Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3233322e302f32322d3232203d3e203130323639.roa
File:                     3230302e33322e3233322e302f32322d3232203d3e203130323639.roa (raw, json)
Hash identifier:          ZUK2YJOVgXHYy2wjQ4Iw90aIBNEw2vFU40vyqsamSLk=
Subject key identifier:   69:DC:75:9A:C1:A1:03:13:43:A6:9C:6C:3D:B6:3A:4A:92:FE:56:45
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       093C77E88AC02CC12171B391C18DD21351988B8C
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3233322e302f32322d3232203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:32 +0000
ROA not before:           Tue 05 Mar 2024 17:41:32 +0000
ROA not after:            Tue 04 Mar 2025 17:46:32 +0000
asID:                     10269
IP address blocks:        200.32.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3c:77:e8:8a:c0:2c:c1:21:71:b3:91:c1:8d:d2:13:51:98:8b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:32 2024 GMT
            Not After : Mar  4 17:46:32 2025 GMT
        Subject: CN=69DC759AC1A1031343A69C6C3DB63A4A92FE5645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:6b:48:fa:65:61:9b:ae:fd:46:b6:ad:ed:
                    db:ef:4e:fd:4b:ab:8b:26:eb:1c:65:3b:b5:ca:4d:
                    b9:03:3d:9f:d7:94:2f:9a:10:e8:9a:77:1c:ac:30:
                    a9:35:64:40:f8:c1:43:19:d3:8a:6a:63:1a:a4:eb:
                    2d:b1:18:63:2e:f9:8c:21:a2:7d:a4:6e:09:17:e2:
                    60:7d:bc:ab:b0:c0:b2:c7:29:84:79:05:17:79:e7:
                    05:4b:6c:71:f9:d3:2f:b2:54:88:1d:0c:5b:cc:4b:
                    21:35:24:ec:b6:a2:48:85:70:6c:0e:28:63:64:68:
                    09:f6:65:c4:a2:7e:5f:7a:be:8b:25:9f:54:d5:05:
                    40:27:bd:8d:91:c0:36:9e:db:19:2b:cf:a0:87:64:
                    e9:aa:b1:ae:c7:9f:a7:68:f7:a6:74:23:7e:c9:2e:
                    40:60:79:cd:46:88:be:4e:d5:da:bf:c8:ae:00:d1:
                    31:d8:da:e7:0c:88:44:f3:48:01:3a:d7:05:76:9c:
                    f7:b3:61:04:57:49:aa:84:27:2f:bf:53:17:ec:1b:
                    9a:5f:eb:77:c9:49:e9:9b:8b:cd:d0:79:dd:df:ac:
                    03:ea:e0:56:03:0b:24:82:ea:da:22:ef:8d:75:b8:
                    2e:57:df:78:1a:2b:dd:91:45:d9:90:93:b4:3f:de:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DC:75:9A:C1:A1:03:13:43:A6:9C:6C:3D:B6:3A:4A:92:FE:56:45
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3233322e302f32322d3232203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:d7:e4:2d:77:a2:a6:0e:49:ab:f2:fa:97:c9:a1:45:0a:e0:
         ec:22:45:72:c7:59:fd:cb:6a:80:c0:87:8a:8e:d9:80:07:67:
         84:6f:f0:3c:8a:a7:1d:63:24:30:da:b6:33:23:01:d7:0b:4c:
         ff:6a:62:0e:e9:6c:59:78:38:0c:e2:8a:ea:b1:02:16:90:65:
         28:15:b0:d0:e6:f0:17:38:b3:09:aa:ed:43:74:02:c1:3e:d1:
         46:56:16:5e:7d:07:e5:ac:2f:82:58:13:93:32:f1:87:72:a3:
         86:c3:84:02:6d:f9:7e:97:18:f6:d1:ed:8a:30:b5:59:d7:ba:
         2f:96:cc:05:aa:7b:cc:02:5e:ee:50:7a:0e:7f:19:10:53:5c:
         18:06:76:a1:54:43:87:86:b4:95:83:75:bb:b4:72:92:b8:ce:
         d0:b0:4c:4d:6c:8c:60:58:2b:e0:eb:38:41:be:12:ec:b0:42:
         ef:99:2c:22:40:10:8f:f3:df:34:a0:e7:c3:28:df:24:42:b3:
         8f:31:4d:d2:a6:b0:aa:b2:ac:b6:83:8f:eb:21:3f:49:67:02:
         c2:2d:41:06:c3:dd:d5:98:59:66:72:49:ee:1c:f9:a4:f8:ed:
         e9:f0:75:44:7d:ff:11:ac:45:6f:bc:a2:ef:ad:98:49:55:28:
         5d:24:56:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org