Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235322e302f32342d3234203d3e20323730303439.roa
File:                     3230302e35352e3235322e302f32342d3234203d3e20323730303439.roa (raw, json)
Hash identifier:          psCYby9q4NSA9QVIs4BhGqgOOSaViJrfVBn2UT2xHf0=
Subject key identifier:   2A:3B:97:B6:E5:7C:64:D3:3F:09:A6:D6:B4:4B:19:65:6B:F4:A0:46
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       318149D1F40486EDA4F4419328C1B49F596E24F2
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235322e302f32342d3234203d3e20323730303439.roa
Signing time:             Wed 22 May 2024 22:45:00 +0000
ROA not before:           Wed 22 May 2024 22:40:00 +0000
ROA not after:            Wed 21 May 2025 22:45:00 +0000
asID:                     270049
IP address blocks:        200.55.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:81:49:d1:f4:04:86:ed:a4:f4:41:93:28:c1:b4:9f:59:6e:24:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: May 22 22:40:00 2024 GMT
            Not After : May 21 22:45:00 2025 GMT
        Subject: CN=2A3B97B6E57C64D33F09A6D6B44B19656BF4A046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:3c:b8:e6:f6:6e:cd:1a:b1:dc:7a:13:04:
                    38:8f:44:64:0e:7d:e5:c9:7e:9d:46:6a:89:ed:d6:
                    86:32:7e:b0:82:f6:4b:a6:e1:64:cb:69:63:6f:71:
                    7b:f9:20:53:5b:a5:e3:ac:d6:c7:a8:51:c8:d3:cb:
                    c8:d5:47:ac:b0:f9:3a:92:e0:06:39:0f:ac:64:20:
                    30:ea:7e:43:5e:80:09:9a:a3:9c:a9:ff:45:38:0e:
                    8a:d4:34:50:b3:13:1e:42:66:2b:d3:06:ca:ff:90:
                    72:ad:06:8f:e8:f0:5d:ff:93:63:da:d8:46:1b:1a:
                    e7:dd:28:77:98:9a:89:02:01:6e:5c:0a:0c:c2:20:
                    31:e2:a3:c9:79:81:17:d4:86:31:51:39:ad:f4:99:
                    04:0a:59:41:24:24:1b:15:bb:36:82:98:ca:66:41:
                    a9:92:a1:75:f7:49:66:48:6d:e5:75:17:98:bf:34:
                    f3:12:f0:2d:2b:e9:6a:5b:1a:37:7f:a2:69:bf:c2:
                    76:c2:13:86:ac:9a:1a:e7:1d:42:07:55:e4:c8:b6:
                    ab:9b:ac:c5:1c:d2:a9:9b:ab:58:10:52:3d:d3:81:
                    08:59:0f:a1:e7:59:f3:05:54:46:69:cf:a2:86:f8:
                    d0:30:e6:36:50:a6:2f:ab:d0:c4:45:18:10:e7:07:
                    77:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3B:97:B6:E5:7C:64:D3:3F:09:A6:D6:B4:4B:19:65:6B:F4:A0:46
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235322e302f32342d3234203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:33:d6:c6:54:c8:9d:4a:39:58:51:0a:60:43:c8:d3:fa:fc:
         dc:42:1b:9c:aa:9e:a8:a1:5e:c9:c5:2b:dc:a0:ee:73:ca:97:
