Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203631343638.roa
File:                     3230302e392e3137362e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          YOqrli7qc1j/Tj4rCTGnqJ9x8MA+1N26DJkX3+0q8hM=
Subject key identifier:   7D:4D:D5:7A:CD:EF:0E:1A:2D:74:69:84:51:D2:30:4F:A4:24:DA:18
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       5048A7877E83C57C8999CDAD5B71ED24C8090E3F
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203631343638.roa
Signing time:             Wed 13 Nov 2024 16:30:00 +0000
ROA not before:           Wed 13 Nov 2024 16:25:00 +0000
ROA not after:            Wed 12 Nov 2025 16:30:00 +0000
asID:                     61468
IP address blocks:        200.9.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:48:a7:87:7e:83:c5:7c:89:99:cd:ad:5b:71:ed:24:c8:09:0e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Nov 13 16:25:00 2024 GMT
            Not After : Nov 12 16:30:00 2025 GMT
        Subject: CN=7D4DD57ACDEF0E1A2D74698451D2304FA424DA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:44:e5:f8:90:b6:eb:ff:3c:e8:fd:bc:b8:62:
                    f8:18:80:8a:64:55:f0:dc:e4:cd:4e:17:ba:65:f8:
                    64:22:36:6f:b2:d9:7f:09:c8:32:6b:59:7b:ca:bf:
                    9b:5e:b6:6e:92:ae:8a:ff:73:b4:98:91:af:51:18:
                    17:e7:ab:a9:6a:be:00:13:25:74:5c:0e:e1:2a:0f:
                    24:a9:b8:0e:84:52:d4:11:4f:79:ae:78:2d:31:63:
                    8c:ad:88:04:81:3c:c7:ba:b9:4d:14:6b:fb:f6:31:
                    a0:71:59:c0:33:5f:53:f5:55:ec:b6:3b:5f:7e:85:
                    53:a4:da:82:d1:f5:f0:55:c5:05:bd:f9:31:06:59:
                    ae:c2:fa:af:fb:90:2e:9b:8e:8f:01:2a:93:25:fa:
                    ff:11:40:20:be:e9:b2:fe:b9:1a:a2:5d:52:2f:20:
                    98:01:9c:06:c9:34:b9:ad:ca:1b:e0:16:ba:63:e9:
                    a9:1b:1d:ed:d5:db:a8:a2:04:0c:8b:e9:72:d0:a4:
                    91:65:4f:51:ae:1a:1a:1d:b2:41:d0:73:52:5a:24:
                    03:30:3f:e3:e7:cf:3f:9f:c8:c6:6c:1a:5c:a8:41:
                    6d:26:2c:f3:76:29:68:60:a3:09:ae:6a:65:1d:ce:
                    4b:99:65:4b:f1:0e:51:d2:9b:3c:87:82:16:01:18:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4D:D5:7A:CD:EF:0E:1A:2D:74:69:84:51:D2:30:4F:A4:24:DA:18
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ab:00:19:98:54:9c:db:4b:5e:be:24:c2:ad:1d:93:0f:9e:
         55:9e:11:41:f0:c2:9a:bf:f1:e8:03:bc:68:b0:f7:84:d5:f0:
         10:d4:42:63:62:8a:ca:85:aa:79:60:c0:f8:e6:79:f7:2a:9c:
         88:8b:0c:28:3c:74:b4:d6:6b:d3:6d:f9:b0:4b:57:86:69:2b:
         80:34:60:f4:00:86:d3:b0:6e:f9:76:b3:61:0b:8c:3c:be:ab:
         94:7e:73:fa:76:83:07:4e:26:ee:10:75:b9:a2:e8:a5:d8:9c:
         3e:8c:95:4b:c3:c9:14:22:9d:72:21:70:c0:11:a9:5b:95:17:
         3a:f6:7a:b6:5f:19:1b:2b:db:69:10:59:95:0f:12:97:53:7f:
         1d:70:fe:d3:e7:7e:8d:72:3c:06:fc:9e:04:3b:51:b4:53:a8:
         21:32:1b:58:0c:70:9f:6c:63:a6:9d:ce:6c:80:83:e6:40:1d:
         45:47:34:5d:ed:c0:0c:63:8a:4b:39:12:40:56:1d:f4:f2:3d:
         c4:4d:48:ae:f6:1a:06:22:70:5b:73:88:7a:21:57:3b:40:b8:
         cf:d8:31:fa:fe:48:2e:eb:94:1e:ba:b1:32:69:86:8b:6d:40:
         56:d5:57:b3:7d:d3:e1:02:1b:93:f0:fc:5b:36:2a:9f:7d:e2:
         ed:90:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org