Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3137362e302f32302d3230203d3e2032353439.roa
File:                     3230302e33392e3137362e302f32302d3230203d3e2032353439.roa (raw, json)
Hash identifier:          ImRtrNHTGRo4NOyw5f9Rq6jdRqR+V3j6f4eRoUxLyGk=
Subject key identifier:   7E:9E:04:3E:63:79:25:2A:71:8A:32:E9:F4:74:A2:75:44:AB:E8:FC
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       4DDA7B2B257F73688A34E72BEA18FE9A11E7350C
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3137362e302f32302d3230203d3e2032353439.roa
Signing time:             Sat 08 Jun 2024 02:45:00 +0000
ROA not before:           Sat 08 Jun 2024 02:40:00 +0000
ROA not after:            Sat 07 Jun 2025 02:45:00 +0000
asID:                     2549
IP address blocks:        200.39.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:da:7b:2b:25:7f:73:68:8a:34:e7:2b:ea:18:fe:9a:11:e7:35:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: Jun  8 02:40:00 2024 GMT
            Not After : Jun  7 02:45:00 2025 GMT
        Subject: CN=7E9E043E6379252A718A32E9F474A27544ABE8FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:be:13:4a:c5:80:e6:2f:8a:8b:f3:48:df:
                    64:7a:97:08:e2:55:47:89:7d:4a:71:6b:96:ae:1e:
                    29:2e:12:d3:3d:d2:7f:f8:ed:52:74:b8:cb:08:72:
                    0f:d5:1d:ee:ac:a4:5a:97:87:1b:84:1d:90:49:ac:
                    2d:9c:e5:e8:4e:dd:5e:79:5c:fa:db:ae:5d:fc:87:
                    aa:65:a0:50:8f:db:0f:c2:be:70:6d:bd:dc:ae:ef:
                    96:0a:7c:fb:7f:89:1f:bb:07:21:67:d5:f0:db:7b:
                    0c:da:46:cf:23:8c:d2:2d:e2:43:54:8f:89:59:c7:
                    e2:57:e7:75:8c:3f:57:cd:61:d4:6b:78:c8:6e:70:
                    54:51:cf:69:6e:b5:38:11:5e:f0:38:07:e1:27:5a:
                    7c:c1:2f:88:cb:08:b1:d3:15:96:ee:37:d9:82:ab:
                    54:1a:75:98:c0:29:ca:f8:9b:63:4f:fa:1f:37:d0:
                    79:74:5d:68:37:f5:17:71:c0:fd:c2:74:b5:42:a0:
                    16:88:2a:3d:aa:4b:97:36:09:b3:59:fb:97:b3:94:
                    c2:ad:9e:21:2e:5b:87:40:c9:59:c8:d6:73:4f:c0:
                    56:20:44:23:c2:8d:59:b9:e3:02:15:21:40:2b:04:
                    5d:82:3e:3c:ce:76:04:92:64:60:73:d8:f2:65:b5:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9E:04:3E:63:79:25:2A:71:8A:32:E9:F4:74:A2:75:44:AB:E8:FC
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230302e33392e3137362e302f32302d3230203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:5c:27:1f:bf:e2:77:4b:57:cd:48:84:1b:b9:83:ab:58:c8:
         b7:16:81:47:9a:c5:a5:ae:ce:07:13:75:e8:0c:41:1e:96:77:
         2f:d0:00:85:df:b7:9f:f7:24:21:89:2c:57:d9:90:f8:4f:1d:
         8b:03:99:7c:0b:fe:be:d4:66:2b:0e:1b:90:cd:90:8f:81:a3:
         39:26:48:b9:5b:9e:3d:9e:29:27:37:37:45:3b:69:38:44:bd:
         33:0e:68:7d:f5:b1:6e:cb:50:ea:36:78:0f:d8:d5:4d:10:5a:
         72:37:6f:6a:1b:f7:9e:68:0a:56:ea:26:26:ea:e7:6b:cd:4c:
         95:8b:6c:00:2c:96:c8:ba:9a:f0:5d:68:aa:96:19:60:9d:68:
         cc:60:f6:8f:39:0d:d8:a5:16:62:87:d3:63:1e:b4:44:fa:e8:
         cb:25:cc:04:14:ef:8f:1d:84:f0:95:b7:c5:0c:ac:1b:75:0b:
         0b:1b:50:14:30:db:5a:0f:5e:14:32:ce:b8:8e:f8:83:24:26:
         ae:69:51:2e:e4:7d:54:21:63:59:f3:ed:28:fa:44:15:89:37:
         02:56:ab:07:6b:77:d9:2a:27:45:75:5e:f5:5f:9b:f1:86:4f:
         68:e6:43:fe:bb:85:3e:49:de:94:6e:7b:a2:02:16:59:22:c6:
         0a:5f:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:56 2024 by rpki-client on console-fra.rpki-client.org