Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230372e3234392e3234302e302f32302d3230203d3e2032353439.roa
File:                     3230372e3234392e3234302e302f32302d3230203d3e2032353439.roa (raw, json)
Hash identifier:          fyHAx9mFGaiTcAeqlLD/2jkw3iqtZCD4DFKGecnQwIw=
Subject key identifier:   03:59:01:DB:7D:9B:E7:12:9B:0F:4D:5A:BC:AC:2D:3E:03:B5:A8:60
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       57DC5DBB016ABEBA8C7F2DC6429F884940C29271
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230372e3234392e3234302e302f32302d3230203d3e2032353439.roa
Signing time:             Sat 08 Jun 2024 02:45:01 +0000
ROA not before:           Sat 08 Jun 2024 02:40:01 +0000
ROA not after:            Sat 07 Jun 2025 02:45:01 +0000
asID:                     2549
IP address blocks:        207.249.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dc:5d:bb:01:6a:be:ba:8c:7f:2d:c6:42:9f:88:49:40:c2:92:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: Jun  8 02:40:01 2024 GMT
            Not After : Jun  7 02:45:01 2025 GMT
        Subject: CN=035901DB7D9BE7129B0F4D5ABCAC2D3E03B5A860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:23:65:89:d0:f5:8d:31:a2:80:f6:f9:06:
                    8f:bd:51:11:26:75:38:02:f6:88:e4:38:1b:bb:3a:
                    0f:94:1d:82:22:87:61:46:84:43:75:96:a1:39:4f:
                    db:aa:da:8b:5a:15:6c:d0:58:6b:a9:ba:66:98:22:
                    47:f2:df:ae:0b:97:48:41:3c:82:02:c2:ee:d6:c0:
                    31:64:d2:d4:40:39:b0:f9:eb:11:e8:cb:6d:fd:41:
                    66:1d:f4:e3:01:e9:b6:98:86:2d:8f:9d:83:b6:be:
                    ec:ac:95:5d:84:cd:30:9c:a3:0e:9b:ce:43:69:82:
                    87:8c:7a:01:ec:3d:2f:78:12:db:8b:6e:bb:ca:ea:
                    35:cb:ee:8f:bf:04:09:f0:c3:1f:af:74:30:f7:6c:
                    ad:5f:cd:8c:fb:0a:dc:47:41:f6:67:47:dd:b6:3c:
                    10:f3:d8:5c:24:e9:cd:08:1f:09:9f:3a:78:b8:e6:
                    ef:ab:fd:ac:91:06:67:c1:26:28:da:ae:a6:1d:eb:
                    07:e1:c6:be:90:a5:23:69:f8:79:63:82:4d:3d:c4:
                    b2:39:0e:11:4c:e2:a1:e3:09:7c:2b:12:22:85:df:
                    2f:8b:ca:b5:d0:d1:40:1e:fa:36:1e:ee:b5:49:14:
                    ce:b8:05:02:c5:41:fe:41:fc:00:f9:8a:a1:8e:4d:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:59:01:DB:7D:9B:E7:12:9B:0F:4D:5A:BC:AC:2D:3E:03:B5:A8:60
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230372e3234392e3234302e302f32302d3230203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.249.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:cd:b5:c6:74:9a:4c:16:db:eb:21:e7:e8:49:ab:30:27:
         46:c0:89:64:29:4a:e5:50:74:81:13:b5:fb:46:cf:25:6e:62:
