Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232382e302f32322d3232203d3e203130323639.roa
File:                     3230302e33322e3232382e302f32322d3232203d3e203130323639.roa (raw, json)
Hash identifier:          ggMEPIKW/c84aa22t7oqMIrA6NhrsMcVtzAriXBICIk=
Subject key identifier:   B3:21:F3:BF:3D:05:56:B5:8F:0E:1E:94:B6:8C:EF:81:70:BA:B4:A9
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       54E664701A95F3DF75E14FB02CAF98BCE6997B74
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232382e302f32322d3232203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:39 +0000
ROA not before:           Tue 05 Mar 2024 17:41:39 +0000
ROA not after:            Tue 04 Mar 2025 17:46:39 +0000
asID:                     10269
IP address blocks:        200.32.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e6:64:70:1a:95:f3:df:75:e1:4f:b0:2c:af:98:bc:e6:99:7b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:39 2024 GMT
            Not After : Mar  4 17:46:39 2025 GMT
        Subject: CN=B321F3BF3D0556B58F0E1E94B68CEF8170BAB4A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ad:4d:ac:a5:ee:06:cc:ac:f9:9f:2b:24:47:
                    d9:45:81:77:fa:80:9f:9b:ef:0a:c8:d0:5d:e8:96:
                    5b:09:ad:17:26:a9:d8:49:5e:d0:a0:ff:95:fb:54:
                    b0:8d:38:16:95:01:e2:66:0a:5f:60:fd:d6:7d:c7:
                    a0:af:17:43:b1:2f:7c:4a:b9:92:31:12:f1:88:5f:
                    4e:78:4f:b9:b9:c5:00:d7:67:a2:e7:8d:91:2c:c3:
                    f0:8b:1a:47:c3:b0:74:74:28:f7:e5:bd:e5:91:d1:
                    f1:9f:11:d4:a2:65:c0:34:8a:7f:06:dd:8a:90:8e:
                    a6:11:a1:db:b4:c1:de:a9:81:92:f6:48:6d:bc:0d:
                    c1:87:40:05:75:e6:e4:ff:f5:7e:f5:32:44:8a:31:
                    9a:61:dd:f0:8f:4e:29:f4:f8:52:a3:a4:02:d7:5f:
                    5c:93:3a:c2:7d:cf:b3:99:27:9c:7a:3b:0a:d9:f8:
                    44:11:76:52:62:3b:7c:68:0a:53:e7:96:5a:27:fd:
                    dc:99:0a:d0:d2:1f:82:59:19:cb:1a:b8:27:c0:75:
                    f8:d9:fe:0d:4b:62:f2:3d:da:34:2a:4d:c8:75:4c:
                    80:c6:95:c2:1e:eb:cb:8c:00:63:05:b4:13:4b:6b:
                    42:6e:81:a7:98:14:83:f8:e6:36:cc:e5:09:dc:1c:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:21:F3:BF:3D:05:56:B5:8F:0E:1E:94:B6:8C:EF:81:70:BA:B4:A9
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232382e302f32322d3232203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:4f:5e:a8:37:1b:e5:d9:8c:9a:f2:2c:1f:3f:1b:19:df:e4:
         55:0c:ef:e9:f1:d6:ed:99:83:a2:f2:0d:a7:63:79:d5:59:29:
