Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232342e302f32322d3232203d3e203130323639.roa
File:                     3230302e33322e3232342e302f32322d3232203d3e203130323639.roa (raw, json)
Hash identifier:          CWBzP6y5LNpfPs+p/PIG0N93ugvU1R8SbAk8nPp+Imo=
Subject key identifier:   E5:8C:22:BA:FC:D9:28:C6:2A:87:AD:D4:D8:BE:78:0E:10:46:DC:9D
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       4D8C9282DA995F74E0473E56A6123B280BAD70EB
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232342e302f32322d3232203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:23 +0000
ROA not before:           Tue 04 Feb 2025 18:07:23 +0000
ROA not after:            Tue 03 Feb 2026 18:12:23 +0000
asID:                     10269
IP address blocks:        200.32.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8c:92:82:da:99:5f:74:e0:47:3e:56:a6:12:3b:28:0b:ad:70:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:23 2025 GMT
            Not After : Feb  3 18:12:23 2026 GMT
        Subject: CN=E58C22BAFCD928C62A87ADD4D8BE780E1046DC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:d0:f4:0e:00:8e:3d:47:41:22:30:d6:e0:
                    b7:11:22:c8:e6:25:fd:a3:83:6e:56:4e:be:c1:a3:
                    bc:6a:45:ad:19:c6:0a:7a:ff:32:d9:84:54:15:6e:
                    fc:3e:a5:bd:58:02:da:74:f3:f8:f3:bb:d4:1f:7b:
                    f3:ca:c8:15:b5:7e:24:19:0e:75:72:02:3d:9c:38:
                    e3:cb:3c:0e:f2:2c:98:e4:bb:05:0c:0d:43:7f:e3:
                    d2:f3:d7:0b:2e:66:ea:a8:16:c8:b4:25:7b:da:0f:
                    05:4d:9f:01:48:3b:c2:b3:5c:39:71:ce:c4:65:87:
                    48:cb:f8:b5:06:e5:8d:87:6a:87:b8:ac:52:c0:0a:
                    de:c8:44:ea:f7:5a:54:ef:fb:50:3f:26:16:1d:c3:
                    37:39:6b:37:bb:20:e5:83:5d:d0:3c:f9:0b:ed:8d:
                    d8:86:dc:e0:19:27:50:cd:80:c5:0a:84:f6:07:97:
                    16:0b:26:fd:db:6c:98:c0:1d:8a:2f:eb:b9:4e:40:
                    60:ea:2f:84:ae:28:36:81:d8:f3:68:7b:d2:52:6a:
                    4b:c2:02:6f:0a:b1:ab:a2:0f:f8:e8:ae:d2:e7:78:
                    64:1f:7e:45:0b:9f:6f:8c:e8:13:7a:da:c0:14:98:
                    d4:70:2c:1c:b6:24:42:0a:66:04:85:fc:f4:ae:8f:
                    77:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8C:22:BA:FC:D9:28:C6:2A:87:AD:D4:D8:BE:78:0E:10:46:DC:9D
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232342e302f32322d3232203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:f8:d0:23:3c:4c:4d:f3:b3:50:b9:11:ff:b3:d7:41:ae:dd:
         6d:2d:2a:d1:ac:34:e1:1e:01:98:1f:a6:7e:ff:7c:57:e6:82:
         8f:ee:58:da:be:64:f2:69:23:92:15:91:a1:2a:d1:a0:5f:52:
         b5:fe:c8:92:1b:8e:1a:a3:9f:87:59:f8:9a:36:0b:63:62:03:
         3a:b3:66:4b:79:2b:31:e6:ea:58:74:3b:82:8e:0a:66:e7:d6:
         44:4e:9e:cf:98:e4:24:93:4d:39:aa:c4:09:18:00:24:76:c7:
         35:d5:ce:3c:b3:df:47:b9:04:55:a9:f6:cc:e1:67:a3:09:e6:
         e8:5e:68:c5:f5:63:39:cc:f4:fc:ee:37:1d:e2:f0:e7:e1:a7:
         da:b4:90:54:f6:1b:67:2f:a7:3a:90:f0:33:38:97:2a:4b:94:
         bf:10:62:ed:af:bf:9f:6d:25:67:ae:25:9c:ea:75:55:9c:cd:
         bc:7e:e5:fc:7d:74:ab:02:cc:bc:2c:5c:70:51:cf:13:ae:48:
         b4:4b:9e:ef:57:b8:29:c6:a9:cf:dc:d3:c2:68:94:c6:34:4c:
         9e:2d:ce:80:64:10:cd:4e:b8:30:63:d5:1d:0b:78:53:b0:a4:
         57:0e:cb:85:53:e1:12:d5:e2:35:5d:45:23:03:5b:84:2a:e3:
         d8:40:8e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:38 2025 by rpki-client