         b0:cc:ed:6f:53:d4:77:f4:fd:67:6e:6d:32:b5:a1:d0:0a:eb:
         4f:13:0a:5f:a6:e0:4b:0e:a2:91:0a:f6:e7:d2:74:b0:77:78:
         d7:89:f8:8e:e8:fa:11:44:c2:5e:da:59:e7:2a:86:3c:f6:8b:
         23:5d:d3:6e:3a:b0:ba:0b:26:a5:42:46:49:e2:3b:56:80:a9:
         85:fe:1c:1f:87:8b:1e:b6:5a:d5:c1:a3:69:57:6c:f0:40:61:
         1b:14:07:8e:24:37:d3:e4:41:28:fa:e3:87:bc:f4:45:a0:ed:
         30:da:5a:1d:83:29:b6:ef:ff:f7:86:ef:3e:cc:fb:90:3f:dc:
         fa:90:9b:2c:5f:91:a9:b2:f8:2c:48:6a:17:b1:7c:7f:de:c4:
         fc:b2:52:93:0a:16:88:be:e6:a3:07:17:27:18:c4:ed:1a:5c:
         3e:08:6f:46:28:81:a7:2d:89:18:e4:fe:5f:2e:2a:8e:a7:a6:
         d2:fe:29:07:71:2a:24:d6:88:da:c1:af:f2:1c:36:22:fa:37:
         e8:15:44:83:8b:fb:66:78:70:e1:89:10:98:06:b1:e4:b0:f0:
         bb:97:8b:6e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUV9xduwFqvrqMfy3GQp+ISUDCknEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA4OThEMTRFODVGNkJERTkwMTI0OTk4OTdFQjEzRTU4
NzRFNUI2MjAeFw0yNDA2MDgwMjQwMDFaFw0yNTA2MDcwMjQ1MDFaMDMxMTAvBgNV
BAMTKDAzNTkwMURCN0Q5QkU3MTI5QjBGNEQ1QUJDQUMyRDNFMDNCNUE4NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMCNlidD1jTGigPb5Bo+9UREm
dTgC9ojkOBu7Og+UHYIih2FGhEN1lqE5T9uq2otaFWzQWGupumaYIkfy364Ll0hB
PIICwu7WwDFk0tRAObD56xHoy239QWYd9OMB6baYhi2PnYO2vuyslV2EzTCcow6b
zkNpgoeMegHsPS94EtuLbrvK6jXL7o+/BAnwwx+vdDD3bK1fzYz7CtxHQfZnR922
PBDz2Fwk6c0IHwmfOni45u+r/ayRBmfBJijarqYd6wfhxr6QpSNp+Hljgk09xLI5
DhFM4qHjCXwrEiKF3y+LyrXQ0UAe+jYe7rVJFM64BQLFQf5B/AD5iqGOTf/HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUA1kB232b5xKbD01avKwtPgO1qGAwHwYDVR0j
BBgwFoAUUImNFOhfa96QEkmYl+sT5YdOW2IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDRENThDNTIwOTU2QzJCNUZBNkJFOUYxM0REN0NCRkI0
ODQ5ODFDRDI0OUI2NTRBNzFBOURDRkMyNjgwMzI0LzAvNTA4OThEMTRFODVGNkJE
RTkwMTI0OTk4OTdFQjEzRTU4NzRFNUI2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDg5OEQxNEU4NUY2QkRFOTAx
MjQ5OTg5N0VCMTNFNTg3NEU1QjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ0RDU4QzUyMDk1NkMyQjVGQTZCRTlGMTNERDdDQkZCNDg0OTgxQ0Qy
NDlCNjU0QTcxQTlEQ0ZDMjY4MDMyNC8wLzMyMzAzNzJlMzIzNDM5MmUzMjM0MzAy
ZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM1MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBM/58DAN
BgkqhkiG9w0BAQsFAAOCAQEAIVrNtcZ0mkwW2+sh5+hJqzAnRsCJZClK5VB0gRO1
+0bPJW5isMztb1PUd/T9Z25tMrWh0ArrTxMKX6bgSw6ikQr259J0sHd414n4juj6
EUTCXtpZ5yqGPPaLI13TbjqwugsmpUJGSeI7VoCphf4cH4eLHrZa1cGjaVds8EBh
GxQHjiQ30+RBKPrjh7z0RaDtMNpaHYMptu//94bvPsz7kD/c+pCbLF+RqbL4LEhq
F7F8f97E/LJSkwoWiL7mowcXJxjE7RpcPghvRiiBpy2JGOT+Xy4qjqem0v4pB3Eq
JNaI2sGv8hw2Ivo36BVEg4v7Znhw4YkQmAax5LDwu5eLbg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:56 2024 by rpki-client on console-fra.rpki-client.org