Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e39342e3234392e302f32342d3234203d3e203233323433.roa
File:                     3230302e39342e3234392e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          +it4RlhXtPlq9mJly7NMuBQjLYr/uSIcLksFleOoayI=
Subject key identifier:   63:14:64:DB:D3:7E:D2:16:C2:BC:EC:E9:DF:FC:55:20:7F:40:67:0B
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       12BC8CCE3FD3C1363269095313A9591CECBE617D
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e39342e3234392e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:40:59 +0000
ROA not before:           Tue 05 Mar 2024 17:35:59 +0000
ROA not after:            Tue 04 Mar 2025 17:40:59 +0000
asID:                     23243
IP address blocks:        200.94.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bc:8c:ce:3f:d3:c1:36:32:69:09:53:13:a9:59:1c:ec:be:61:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:35:59 2024 GMT
            Not After : Mar  4 17:40:59 2025 GMT
        Subject: CN=631464DBD37ED216C2BCECE9DFFC55207F40670B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:96:5d:5c:46:4e:94:b8:c6:3d:32:e6:c1:d4:
                    e7:2e:a4:57:dc:c7:c3:2b:fd:8a:af:eb:95:d2:e1:
                    99:e9:59:d4:57:2c:56:17:1f:6a:aa:d5:9a:89:44:
                    34:c3:c2:47:e9:03:2d:4d:81:e0:97:fc:10:29:6c:
                    61:b8:ea:0f:ae:f5:a1:0f:31:6c:10:e8:18:7e:2e:
                    b3:eb:d8:58:c8:a1:45:19:fc:b1:3a:f0:67:a0:f2:
                    6d:0f:cd:b6:c7:ee:ee:f9:13:b9:b9:76:fa:25:59:
                    1e:b8:d6:60:64:d4:aa:07:7f:0e:ed:54:49:dd:32:
                    ac:2a:9e:17:8d:5a:99:a6:ee:6e:3d:1b:a6:6d:d8:
                    bd:7a:ad:36:42:ff:08:95:82:84:f3:23:6d:9f:51:
                    77:53:80:5c:06:39:28:ed:bf:5c:c4:70:73:ad:e7:
                    fe:2c:e4:5d:5d:bc:aa:28:e8:05:96:0d:43:fc:9e:
                    ca:e9:ff:f7:36:bf:b1:7c:a4:95:bc:ba:75:a3:19:
                    fe:fb:e7:62:a5:33:ac:e6:15:29:a3:2c:b5:b5:ad:
                    79:fa:29:58:d5:68:0a:43:6a:cf:6a:59:db:3f:c3:
                    08:5c:15:1f:8d:1a:44:56:8a:11:72:eb:a4:0a:60:
                    aa:af:63:28:19:9c:60:fb:19:a9:b9:39:1a:bb:48:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:14:64:DB:D3:7E:D2:16:C2:BC:EC:E9:DF:FC:55:20:7F:40:67:0B
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e39342e3234392e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:61:1b:f4:9f:74:cf:ef:b4:1b:cd:3f:f8:fd:39:09:46:
         43:10:ec:b6:06:57:09:94:32:d4:42:21:62:f9:45:16:22:32:
         82:5e:3e:ae:2f:5d:8c:9b:e9:5a:61:5f:a4:c4:af:97:f8:73:
         64:f9:b0:33:a9:32:78:de:fa:76:49:c8:92:a5:8c:83:8c:28:
         9c:17:67:aa:06:01:f1:a8:4b:e3:a8:6f:05:ca:79:a2:f0:8b:
         13:fc:22:60:3b:8c:11:a8:e8:bf:19:f0:36:aa:c2:d8:d3:cc:
         c3:dd:b5:a8:18:a7:cf:8e:f0:b0:bc:3d:c6:7b:06:39:79:02:
         a1:6e:9f:fb:e5:f1:b0:21:64:1a:ce:b7:d4:58:ed:5d:8c:7c:
         7f:3b:47:d8:16:29:fd:f3:44:da:d6:1f:84:40:5d:d3:05:88:
         ce:ae:4f:24:0d:cd:65:78:1a:38:ad:5e:cb:fd:cd:de:81:6c:
         03:ab:08:3c:82:06:a9:fe:d6:1d:20:af:bd:d6:02:1e:a4:d8:
         fd:22:a7:4d:1f:4d:d9:b4:6f:8c:a5:32:27:14:54:ae:37:9f:
         fc:4e:18:46:2a:90:a4:6e:69:6a:74:1f:af:89:c4:ed:74:42:
         da:2a:3c:f6:b5:96:14:74:b5:db:d2:ea:5e:03:46:da:1c:9f:
         c6:54:b8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org