Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232312e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3232312e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          kwTceUMaqw417RndCX45ZOCx0trTrqi2FRFCiFxWSws=
Subject key identifier:   63:B4:F8:7A:63:62:B3:57:61:2F:F3:89:06:EA:3D:CF:A6:3A:AC:C8
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       5989CC6930DEFFB8F7AB9EC61B9C69803AB80E
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232312e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:21 +0000
ROA not before:           Tue 04 Feb 2025 18:07:21 +0000
ROA not after:            Tue 03 Feb 2026 18:12:21 +0000
asID:                     10269
IP address blocks:        200.32.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:89:cc:69:30:de:ff:b8:f7:ab:9e:c6:1b:9c:69:80:3a:b8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:21 2025 GMT
            Not After : Feb  3 18:12:21 2026 GMT
        Subject: CN=63B4F87A6362B357612FF38906EA3DCFA63AACC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1c:7d:fe:97:09:53:c9:34:0e:f6:be:77:57:
                    3b:58:10:1d:8f:b9:30:b9:15:00:13:1b:47:76:6a:
                    83:7a:45:a9:19:19:39:9a:a3:8d:a6:bc:7f:f8:be:
                    86:46:1a:bc:d0:3a:32:af:d2:31:04:e1:62:67:36:
                    42:7e:84:85:dc:c9:9a:9a:3a:34:15:52:7d:90:38:
                    1a:10:ba:2d:cc:37:c5:3d:ce:d6:80:66:a3:9f:dc:
                    39:0e:3f:0f:3f:62:a0:a2:cd:13:2a:69:e7:26:9e:
                    54:df:d2:b8:a7:87:8d:6e:11:e5:56:90:47:4a:f5:
                    33:20:8b:5c:65:b2:fe:73:ea:a2:9c:bf:0d:1c:d4:
                    79:b4:58:74:0a:c0:8f:44:12:7f:61:37:09:8f:18:
                    01:e2:9d:18:f6:11:ef:d0:8c:a1:70:e3:15:23:28:
                    7c:09:19:c1:b7:8f:ae:be:b1:c3:fd:0d:4f:19:05:
                    6e:02:1a:24:a9:33:27:d7:b2:fd:8f:3b:40:a4:19:
                    12:4b:77:64:5a:cd:40:bb:52:30:1f:ea:34:16:ff:
                    95:da:7c:32:ee:65:96:f9:6e:bd:ca:55:a5:88:45:
                    ac:9b:1d:23:e7:02:90:1a:d1:e3:1d:85:36:cf:db:
                    f5:52:16:4d:fd:17:9f:ba:5e:d4:17:98:94:89:17:
                    88:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B4:F8:7A:63:62:B3:57:61:2F:F3:89:06:EA:3D:CF:A6:3A:AC:C8
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232312e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:56:ff:b9:2e:d5:98:f7:06:55:61:83:f3:20:65:cb:cf:6e:
         ec:b4:90:96:14:68:c1:92:92:fe:48:8a:81:6e:e6:0c:37:dc:
         5c:a2:36:e0:9a:9b:57:e0:3d:27:52:a1:f6:00:88:09:37:82:
         34:61:55:57:21:14:86:d9:41:08:e7:b3:62:29:2c:45:1d:b9:
         f5:a0:d5:95:8f:0a:fc:33:ea:58:51:b9:c6:3f:43:02:92:74:
         a9:3e:c9:a5:d0:84:ed:70:17:aa:76:40:ae:20:7a:ae:b9:31:
         88:7a:7c:1f:fb:fa:c7:bc:d5:21:bc:42:7a:da:cf:3e:ed:c0:
         c6:27:fa:5b:5e:74:30:74:b6:c0:be:15:41:d8:c8:34:fd:2c:
         78:9b:98:de:f8:d4:95:ba:e5:3c:cb:95:8e:f5:c4:8e:4a:19:
         f6:34:ff:ab:3a:da:cf:1e:0a:d1:47:c0:de:f4:2f:40:1e:68:
         6f:03:40:9a:1a:e7:33:c4:de:61:28:12:4f:6f:86:25:61:4a:
         9d:d2:0b:de:d7:53:38:0a:e1:77:56:66:52:bf:4e:96:67:ef:
         4e:a0:45:a0:20:fd:a0:6d:86:a4:ed:0b:88:e3:5c:2b:6b:d2:
         f7:f2:fc:7d:aa:d0:bd:11:b0:05:8b:0f:bd:da:76:44:af:4f:
         c0:0a:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:04 2025 by rpki-client