Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3235322e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3235322e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          OjtAg8gherr723VsbvJVGMKujR7oEPUPehBk7lTAg8g=
Subject key identifier:   B0:FB:1C:81:B0:D1:34:37:E7:B7:28:93:8A:C5:CF:0D:20:88:49:66
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       6BA4F19844913600E407ED24867766D144FD7869
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3235322e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:41 +0000
ROA not before:           Tue 05 Mar 2024 17:41:41 +0000
ROA not after:            Tue 04 Mar 2025 17:46:41 +0000
asID:                     10269
IP address blocks:        200.32.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a4:f1:98:44:91:36:00:e4:07:ed:24:86:77:66:d1:44:fd:78:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:41 2024 GMT
            Not After : Mar  4 17:46:41 2025 GMT
        Subject: CN=B0FB1C81B0D13437E7B728938AC5CF0D20884966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:d9:0f:7e:df:8e:3f:bb:89:e5:7e:71:3a:
                    1c:ac:16:89:b5:98:02:b3:74:a3:b2:4a:44:66:e9:
                    67:eb:36:91:71:49:35:59:e7:d1:f6:4d:3b:c2:2e:
                    b7:cf:5e:80:2d:89:b4:77:38:90:c6:2d:bf:fb:9f:
                    24:26:bf:fd:40:84:40:e4:a0:b5:3d:0c:78:d3:61:
                    a7:4f:11:bf:23:ac:9c:f5:05:f6:5f:97:dc:fc:64:
                    12:64:ed:d7:c1:dd:0b:56:ee:fc:42:93:b5:e3:c6:
                    6f:48:1e:f6:0e:3b:ba:dd:e8:cd:24:0c:ad:60:ff:
                    c9:ef:74:db:45:a9:0d:e5:af:1a:60:1c:6e:3b:ce:
                    3a:63:14:14:e1:54:c9:95:99:dd:72:41:e8:4d:f2:
                    4f:40:d0:fd:2a:5f:31:ec:48:26:f0:89:90:da:ee:
                    2f:34:f2:d2:ea:8f:f3:76:b6:d9:b8:bd:04:06:32:
                    11:bb:25:00:b0:dd:c6:d0:5a:bd:46:d9:67:98:5a:
                    3b:5a:8a:a9:65:17:5b:de:cd:ef:7c:1f:96:b3:e0:
                    a8:c6:8c:8a:9b:54:8e:fe:d7:68:7f:9e:3b:0f:65:
                    85:7c:91:0d:75:07:ad:6f:9a:88:6e:a6:f5:32:85:
                    4f:d0:77:d8:5d:89:c5:29:07:a8:f7:d7:f0:e6:59:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FB:1C:81:B0:D1:34:37:E7:B7:28:93:8A:C5:CF:0D:20:88:49:66
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3235322e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ea:01:04:4f:d8:41:82:98:bf:26:c9:f3:25:10:3e:4a:dd:
         82:b7:97:1b:e5:5c:f8:7a:24:21:01:4e:6b:88:38:8d:fd:7f:
         98:c6:b0:a2:57:6d:45:12:05:02:53:95:ea:15:ba:81:12:5f:
         c4:10:d9:6e:c5:b1:70:09:2f:07:21:31:3b:ac:cd:70:7e:5a:
         28:d3:bd:ad:89:f1:d1:6e:c9:46:9e:de:60:ee:63:9f:8c:da:
         30:2d:99:06:c0:1c:e7:ea:af:5e:fe:4d:17:28:42:48:98:fd:
         d5:b1:e9:4a:43:da:e5:85:e7:a2:42:8a:e2:47:aa:33:1e:6c:
         a8:e6:bb:f9:ce:8a:96:df:ad:3d:fc:53:93:9a:c6:d9:bc:0e:
         a6:0e:a1:22:ef:c1:86:aa:7e:6b:ce:07:95:ec:15:b7:83:d6:
         69:15:6e:c4:56:1c:a3:0a:e3:bd:8c:36:2f:10:be:da:0a:ac:
         3a:8d:89:1a:21:4f:a8:72:3b:2f:53:54:2b:4a:07:20:57:b4:
         31:5a:85:d9:84:f9:ec:e6:fc:ac:1c:3f:f9:e2:6e:06:64:74:
         12:cd:48:14:5f:b0:ec:80:dc:14:7c:4d:8f:02:2f:c2:45:86:
         a7:51:97:70:b2:12:54:79:88:8c:9c:8b:7e:4c:5a:59:c5:61:
         69:74:fd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org