Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232312e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3232312e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          LLkRK8k4G3LzYGXI6bKe3W3PFlp9nXq1Gb+9aY7Y+tw=
Subject key identifier:   7A:8E:D7:7F:03:68:D8:FA:E6:93:E3:BC:E1:D9:BD:34:B9:04:97:4B
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       56F25BE72A7F105B97A83AF131DFBA5CABB1A8ED
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232312e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:35 +0000
ROA not before:           Tue 05 Mar 2024 17:41:35 +0000
ROA not after:            Tue 04 Mar 2025 17:46:35 +0000
asID:                     10269
IP address blocks:        200.32.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f2:5b:e7:2a:7f:10:5b:97:a8:3a:f1:31:df:ba:5c:ab:b1:a8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:35 2024 GMT
            Not After : Mar  4 17:46:35 2025 GMT
        Subject: CN=7A8ED77F0368D8FAE693E3BCE1D9BD34B904974B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:8d:00:99:f3:37:37:db:67:04:5f:8c:16:
                    64:e7:8d:cd:de:cb:29:aa:3e:84:c4:f3:3d:f6:92:
                    69:dc:b3:7b:6b:c1:0f:2d:9b:27:70:21:fe:3d:65:
                    81:70:3a:64:52:f6:86:1b:8b:51:39:3f:d3:80:2b:
                    b0:12:27:08:2d:37:ed:b7:7b:61:fb:f6:fd:03:16:
                    50:f5:b8:81:59:b5:94:48:0a:e1:a7:95:a0:aa:47:
                    0f:77:79:bb:69:fb:01:8d:6f:db:18:52:5c:49:1a:
                    48:39:af:4d:85:c0:fa:03:61:c4:8f:13:2e:1b:bf:
                    32:e2:0c:d8:39:2a:62:25:78:47:a4:8b:57:e6:ef:
                    f1:9e:33:42:e3:82:59:8e:b3:3d:71:e5:55:1e:0e:
                    de:d7:b7:12:97:20:2b:08:dd:e0:af:14:a3:0f:92:
                    d4:8f:f8:36:70:f4:88:9c:fb:d0:33:b4:7e:c9:98:
                    2d:16:1a:96:6f:2f:c3:28:86:43:a0:eb:6a:4c:4b:
                    07:17:be:dd:a3:32:e7:d4:f7:07:52:e4:c9:c5:ad:
                    cb:01:e1:1d:8e:12:8d:9b:65:b5:4d:13:4a:cb:2c:
                    35:bc:37:21:f3:52:a6:46:68:68:9f:73:8c:9c:97:
                    10:28:99:94:9f:d8:c6:3c:93:9d:5e:0b:07:3d:1f:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8E:D7:7F:03:68:D8:FA:E6:93:E3:BC:E1:D9:BD:34:B9:04:97:4B
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232312e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:43:c9:0a:1f:30:77:a6:73:e1:a2:cb:c3:fb:b8:e8:67:73:
         8f:2a:32:e6:7c:e2:f0:fc:d9:c6:ef:b5:92:ab:bb:a9:90:a4:
         a4:64:bb:a1:dd:4e:ef:4e:0d:2f:41:47:a6:e8:41:e6:1b:68:
         f1:aa:0a:f6:9b:7a:92:78:3a:c2:aa:2d:2d:7b:c2:17:5e:e0:
         91:87:4e:c4:75:f8:b3:2e:80:cb:7a:f7:cc:a2:c2:62:24:d5:
         05:a3:c2:29:78:55:3b:3a:2a:30:46:10:88:d0:86:a6:64:6f:
         da:c2:35:7f:88:86:85:53:32:ce:72:b3:f8:52:46:ca:79:6e:
         57:ab:74:8d:13:c6:a2:11:7a:d2:58:c8:0c:d5:35:a1:99:16:
         52:a3:7f:12:12:c4:09:04:15:c3:63:42:b2:2c:9e:48:d6:c3:
         57:eb:bc:fc:d2:cf:74:b9:f3:72:eb:db:1e:4b:3e:68:82:d2:
         64:d4:17:26:25:b4:6d:bb:1c:51:00:1e:99:fc:ef:01:f1:fe:
         71:62:e8:7b:66:6d:51:27:d6:dc:b9:c8:df:ca:af:aa:79:4b:
         9e:ad:e7:61:a4:d4:1b:97:25:0b:91:01:b3:9d:7a:3f:93:38:
         77:16:5e:3e:17:27:48:51:20:e4:fe:2c:95:b7:7b:28:42:34:
         b9:9d:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org