Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3235332e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3235332e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          du7I8F90kILTkEsIctTNiebjbvcd+eyIDHrvPbU8Trs=
Subject key identifier:   9A:42:7C:60:BD:B9:62:1E:42:BB:0A:08:C0:1A:B5:9A:BA:47:56:14
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       5AA748442926BA513B932D4897456E2C53F37D98
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3235332e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:38 +0000
ROA not before:           Tue 05 Mar 2024 17:41:38 +0000
ROA not after:            Tue 04 Mar 2025 17:46:38 +0000
asID:                     10269
IP address blocks:        200.32.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a7:48:44:29:26:ba:51:3b:93:2d:48:97:45:6e:2c:53:f3:7d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:38 2024 GMT
            Not After : Mar  4 17:46:38 2025 GMT
        Subject: CN=9A427C60BDB9621E42BB0A08C01AB59ABA475614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9e:70:56:0b:79:9d:f2:bf:32:2c:f1:66:1f:
                    ba:63:f5:dd:2d:63:74:cd:33:a3:cd:0a:82:62:42:
                    a8:c0:b5:f4:00:f4:c1:57:c9:8b:f7:1b:fe:cb:c0:
                    c3:c3:5a:f5:a4:f9:ab:d7:4e:a4:7e:77:77:7a:b0:
                    b5:da:f3:f1:57:38:2b:fa:f3:12:c6:f4:14:bd:67:
                    0e:05:9c:67:e6:9d:77:77:1e:46:b3:56:b2:e7:10:
                    54:d6:67:15:d5:6e:f9:23:4a:84:10:eb:2a:1a:b9:
                    80:f7:c3:11:84:1b:fc:69:10:99:9b:94:ee:95:f1:
                    36:78:b5:a3:37:c3:51:1a:ac:cb:18:26:7d:ff:c4:
                    b7:06:a9:05:ce:ae:72:56:ed:a9:fc:2c:48:a5:f3:
                    91:ee:0f:d9:ac:6d:ee:56:25:a8:c9:0f:a5:20:b0:
                    e1:99:08:de:32:e7:df:3d:4a:26:f6:dd:6e:9b:90:
                    a1:41:96:2f:ba:57:27:25:d7:b6:ea:ab:35:5b:0b:
                    64:73:7d:04:79:84:aa:6d:42:81:c7:7b:34:cd:ee:
                    a2:9d:15:f1:4e:39:8d:9d:9d:35:ee:86:41:43:cc:
                    22:34:1a:52:a7:f7:e1:6c:41:e6:30:d6:13:78:21:
                    20:20:31:f6:c5:26:35:51:77:f3:d8:e6:d2:09:f5:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:42:7C:60:BD:B9:62:1E:42:BB:0A:08:C0:1A:B5:9A:BA:47:56:14
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3235332e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:90:b0:51:7a:55:1b:81:68:53:dc:e6:df:1b:1c:f6:76:
         d0:40:4f:fe:8a:b4:d3:65:00:91:1c:a1:eb:cc:6a:64:e2:31:
         fe:f4:ba:0c:95:c3:50:28:1d:76:2d:0f:0a:e6:fd:2f:1d:21:
         75:50:4f:e0:49:f2:31:21:0f:91:73:fd:22:93:7e:eb:9e:e1:
         4f:8e:d7:d9:82:a8:1d:98:06:0e:41:8f:59:36:aa:1e:c3:57:
         be:cb:6e:b6:ed:36:06:0f:d9:ca:7c:c0:f1:b6:ea:d1:91:ea:
         21:f5:d5:77:0b:9f:c1:c8:8e:9c:40:d7:c7:dc:50:de:41:a6:
         e8:10:fe:ed:e8:52:b8:7f:ab:bf:26:10:31:3d:a2:6b:fc:b3:
         c5:47:55:6f:58:45:90:8f:12:2d:af:56:ec:72:51:d7:56:bb:
         53:2d:4f:0f:a2:0e:88:02:22:2d:0a:d5:5e:b7:ab:aa:c9:b0:
         e8:67:29:10:92:fe:b3:4e:ef:85:e5:14:83:a6:de:9e:bc:f0:
         1c:b9:f2:9b:8d:4d:e2:f7:b9:f3:31:a6:b6:98:b7:57:03:7a:
         c2:2c:2b:13:a5:9e:11:66:6c:d0:11:de:8e:e2:b8:67:d6:01:
         10:72:98:5e:91:47:42:86:86:9b:2a:c0:22:6c:88:39:db:67:
         15:20:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org