Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139352e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3139352e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          yTvLStEsQtWhhJ5we7+uC+i1A/aNG4BVwBptNU0pYK4=
Subject key identifier:   2B:A7:FF:58:F0:1D:23:E9:85:1C:5A:EB:FA:03:2A:D9:4C:55:63:0E
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       6C4220AFDF19D0FEC809CAF80B875EB8AB214CDC
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139352e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:15 +0000
ROA not before:           Tue 04 Feb 2025 18:07:15 +0000
ROA not after:            Tue 03 Feb 2026 18:12:15 +0000
asID:                     10269
IP address blocks:        200.32.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:42:20:af:df:19:d0:fe:c8:09:ca:f8:0b:87:5e:b8:ab:21:4c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:15 2025 GMT
            Not After : Feb  3 18:12:15 2026 GMT
        Subject: CN=2BA7FF58F01D23E9851C5AEBFA032AD94C55630E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9e:d5:6a:c3:72:99:29:15:78:76:d2:f7:79:
                    c0:14:99:06:fe:8c:62:47:fa:65:57:9a:0b:52:58:
                    e4:b3:79:16:a3:16:15:c5:e7:48:54:57:d1:db:46:
                    bd:ba:79:17:4d:74:79:4e:ec:42:4f:df:70:52:30:
                    f7:03:9b:f8:16:a2:c6:9d:fe:98:0d:aa:bd:b9:31:
                    dc:38:76:0c:b0:e7:69:e9:42:f0:b7:e1:d8:b3:a9:
                    e3:51:49:78:68:90:7f:40:64:9b:ba:a9:7c:f5:ad:
                    f3:ab:3b:5a:f3:0e:43:97:4a:d5:47:12:ea:cd:a8:
                    98:5e:83:e2:5a:a4:83:13:fb:bd:73:9d:cf:9b:8d:
                    7d:7e:b6:9b:ca:1b:82:2b:5f:0e:72:ec:79:90:0a:
                    35:87:46:fb:97:4c:1f:a2:3d:32:f5:22:af:7d:36:
                    3b:f9:6f:71:a9:da:cf:c2:6a:a6:70:42:3c:2e:88:
                    08:0c:f0:d9:13:75:65:88:9f:8f:27:35:b5:19:aa:
                    c3:2d:78:1f:8a:0c:fe:02:5b:f0:c5:0d:c9:26:7f:
                    d5:33:29:69:61:b3:f5:76:c0:5f:5f:9d:7f:6a:2c:
                    eb:b2:97:04:b8:21:2f:b2:b6:04:73:d9:9b:65:5e:
                    71:6d:fc:78:bb:e2:0c:4f:5c:ec:50:13:53:cd:97:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A7:FF:58:F0:1D:23:E9:85:1C:5A:EB:FA:03:2A:D9:4C:55:63:0E
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139352e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9c:4b:8a:89:e1:f5:8b:9d:1f:3c:ff:ab:0a:76:15:f4:45:
         4d:ad:df:0e:13:95:ac:26:19:1e:3d:08:05:69:74:77:b0:7f:
         51:a3:47:8a:d8:2c:69:71:4d:11:8d:2d:bf:7e:55:ba:f4:84:
