Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3230332e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3230332e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          ECbtOqe0j8p/xbQJZOtui9ZXnDM5+1RorLKbSwlSs2s=
Subject key identifier:   CD:D1:D5:A8:20:FC:76:1B:8B:1E:89:FF:90:01:ED:E6:2A:6B:91:69
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       32D2F68A6D06D752427FA59FF7060E238886B545
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3230332e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:34 +0000
ROA not before:           Tue 05 Mar 2024 17:41:34 +0000
ROA not after:            Tue 04 Mar 2025 17:46:34 +0000
asID:                     10269
IP address blocks:        200.32.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d2:f6:8a:6d:06:d7:52:42:7f:a5:9f:f7:06:0e:23:88:86:b5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:34 2024 GMT
            Not After : Mar  4 17:46:34 2025 GMT
        Subject: CN=CDD1D5A820FC761B8B1E89FF9001EDE62A6B9169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:7a:fb:f6:02:86:86:68:8d:3e:bc:39:42:
                    d2:b5:61:10:44:34:75:b3:65:08:69:15:7a:8d:c8:
                    21:b4:d7:fa:c6:fb:48:41:9f:92:7d:64:dc:f0:0c:
                    03:3d:ad:03:f3:88:33:a6:51:29:9b:42:56:a5:c4:
                    af:6f:76:36:45:5f:51:51:a9:8f:c4:70:13:b8:c0:
                    82:da:ff:0f:b2:be:ca:34:26:71:d7:e8:dd:71:0a:
                    75:2c:e7:05:98:b7:54:80:c1:06:41:9d:73:66:6d:
                    1f:cb:ea:54:49:ed:07:9b:35:10:31:8c:4a:0a:ec:
                    9f:aa:64:9b:25:2e:98:34:18:16:96:b2:b2:b2:ef:
                    32:6c:ce:86:a5:9d:79:34:53:9f:d6:a9:0c:b3:49:
                    d3:b4:bb:46:ba:e8:69:15:c3:d8:64:2d:73:5b:62:
                    75:28:10:bc:ae:52:ed:85:2e:19:e7:81:31:17:6e:
                    b9:4b:ab:08:5e:0d:2d:43:1c:39:e5:bf:d6:76:8b:
                    59:f8:89:5d:5c:c0:2c:db:e9:6f:8f:e8:10:6c:c0:
                    8f:c8:c2:0c:4f:be:01:44:88:11:3a:86:00:b4:ed:
                    cc:0f:75:ca:28:34:a3:bc:0c:22:31:7e:1a:f7:66:
                    59:ac:a7:87:60:ed:ac:fa:b6:ec:77:ba:f8:47:42:
                    cc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D1:D5:A8:20:FC:76:1B:8B:1E:89:FF:90:01:ED:E6:2A:6B:91:69
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3230332e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:9b:ad:15:8c:27:bc:34:62:62:ca:c0:97:7e:a9:98:84:c5:
         66:d9:29:95:e8:f9:92:b3:e3:bb:81:aa:f6:bb:c6:74:18:20:
         cb:95:14:07:f8:90:3f:6e:e8:cb:0a:e5:9f:9e:5d:f2:f1:70:
         0d:63:f4:a7:a9:41:19:ce:21:c3:ec:71:1c:fa:ae:62:af:9e:
         0f:15:dd:a7:1a:85:82:31:bc:4a:60:50:0a:03:cc:9c:4c:1a:
         7a:e1:86:6c:ea:77:56:38:4e:44:39:dc:d6:73:c7:dd:75:96:
         ee:f3:9c:26:60:5e:8d:aa:2f:87:62:85:f8:41:a5:9b:c6:4e:
         7a:33:4b:4d:b4:f2:7c:07:eb:e3:45:5a:f7:cc:e5:38:88:97:
         7a:70:25:c1:d2:40:df:35:57:f3:5b:d1:3a:81:20:ad:6b:cd:
         2b:4f:ab:4d:42:08:91:25:86:c9:37:0a:b6:bc:80:86:21:39:
         1b:54:75:e9:77:a7:fc:0e:3f:49:3c:e2:e5:ef:58:6c:fc:8a:
         54:a8:25:d0:28:13:2a:48:77:48:b9:e1:72:47:57:d5:6e:98:
         46:f3:cf:79:99:a2:b4:76:28:da:4e:a2:b7:a7:38:67:2a:23:
         3d:3a:25:59:27:9a:6d:18:98:f4:ba:d8:4d:6e:bd:a6:4c:44:
         88:b8:b4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:52 2024 by rpki-client on console-fra.rpki-client.org