Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e39342e3234382e302f32342d3234203d3e20323632323036.roa
File:                     3230302e39342e3234382e302f32342d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          /pxIv4t9iDJZFNT4OGlBA+0fPMHPjBNJeDSwCUJ9fAo=
Subject key identifier:   31:CD:11:46:5D:31:5A:6A:57:6E:7A:4D:45:57:19:67:06:0C:A7:EB
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       5F1CFAF0A65BE802DABB791DA98B40DFB1B56DE0
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e39342e3234382e302f32342d3234203d3e20323632323036.roa
Signing time:             Tue 05 Mar 2024 17:40:55 +0000
ROA not before:           Tue 05 Mar 2024 17:35:55 +0000
ROA not after:            Tue 04 Mar 2025 17:40:55 +0000
asID:                     262206
IP address blocks:        200.94.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1c:fa:f0:a6:5b:e8:02:da:bb:79:1d:a9:8b:40:df:b1:b5:6d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:35:55 2024 GMT
            Not After : Mar  4 17:40:55 2025 GMT
        Subject: CN=31CD11465D315A6A576E7A4D45571967060CA7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:db:9a:ac:67:68:ae:b2:2e:a7:e6:e4:a9:
                    78:7c:bc:7c:45:d4:94:b3:02:ea:ff:74:75:e5:09:
                    a5:06:36:6c:fb:d4:1e:25:3f:e6:63:15:07:88:a9:
                    f9:20:7d:bd:c7:2a:99:6c:c8:54:43:64:2c:44:de:
                    36:75:86:6f:ed:70:d9:d4:fb:64:2f:17:bd:5f:a5:
                    cd:36:26:6c:26:c8:fe:21:a9:7f:48:b5:66:f9:38:
                    f8:87:1b:7e:f6:15:04:e2:3d:60:75:4f:5b:a3:5b:
                    fa:70:3f:a4:4a:f5:fd:25:d5:3c:33:5b:03:3a:7f:
                    d8:b2:ff:aa:2a:80:f6:1d:3a:06:1b:16:a7:3b:8e:
                    42:0f:0b:47:bd:09:9d:a3:e7:5c:ca:35:c3:cc:ec:
                    10:d1:c0:47:97:0b:e9:31:9b:14:cc:32:b0:91:2e:
                    ca:4d:dd:6f:16:cc:57:7e:d0:68:09:ca:a8:1e:82:
                    30:f7:46:bb:e8:2e:f4:14:1a:4b:81:6d:22:3a:12:
                    a7:04:d9:d6:d1:f5:6d:2b:4e:16:b1:76:d1:7f:1c:
                    e8:f9:cb:52:f4:ef:9d:26:96:50:e4:91:db:e7:a6:
                    2c:46:03:0e:b2:13:bc:3d:c0:61:8b:c3:9e:f6:b0:
                    fe:cd:e2:75:69:c7:62:f5:16:ec:d4:4f:5f:cd:4e:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CD:11:46:5D:31:5A:6A:57:6E:7A:4D:45:57:19:67:06:0C:A7:EB
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e39342e3234382e302f32342d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:1d:02:61:c3:6d:56:38:30:22:c3:2d:c5:2e:c7:7c:e6:46:
         57:e9:f2:64:3e:98:b5:20:b0:ed:77:29:71:05:a7:fb:48:1f:
         fe:0c:39:f5:73:9f:f1:10:ab:ff:2f:4e:8c:18:72:2e:7b:ae:
         63:de:06:9d:7a:0d:d9:b0:67:56:ba:79:b5:8b:fd:11:b4:e3:
         b3:71:d2:0d:6f:5a:52:3b:87:f9:c6:fe:35:63:52:47:17:8b:
         a7:42:fe:64:bf:fd:53:9b:34:ba:45:0c:14:42:12:d1:6c:12:
         37:07:e2:33:b2:16:77:11:d8:08:67:7d:e0:48:70:49:0e:3e:
         95:23:ff:37:1b:42:83:ff:b9:53:61:de:42:89:06:d7:b0:29:
         8d:55:79:db:3a:ee:3d:b8:c1:60:b1:bf:19:7a:41:8f:0c:21:
         92:26:9e:84:b9:b1:1e:34:6c:ef:b3:27:b8:3f:e9:5d:d5:db:
         17:56:81:e9:be:8a:65:13:84:b9:8e:dc:4d:9a:ca:08:f5:25:
         e2:e1:09:2d:58:91:34:39:14:52:26:5d:1d:fe:77:53:10:21:
         58:00:19:a0:f9:af:38:4b:0d:25:ea:f6:b0:fc:fe:5d:5b:ae:
         04:e4:87:40:21:02:60:83:2a:88:30:d0:c3:24:59:58:05:7b:
         1b:3c:8e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:53 2024 by rpki-client on console-fra.rpki-client.org