         25:4e:8d:92:f2:4d:4d:7b:a1:40:08:6a:8e:51:27:3c:5b:c2:
         f5:b7:49:ed:89:b0:9d:dc:62:2b:bf:54:96:ef:77:26:39:57:
         33:1d:09:ac:34:28:49:5f:3d:27:05:c3:d8:f6:48:06:f2:2b:
         e4:94:00:a2:b6:79:64:68:4d:0d:f3:b0:02:7d:49:ac:83:11:
         6a:58:bc:ff:a1:34:35:bd:68:db:e2:27:d6:02:36:42:e8:aa:
         44:ee:79:f5:d9:6e:62:c8:b4:7f:f1:17:1b:6c:dd:c6:f4:61:
         52:d7:82:fa:7a:d0:64:e1:bf:32:10:b5:05:b6:6f:a0:23:ea:
         7d:94:44:ff:03:ce:c1:71:37:2d:5c:6d:d6:c3:0b:9d:8c:9d:
         71:50:d7:d5:ff:f1:11:85:b9:e6:f5:9e:13:0d:d9:da:10:19:
         ff:2e:b6:b5:f1:2b:06:94:a2:51:79:76:33:1b:d2:cd:e6:63:
         48:5d:eb:8c:31:34:73:e6:4a:04:cd:f9:4e:1e:0b:3e:80:3d:
         0d:a7:f4:1b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbEIgr98Z0P7ICcr4C4deuKshTNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBFOUE2MkI3MTg4OTg2N0JEOTM2QTA1RjA1ODc0QzBG
NDhFODQ5MjAeFw0yNTAyMDQxODA3MTVaFw0yNjAyMDMxODEyMTVaMDMxMTAvBgNV
BAMTKDJCQTdGRjU4RjAxRDIzRTk4NTFDNUFFQkZBMDMyQUQ5NEM1NTYzMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlntVqw3KZKRV4dtL3ecAUmQb+
jGJH+mVXmgtSWOSzeRajFhXF50hUV9HbRr26eRdNdHlO7EJP33BSMPcDm/gWosad
/pgNqr25Mdw4dgyw52npQvC34dizqeNRSXhokH9AZJu6qXz1rfOrO1rzDkOXStVH
EurNqJheg+JapIMT+71znc+bjX1+tpvKG4IrXw5y7HmQCjWHRvuXTB+iPTL1Iq99
Njv5b3Gp2s/CaqZwQjwuiAgM8NkTdWWIn48nNbUZqsMteB+KDP4CW/DFDckmf9Uz
KWlhs/V2wF9fnX9qLOuylwS4IS+ytgRz2ZtlXnFt/Hi74gxPXOxQE1PNl9+tAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUK6f/WPAdI+mFHFrr+gMq2UxVYw4wHwYDVR0j
BBgwFoAUUOmmK3GImGe9k2oF8Fh0wPSOhJIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDFERTVFQTAxNDU2RjM2NTIwQUFFRTQzNjM4MDVFMDY5
QjcxMkVDRkM3QzE1N0EzOTlCNTk3RkYxQTgyNEUxLzAvNTBFOUE2MkI3MTg4OTg2
N0JEOTM2QTA1RjA1ODc0QzBGNDhFODQ5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MEU5QTYyQjcxODg5ODY3QkQ5
MzZBMDVGMDU4NzRDMEY0OEU4NDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxREU1RUEwMTQ1NkYzNjUyMEFBRUU0MzYzODA1RTA2OUI3MTJFQ0ZD
N0MxNTdBMzk5QjU5N0ZGMUE4MjRFMS8wLzMyMzAzMDJlMzMzMjJlMzEzOTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMggwzAN
BgkqhkiG9w0BAQsFAAOCAQEAOJxLionh9YudHzz/qwp2FfRFTa3fDhOVrCYZHj0I
BWl0d7B/UaNHitgsaXFNEY0tv35VuvSEJU6NkvJNTXuhQAhqjlEnPFvC9bdJ7Ymw
ndxiK79Ulu93JjlXMx0JrDQoSV89JwXD2PZIBvIr5JQAorZ5ZGhNDfOwAn1JrIMR
ali8/6E0Nb1o2+In1gI2QuiqRO559dluYsi0f/EXG2zdxvRhUteC+nrQZOG/MhC1
BbZvoCPqfZRE/wPOwXE3LVxt1sMLnYydcVDX1f/xEYW55vWeEw3Z2hAZ/y62tfEr
BpSiUXl2MxvSzeZjSF3rjDE0c+ZKBM35Th4LPoA9Daf0Gw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:06 2025 by rpki-client