Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3233322e302f32322d3232203d3e203130323639.roa
File:                     3230302e33322e3233322e302f32322d3232203d3e203130323639.roa (raw, json)
Hash identifier:          wZhQDhmD/Q4fOpsJy3HqcIQbqt8LBnNCekx2PQZ4pdQ=
Subject key identifier:   97:CE:19:B0:73:65:26:AE:23:7F:E5:54:D0:03:91:42:7D:20:3F:A3
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       2876D7DA9C6B8420D7DF7760E9CEC7C86DB37B17
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3233322e302f32322d3232203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:21 +0000
ROA not before:           Tue 04 Feb 2025 18:07:21 +0000
ROA not after:            Tue 03 Feb 2026 18:12:21 +0000
asID:                     10269
IP address blocks:        200.32.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:76:d7:da:9c:6b:84:20:d7:df:77:60:e9:ce:c7:c8:6d:b3:7b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:21 2025 GMT
            Not After : Feb  3 18:12:21 2026 GMT
        Subject: CN=97CE19B0736526AE237FE554D00391427D203FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:59:de:cb:f3:25:a2:12:ca:b7:20:61:d4:
                    52:8c:6a:10:c0:d9:10:28:77:2b:f5:f8:3c:a4:f5:
                    86:9d:51:e8:e8:31:13:66:0d:ea:43:be:73:5a:65:
                    12:17:1d:ac:d9:83:1f:22:cb:f9:91:3d:22:a5:59:
                    a1:d1:47:01:68:67:ce:11:df:0e:66:4e:29:8c:21:
                    9f:3f:cc:ba:ac:43:eb:5b:71:0c:ef:50:ed:c0:7d:
                    83:6b:4c:c1:96:72:c7:68:5f:51:8a:8f:db:b0:7c:
                    e8:b7:f4:16:ed:cf:69:b2:28:88:9a:34:81:d6:e7:
                    a3:27:c9:0b:3d:d5:5c:37:e0:be:4f:b8:62:c7:26:
                    54:f8:f2:0e:33:13:3a:85:9d:79:e9:61:06:f8:8c:
                    d4:c6:ab:5c:bf:6a:d2:92:b0:3a:cd:c2:60:da:74:
                    d5:ac:b5:dd:d1:25:95:98:0b:14:2f:dd:af:77:f4:
                    88:35:3d:a3:cb:95:54:52:35:0f:fc:be:94:d0:88:
                    5c:cc:43:f6:28:4d:6f:c5:73:10:57:c2:7c:07:27:
                    83:3e:89:32:47:98:98:c4:4a:33:08:db:ab:6c:cc:
                    47:44:24:43:92:b2:dd:98:26:97:bd:05:32:a2:da:
                    6c:f4:b9:d4:ce:f9:e4:e7:ab:42:c0:3f:38:06:7a:
                    c5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CE:19:B0:73:65:26:AE:23:7F:E5:54:D0:03:91:42:7D:20:3F:A3
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3233322e302f32322d3232203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:04:a9:ff:75:f4:06:42:7a:ab:1d:dc:50:bd:ab:60:9d:
         d6:cd:d7:9d:ef:c9:f7:3c:2f:a4:7b:87:6c:a1:97:1d:bc:b2:
         97:43:8b:6e:9d:b0:ea:41:b6:84:4c:93:59:eb:6b:dd:2d:5a:
         02:a2:89:74:ff:42:22:42:37:90:e1:50:a9:a8:43:57:f9:21:
         bb:01:1b:69:88:29:c6:be:b4:4e:e5:2f:aa:ee:82:50:ce:6c:
         76:77:f2:60:bb:b5:6f:ed:0f:79:fd:e2:73:14:30:20:92:b6:
         de:8f:b6:9d:4e:79:88:d1:d4:55:61:f6:38:1f:60:07:62:a7:
         22:a3:4d:9f:b7:d5:a5:12:99:91:7b:ce:25:47:84:77:70:cb:
         d3:1e:45:af:e8:5b:62:08:c0:54:54:00:59:e6:dc:22:37:f2:
         1e:53:16:a8:29:1d:a9:6e:45:ea:4f:40:82:82:77:2e:13:88:
         f0:87:af:ee:41:d5:d2:2a:76:09:25:b1:73:ed:58:f2:ae:9c:
         05:7d:cf:b3:46:fe:b1:02:cd:ae:ca:71:96:ff:9c:d4:43:15:
         60:77:ec:31:06:f2:4c:00:af:61:bc:00:46:69:bf:c9:a0:fa:
         d2:c4:8b:f6:c4:49:2e:42:4f:af:77:40:17:47:a7:6b:10:fb:
         1f:1a:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:13 2025 by rpki-client