         ff:45:6e:0c:e7:63:bf:e8:4c:c0:18:a9:f0:ab:8c:72:fa:45:
         1a:37:ae:c2:77:7c:96:02:38:11:5b:c0:70:3a:cf:d8:fe:9d:
         2c:db:4b:47:5d:0b:f9:57:75:9a:77:e7:62:c6:7b:ab:f0:83:
         06:32:53:7f:14:40:f4:8b:ef:27:a5:7a:62:55:b2:3d:ff:93:
         2a:fc:8a:33:ae:bb:73:9e:43:f8:22:1f:e2:a9:5e:4c:8c:63:
         cf:f6:8c:42:46:67:7b:a4:0b:0b:3e:29:16:e8:37:73:38:95:
         0d:d6:1c:91:21:97:2b:95:fa:d7:44:24:85:e0:43:44:ad:7e:
         af:d1:bd:4a:93:df:64:08:65:59:b1:8d:6f:97:fe:73:84:46:
         67:dc:e6:61:db:80:87:d8:3d:77:ea:fc:69:7b:a2:96:ed:1f:
         db:f4:6b:7e:75:bb:7a:1c:87:6f:5c:ed:1c:bd:11:68:cb:04:
         67:36:3f:6f:1d:82:bf:56:8a:9c:12:df:66:c9:04:b2:05:9e:
         40:2e:a3:95:36:49:41:78:8b:65:12:7f:40:be:18:4d:17:a0:
         c9:13:96:11
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMYFJ0fQEhu2k9EGTKMG0n1luJPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM1MEIxOTM1Q0REOTUxRThGQjU3MkE1QUYzQzQxOUFD
NEQ0ODdFNDAeFw0yNDA1MjIyMjQwMDBaFw0yNTA1MjEyMjQ1MDBaMDMxMTAvBgNV
BAMTKDJBM0I5N0I2RTU3QzY0RDMzRjA5QTZENkI0NEIxOTY1NkJGNEEwNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyijy45vZuzRqx3HoTBDiPRGQO
feXJfp1Gaont1oYyfrCC9kum4WTLaWNvcXv5IFNbpeOs1seoUcjTy8jVR6yw+TqS
4AY5D6xkIDDqfkNegAmao5yp/0U4DorUNFCzEx5CZivTBsr/kHKtBo/o8F3/k2Pa
2EYbGufdKHeYmokCAW5cCgzCIDHio8l5gRfUhjFROa30mQQKWUEkJBsVuzaCmMpm
QamSoXX3SWZIbeV1F5i/NPMS8C0r6WpbGjd/omm/wnbCE4asmhrnHUIHVeTItqub
rMUc0qmbq1gQUj3TgQhZD6HnWfMFVEZpz6KG+NAw5jZQpi+r0MRFGBDnB3fDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKjuXtuV8ZNM/CabWtEsZZWv0oEYwHwYDVR0j
BBgwFoAUXFCxk1zdlR6PtXKlrzxBmsTUh+QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODlEOTI3RUI5MDkxOTE3RjgxRDY3OEE0MUVBNDc2OTM1
ODg0MUQ5Nzc4REYyREExMDlDMzEzQjNFNzhBNkU4LzAvNUM1MEIxOTM1Q0REOTUx
RThGQjU3MkE1QUYzQzQxOUFDNEQ0ODdFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzUwQjE5MzVDREQ5NTFFOEZC
NTcyQTVBRjNDNDE5QUM0RDQ4N0U0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg5RDkyN0VCOTA5MTkxN0Y4MUQ2NzhBNDFFQTQ3NjkzNTg4NDFEOTc3
OERGMkRBMTA5QzMxM0IzRTc4QTZFOC8wLzMyMzAzMDJlMzUzNTJlMzIzNTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyDf8
MA0GCSqGSIb3DQEBCwUAA4IBAQC+M9bGVMidSjlYUQpgQ8jT+vzcQhucqp6ooV7J
xSvcoO5zypf/RW4M52O/6EzAGKnwq4xy+kUaN67Cd3yWAjgRW8BwOs/Y/p0s20tH
XQv5V3Wad+dixnur8IMGMlN/FED0i+8npXpiVbI9/5Mq/IozrrtznkP4Ih/iqV5M
jGPP9oxCRmd7pAsLPikW6DdzOJUN1hyRIZcrlfrXRCSF4ENErX6v0b1Kk99kCGVZ
sY1vl/5zhEZn3OZh24CH2D136vxpe6KW7R/b9Gt+dbt6HIdvXO0cvRFoywRnNj9v
HYK/VoqcEt9myQSyBZ5ALqOVNklBeItlEn9AvhhNF6DJE5YR
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org