Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3234302e302f32322d3232203d3e203130323639.roa
File:                     3230302e33322e3234302e302f32322d3232203d3e203130323639.roa (raw, json)
Hash identifier:          a3BxxZF3LFPmXstRVXEICb9l6N3N1jYh/nnNCi4ej0I=
Subject key identifier:   1E:6E:87:89:42:67:C7:FC:21:30:64:7F:1E:21:A4:12:4A:5E:C0:8F
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       519B698E335F728A6F02C1BEE0A054D3947CD50F
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3234302e302f32322d3232203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:38 +0000
ROA not before:           Tue 05 Mar 2024 17:41:38 +0000
ROA not after:            Tue 04 Mar 2025 17:46:38 +0000
asID:                     10269
IP address blocks:        200.32.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9b:69:8e:33:5f:72:8a:6f:02:c1:be:e0:a0:54:d3:94:7c:d5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:38 2024 GMT
            Not After : Mar  4 17:46:38 2025 GMT
        Subject: CN=1E6E87894267C7FC2130647F1E21A4124A5EC08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:cd:a1:43:dd:03:15:06:f9:d7:65:62:73:
                    7d:6b:59:3b:46:14:15:b5:25:84:47:34:3b:bb:2e:
                    c2:d0:d5:11:5e:ee:0d:1a:08:d6:be:8d:51:a3:e6:
                    66:13:08:9f:90:a0:3a:83:6c:ec:25:68:02:f0:b3:
                    6e:2e:97:f4:67:e6:74:2d:a3:5c:62:7c:00:d5:a5:
                    c5:1a:74:8b:5a:3f:f8:b2:61:e6:05:d4:a2:02:5a:
                    8d:88:6a:3f:54:a9:be:7f:27:87:3a:98:5f:b9:fb:
                    1b:44:8a:11:a9:28:37:7e:35:82:ac:0a:f6:98:5c:
                    1f:75:9f:e9:5c:d1:55:b1:34:fe:61:55:93:bd:90:
                    07:ab:89:39:8a:b3:8a:0b:75:bb:41:e4:a4:86:47:
                    2f:3c:df:fa:15:c8:7d:a5:c8:94:79:1c:69:3c:2a:
                    76:6a:16:92:2e:a4:a5:c7:72:25:4d:7a:c1:6a:62:
                    27:2b:ab:85:9a:6f:2b:fb:62:6c:17:6c:dc:fd:6f:
                    cc:26:ac:5b:c1:e8:b4:17:f3:58:61:91:56:6f:d4:
                    c0:8d:a8:26:65:5a:01:40:30:ae:15:4e:47:c7:f6:
                    48:78:11:b1:9c:fe:5f:93:43:b6:14:23:c7:bb:6b:
                    43:5b:88:62:11:d9:24:0f:0c:bd:fb:7e:20:bb:ff:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6E:87:89:42:67:C7:FC:21:30:64:7F:1E:21:A4:12:4A:5E:C0:8F
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3234302e302f32322d3232203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:47:13:07:f1:0b:a8:1e:14:6e:5b:67:44:5a:ff:2e:7b:24:
         b3:5e:8e:dd:ee:1a:94:ac:c0:d4:14:15:9a:5e:fe:b1:bd:b0:
         f4:cf:45:60:68:de:c0:80:89:5d:c0:19:d9:64:79:5a:f6:0d:
         09:75:fb:d9:02:57:b0:a0:03:f2:ad:95:77:99:4f:eb:8a:a7:
         5a:ec:5d:bb:c1:6a:b6:c0:9d:1a:81:d3:e5:72:89:0c:f1:4a:
         17:44:ff:29:da:92:85:56:90:ee:58:5f:ee:6b:8e:d5:b3:09:
         89:1c:d3:f7:71:75:6a:0a:23:5a:28:d0:2d:db:84:1c:1e:ea:
         97:f0:8a:2d:8a:63:cf:3a:d6:7b:b4:d9:9d:3f:93:84:fa:49:
         65:c9:03:4a:a4:ce:02:aa:6d:42:a0:25:3e:48:30:56:1c:0a:
         ee:d4:82:c8:e7:eb:7c:7d:b6:66:91:4d:ed:f9:ad:68:03:5d:
         47:85:cb:3a:00:df:1f:e5:6b:f0:cf:90:83:da:51:ca:41:49:
         f6:01:ca:c7:6e:0e:8d:a5:42:81:f1:b0:85:b9:b6:80:50:6a:
         21:49:ae:8f:ec:be:0b:c0:aa:68:16:89:37:f9:7a:5d:53:d0:
         08:32:bd:3a:3c:e0:cf:a2:f1:55:3d:77:79:2f:96:e9:30:b6:
         6d:49:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org