1f:91:d6:de:eb:2a:67:ba:c4:48:63:d7:b9:
         1f:46:2a:5b:ed:7a:5b:9e:24:2e:f7:88:0d:3f:9d:c7:fd:c7:
         67:43:12:75:6e:c7:56:11:8d:ce:d3:3e:f7:f7:fd:74:51:a1:
         8a:44:0b:c2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdbUymRr3tO7dBWsq+VEh/sglFmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBFOUE2MkI3MTg4OTg2N0JEOTM2QTA1RjA1ODc0QzBG
NDhFODQ5MjAeFw0yNDAzMDUxNzQxMzRaFw0yNTAzMDQxNzQ2MzRaMDMxMTAvBgNV
BAMTKENEM0U4RDcyOEU5NkMxNjIwQjlFMDExOTAwNTI4OThCOEM5MkZDRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI0V8sGu3vQKYfJBo+H4OQOUar
bH9IM4V4Sx78ejZ6Xh/EV2lNHZfI4RK9WnDI4w8kmxIojUbEUF36F4cxrYDaYuKp
trYsJ2BSxrrox2Na6zI3SzowYSaIXe72j72S+uE1XUmx5Z/XCI7qZA4whj/x0AzP
FOwRMQysm0q1GoEXJzvr6H/rACB6wPH5DsuoeDUF/r6CnN3sF/PIG7BQscRkPgpZ
VI9Cbmg7BvXsVCpUl2ryE3tO+KrqWLD6ebU9EhHjBOv+gOEz7AjvC3H+Q4dQYpGU
gwKwPeVW1PAoAXiQI6IGulbZpMZKSZookCd3wa82G6n4+0D0GN6u6WNEb8WnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzT6Nco6WwWILngEZAFKJi4yS/PAwHwYDVR0j
BBgwFoAUUOmmK3GImGe9k2oF8Fh0wPSOhJIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDFERTVFQTAxNDU2RjM2NTIwQUFFRTQzNjM4MDVFMDY5
QjcxMkVDRkM3QzE1N0EzOTlCNTk3RkYxQTgyNEUxLzAvNTBFOUE2MkI3MTg4OTg2
N0JEOTM2QTA1RjA1ODc0QzBGNDhFODQ5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MEU5QTYyQjcxODg5ODY3QkQ5
MzZBMDVGMDU4NzRDMEY0OEU4NDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxREU1RUEwMTQ1NkYzNjUyMEFBRUU0MzYzODA1RTA2OUI3MTJFQ0ZD
N0MxNTdBMzk5QjU5N0ZGMUE4MjRFMS8wLzMyMzAzMDJlMzMzMjJlMzEzOTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMggwzAN
BgkqhkiG9w0BAQsFAAOCAQEAIC0SpaNr9JTUcVGeYIXOjXOCIStNYWNldgfCB+/n
eAfjuFLPuERvuFlkDE+geyD6dKkg7Amac7wZGGhgwRgCyVVvz9OTSXM0yxl1fANR
3iFulrSmhcSpbLqAaszbqrm43gCLgt7z62gHV9knFAbrJ9iQ74HgTowIsJOLPw7m
byyKg9y59otIYn61EsGIDlUL0oNQdyWYUHGY0Xsq46O3VBLsfRAr2bBqRbBKtFoJ
gjZqZ521fzEtEeBnWYbkrRif9dmpof2ZwGCV/hMfkdbe6ypnusRIY9e5H0YqW+16
W54kLveIDT+dx/3HZ0MSdW7HVhGNztM+9/f9dFGhikQLwg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org