Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3231332e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3231332e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          xv1NxHUpfQ4kCVxt6AGcGCQNdjkvjUc06T+1uI4EUK4=
Subject key identifier:   41:47:ED:33:40:3F:0A:D2:6A:53:0E:72:92:E5:DE:F7:A9:F3:2E:4E
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       6B52F14D46CA031A2DA96D0ACECAA2D11ECF37DC
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3231332e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:40 +0000
ROA not before:           Tue 05 Mar 2024 17:41:40 +0000
ROA not after:            Tue 04 Mar 2025 17:46:40 +0000
asID:                     10269
IP address blocks:        200.32.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:52:f1:4d:46:ca:03:1a:2d:a9:6d:0a:ce:ca:a2:d1:1e:cf:37:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:40 2024 GMT
            Not After : Mar  4 17:46:40 2025 GMT
        Subject: CN=4147ED33403F0AD26A530E7292E5DEF7A9F32E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:bd:9d:19:a7:c8:82:06:96:39:a7:03:92:
                    65:f9:ac:10:53:0e:07:f6:00:44:d0:88:b2:c7:ca:
                    2a:79:02:ef:b0:95:52:8d:47:1d:4a:30:9b:21:49:
                    ad:61:93:16:c8:81:70:64:12:af:c2:72:14:3e:89:
                    81:b0:e8:f3:d0:8f:11:1c:e0:04:83:58:63:c2:cb:
                    34:3b:69:fe:d0:2d:af:14:8f:89:1c:3c:c7:b2:7e:
                    4c:96:96:c5:87:b5:84:7e:2d:4c:5f:24:57:1d:96:
                    86:66:06:01:dc:eb:c0:6c:fd:01:7c:df:e5:2d:82:
                    1e:ed:59:cb:8d:c9:9c:51:89:0a:7f:8b:a5:09:7a:
                    a5:7c:06:e8:26:a0:ea:e9:b5:44:67:a2:c6:04:73:
                    25:4a:f0:5b:f2:6b:2f:6b:f6:7e:d9:0c:af:76:c6:
                    e6:3b:20:f2:89:e7:15:59:c1:d0:b2:53:8d:ae:5b:
                    87:ae:a4:c4:03:76:ab:c0:5e:02:3b:10:fe:34:75:
                    36:e9:12:f3:8f:c3:6f:94:c8:5b:d0:0e:ef:22:48:
                    ff:32:00:d0:97:8e:d8:b0:bf:5f:d4:0c:15:60:d8:
                    f1:df:34:49:da:a6:cc:e3:5d:35:64:8e:97:87:b0:
                    5b:08:cd:11:ba:57:72:38:5e:a6:3a:16:7f:78:9e:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:47:ED:33:40:3F:0A:D2:6A:53:0E:72:92:E5:DE:F7:A9:F3:2E:4E
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3231332e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:bf:d9:83:7e:24:37:d1:d9:f0:3c:ab:c7:35:17:d1:5a:20:
         48:4e:fd:1d:9d:27:bb:3e:a8:08:d1:73:84:c1:63:e0:ad:6d:
         89:dd:38:e2:c5:10:80:8d:c5:da:ce:2f:1e:34:87:e1:06:01:
         22:1b:dc:53:f3:ca:d4:99:d3:dc:b8:8c:c7:0c:af:14:c9:87:
         7e:1d:5b:35:1f:77:44:a5:d2:0a:cf:08:01:37:e5:04:ca:74:
         b2:62:3f:a5:8e:4f:57:9c:6b:85:28:7a:17:01:21:01:b2:13:
         92:59:12:ee:2f:54:44:d6:ca:3b:e9:09:b9:e7:f0:b6:7f:29:
         f0:e3:ae:98:69:0e:87:63:95:16:8d:d4:ba:8c:cd:c8:1f:4c:
         12:76:d1:26:f9:25:67:bd:60:d4:00:92:d6:3a:54:e2:f7:a5:
         9e:63:51:ee:8c:33:86:cf:56:7a:dc:ca:a3:2c:e3:a9:e7:8b:
         54:53:72:2b:c1:8b:c4:58:ca:fa:ee:de:28:f3:1c:5c:7a:40:
         07:ef:4a:3c:6f:bf:6b:9d:8c:af:c2:49:a2:68:92:54:00:f7:
         90:97:e2:ee:64:af:4a:60:d4:f7:64:fc:f5:c4:a0:5e:9f:11:
         a4:42:08:2f:73:95:bf:35:82:e1:19:90:64:65:a9:d5:54:9c:
         37:d8:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org