Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232382e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3232382e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          c1OoFMUPcsbjZ+Xe+hLb/fnE2YbXNlamRmCE/6lsLJE=
Subject key identifier:   46:B2:DB:99:6E:CB:1D:18:BD:58:69:4C:00:DB:A7:F8:A7:AC:E7:C2
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       78C50A96E504E48567D7449218F753FE136ACDBE
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232382e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:15 +0000
ROA not before:           Tue 04 Feb 2025 18:07:15 +0000
ROA not after:            Tue 03 Feb 2026 18:12:15 +0000
asID:                     10269
IP address blocks:        200.32.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c5:0a:96:e5:04:e4:85:67:d7:44:92:18:f7:53:fe:13:6a:cd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:15 2025 GMT
            Not After : Feb  3 18:12:15 2026 GMT
        Subject: CN=46B2DB996ECB1D18BD58694C00DBA7F8A7ACE7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:ca:1b:94:36:46:60:a9:32:95:c4:5a:f9:
                    da:93:18:f6:8c:d1:94:5b:d1:83:6a:d0:61:62:b5:
                    39:ce:dc:3e:68:54:e4:5d:57:b5:35:a4:00:1b:7b:
                    63:0c:6a:62:d7:7a:41:f0:f3:28:9e:39:f4:6e:8e:
                    58:06:45:93:b9:bc:b9:f5:57:83:12:e6:01:b3:a7:
                    80:f9:20:4e:f7:7d:08:dc:7b:e2:ae:76:28:01:fb:
                    a1:04:c8:7b:13:5a:31:54:ca:8e:d4:1c:cc:cb:ea:
                    bc:fe:be:d9:f2:55:9d:26:0c:69:bb:f4:10:07:54:
                    ab:6d:80:15:f3:f9:cd:a8:2d:79:40:22:d6:75:42:
                    3d:9f:4c:a3:fc:c8:0b:f9:0c:01:42:a4:05:30:c2:
                    c8:17:40:fb:da:6e:80:fd:f9:73:44:cd:a1:95:09:
                    92:e7:f3:2b:4b:52:81:31:cd:6f:17:43:a0:b2:ea:
                    df:5b:0d:55:b9:93:dd:d8:2a:8c:2d:b0:19:71:2c:
                    eb:f4:b5:f9:19:61:b0:07:87:3e:ea:8f:5c:34:08:
                    14:45:0a:22:3e:94:d4:a6:47:37:83:2d:de:b6:ea:
                    5c:bc:4e:68:ad:48:c7:6f:b5:39:1b:b4:51:0d:75:
                    5a:46:01:27:81:68:ba:33:85:82:fc:34:c5:36:b9:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B2:DB:99:6E:CB:1D:18:BD:58:69:4C:00:DB:A7:F8:A7:AC:E7:C2
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232382e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:34:b0:c8:c8:b0:c6:37:f0:69:f1:5c:a9:a7:d3:74:2e:00:
         50:71:ae:14:90:ca:10:fa:68:bf:a3:fd:53:f2:d8:b9:31:38:
         8e:ca:67:03:0b:52:5e:e7:07:4c:46:72:89:05:1d:47:b7:1c:
         f9:52:7e:93:35:e1:47:fd:76:f6:75:15:ed:e7:5a:b5:1b:45:
         27:93:ef:64:f7:67:5d:7f:8e:df:71:7e:ad:b0:b3:6a:9a:81:
         3e:e3:2e:25:93:ad:50:66:3c:98:7a:1c:57:27:eb:96:3e:f3:
         45:aa:e5:de:c2:f8:19:27:74:bf:88:95:9f:66:1e:66:8e:60:
         25:ae:0a:88:b3:bd:06:8e:a4:86:64:0c:20:0a:6a:44:53:02:
         f6:77:cb:21:60:dd:12:60:f0:a7:0d:66:6a:3b:77:e6:b3:55:
         a5:4d:f4:56:cb:46:44:72:b7:fc:09:5d:71:55:ef:1d:df:08:
         a1:3d:7b:ed:45:27:cb:10:2c:34:a9:ab:21:d3:0c:fb:62:93:
         5d:c5:5a:2d:ec:37:f7:c3:bc:0b:24:00:a3:31:2d:91:e2:47:
         cd:30:71:50:19:60:6e:95:1a:39:b7:6b:0c:ab:7a:d6:7d:3f:
         1c:f5:f0:31:1f:e0:dc:b9:0f:50:d9:3c:e0:f5:d4:cc:e9:70:
         87:18:49:cd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeMUKluUE5IVn10SSGPdT/hNqzb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBFOUE2MkI3MTg4OTg2N0JEOTM2QTA1RjA1ODc0QzBG
NDhFODQ5MjAeFw0yNTAyMDQxODA3MTVaFw0yNjAyMDMxODEyMTVaMDMxMTAvBgNV
BAMTKDQ2QjJEQjk5NkVDQjFEMThCRDU4Njk0QzAwREJBN0Y4QTdBQ0U3QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlMoblDZGYKkylcRa+dqTGPaM
0ZRb0YNq0GFitTnO3D5oVORdV7U1pAAbe2MMamLXekHw8yieOfRujlgGRZO5vLn1
V4MS5gGzp4D5IE73fQjce+KudigB+6EEyHsTWjFUyo7UHMzL6rz+vtnyVZ0mDGm7
9BAHVKttgBXz+c2oLXlAItZ1Qj2fTKP8yAv5DAFCpAUwwsgXQPvaboD9+XNEzaGV
CZLn8ytLUoExzW8XQ6Cy6t9bDVW5k93YKowtsBlxLOv0tfkZYbAHhz7qj1w0CBRF
CiI+lNSmRzeDLd626ly8TmitSMdvtTkbtFENdVpGASeBaLozhYL8NMU2uS2bAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQURrLbmW7LHRi9WGlMANun+Kes58IwHwYDVR0j
BBgwFoAUUOmmK3GImGe9k2oF8Fh0wPSOhJIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDFERTVFQTAxNDU2RjM2NTIwQUFFRTQzNjM4MDVFMDY5
QjcxMkVDRkM3QzE1N0EzOTlCNTk3RkYxQTgyNEUxLzAvNTBFOUE2MkI3MTg4OTg2
N0JEOTM2QTA1RjA1ODc0QzBGNDhFODQ5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MEU5QTYyQjcxODg5ODY3QkQ5
MzZBMDVGMDU4NzRDMEY0OEU4NDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxREU1RUEwMTQ1NkYzNjUyMEFBRUU0MzYzODA1RTA2OUI3MTJFQ0ZD
N0MxNTdBMzk5QjU5N0ZGMUE4MjRFMS8wLzMyMzAzMDJlMzMzMjJlMzIzMjM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgg5DAN
BgkqhkiG9w0BAQsFAAOCAQEAaDSwyMiwxjfwafFcqafTdC4AUHGuFJDKEPpov6P9
U/LYuTE4jspnAwtSXucHTEZyiQUdR7cc+VJ+kzXhR/129nUV7edatRtFJ5PvZPdn
XX+O33F+rbCzapqBPuMuJZOtUGY8mHocVyfrlj7zRarl3sL4GSd0v4iVn2YeZo5g
Ja4KiLO9Bo6khmQMIApqRFMC9nfLIWDdEmDwpw1majt35rNVpU30VstGRHK3/Ald
cVXvHd8IoT177UUnyxAsNKmrIdMM+2KTXcVaLew398O8CyQAozEtkeJHzTBxUBlg
bpUaObdrDKt61n0/HPXwMR/g3LkPUNk84PXUzOlwhxhJzQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:35 2025 by rpki-client