         cb:40:33:92:94:fd:90:fc:8d:c2:40:22:19:67:32:e8:21:84:
         c5:b4:47:96:7b:72:e8:ae:97:4f:ff:ef:a0:bb:6d:6e:39:aa:
         13:89:28:67:7a:ca:04:4a:c1:0d:ce:f7:89:e6:85:19:e2:7a:
         e5:19:aa:11:75:4a:be:f6:d0:a6:05:c6:c9:5f:9b:cd:e8:a5:
         e4:48:2e:43:85:ab:7b:24:ca:77:4f:f4:1e:81:16:d5:70:35:
         3a:18:2c:e2:86:36:d2:5e:94:0b:79:9d:c8:56:7e:98:2f:aa:
         2e:53:bd:15:b5:ae:f8:ac:c2:14:06:6a:3e:7a:6e:97:01:b4:
         84:c9:f8:01:9d:6e:7d:ab:a3:9f:1e:39:8e:f7:1b:62:a3:65:
         a8:24:ed:e4:99:09:c3:79:d5:90:a9:99:ee:1d:f6:f9:e1:be:
         92:3d:0d:ca:8e:e7:9f:67:fd:9c:67:06:26:a9:b8:49:ce:d4:
         55:6f:72:3f:eb:42:c9:cb:2b:06:9d:fc:ac:94:45:b6:f7:fb:
         71:3d:25:bd:80:7e:77:9d:02:c0:1d:e6:e3:67:56:de:12:45:
         cb:ee:95:71
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVOZkcBqV89914U+wLK+YvOaZe3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBFOUE2MkI3MTg4OTg2N0JEOTM2QTA1RjA1ODc0QzBG
NDhFODQ5MjAeFw0yNDAzMDUxNzQxMzlaFw0yNTAzMDQxNzQ2MzlaMDMxMTAvBgNV
BAMTKEIzMjFGM0JGM0QwNTU2QjU4RjBFMUU5NEI2OENFRjgxNzBCQUI0QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8rU2spe4GzKz5nyskR9lFgXf6
gJ+b7wrI0F3ollsJrRcmqdhJXtCg/5X7VLCNOBaVAeJmCl9g/dZ9x6CvF0OxL3xK
uZIxEvGIX054T7m5xQDXZ6LnjZEsw/CLGkfDsHR0KPflveWR0fGfEdSiZcA0in8G
3YqQjqYRodu0wd6pgZL2SG28DcGHQAV15uT/9X71MkSKMZph3fCPTin0+FKjpALX
X1yTOsJ9z7OZJ5x6OwrZ+EQRdlJiO3xoClPnllon/dyZCtDSH4JZGcsauCfAdfjZ
/g1LYvI92jQqTch1TIDGlcIe68uMAGMFtBNLa0JugaeYFIP45jbM5QncHH1HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsyHzvz0FVrWPDh6UtozvgXC6tKkwHwYDVR0j
BBgwFoAUUOmmK3GImGe9k2oF8Fh0wPSOhJIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDFERTVFQTAxNDU2RjM2NTIwQUFFRTQzNjM4MDVFMDY5
QjcxMkVDRkM3QzE1N0EzOTlCNTk3RkYxQTgyNEUxLzAvNTBFOUE2MkI3MTg4OTg2
N0JEOTM2QTA1RjA1ODc0QzBGNDhFODQ5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MEU5QTYyQjcxODg5ODY3QkQ5
MzZBMDVGMDU4NzRDMEY0OEU4NDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxREU1RUEwMTQ1NkYzNjUyMEFBRUU0MzYzODA1RTA2OUI3MTJFQ0ZD
N0MxNTdBMzk5QjU5N0ZGMUE4MjRFMS8wLzMyMzAzMDJlMzMzMjJlMzIzMjM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzMDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsgg5DAN
BgkqhkiG9w0BAQsFAAOCAQEAZ09eqDcb5dmMmvIsHz8bGd/kVQzv6fHW7ZmDovIN
p2N51Vkpy0AzkpT9kPyNwkAiGWcy6CGExbRHlnty6K6XT//voLttbjmqE4koZ3rK
BErBDc73ieaFGeJ65RmqEXVKvvbQpgXGyV+bzeil5EguQ4WreyTKd0/0HoEW1XA1
Ohgs4oY20l6UC3mdyFZ+mC+qLlO9FbWu+KzCFAZqPnpulwG0hMn4AZ1ufaujnx45
jvcbYqNlqCTt5JkJw3nVkKmZ7h32+eG+kj0Nyo7nn2f9nGcGJqm4Sc7UVW9yP+tC
ycsrBp38rJRFtvf7cT0lvYB+d50CwB3m42dW3hJFy+6VcQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org