Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e33322e302f31392d3234203d3e203136363239.roa
File:                     3230302e35302e33322e302f31392d3234203d3e203136363239.roa (raw, json)
Hash identifier:          t9inwhl9pRSJh4T1ONruX/j6BXzZmNK1RAvAdDsrGNc=
Subject key identifier:   8D:A4:2E:24:E5:25:FA:BF:7E:56:32:3E:01:90:CE:13:CE:7E:12:AC
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       4B040969E8F49062DF9B17F2DC462FBB126C523E
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e33322e302f31392d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:07 +0000
ROA not before:           Tue 05 Mar 2024 17:47:07 +0000
ROA not after:            Tue 04 Mar 2025 17:52:07 +0000
asID:                     16629
IP address blocks:        200.50.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:04:09:69:e8:f4:90:62:df:9b:17:f2:dc:46:2f:bb:12:6c:52:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:07 2024 GMT
            Not After : Mar  4 17:52:07 2025 GMT
        Subject: CN=8DA42E24E525FABF7E56323E0190CE13CE7E12AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:93:e2:f6:e1:ed:89:e2:42:81:7d:cf:c4:5a:
                    37:5b:2d:0b:63:ec:97:f3:5e:ba:d5:48:56:1f:0f:
                    d3:dc:eb:fb:6e:24:00:70:7e:2e:c9:62:85:a7:77:
                    99:18:28:bd:e8:eb:48:bf:4e:ab:8f:51:2d:d4:51:
                    42:d8:0e:cc:26:87:4c:49:3e:64:a9:e7:fc:4f:16:
                    3a:e1:1f:e3:e7:ae:bc:eb:f5:50:c3:cb:68:ab:cc:
                    be:c0:20:3f:38:f0:86:4a:06:52:41:4f:73:04:08:
                    be:77:2d:d1:06:76:a6:a9:90:f2:57:3f:d0:c1:0a:
                    9b:37:89:7a:07:d7:49:7e:56:a0:b6:99:84:9a:96:
                    a8:34:67:65:b7:12:0e:1e:42:8e:d9:5d:77:19:f4:
                    0c:9c:0e:07:79:31:81:19:ef:45:8f:9d:83:0c:87:
                    b4:7c:50:b3:31:22:07:fe:7c:e5:ee:2c:d1:00:64:
                    a9:79:32:14:82:a2:12:92:b7:92:b3:b2:cc:f2:fb:
                    bd:ad:96:ab:85:5e:5e:fa:5e:ca:b5:61:32:6f:08:
                    13:e2:ec:48:2a:c0:82:15:20:c7:6a:15:90:61:86:
                    04:ce:07:4d:4b:84:07:40:03:5e:07:3f:09:44:f4:
                    ad:22:37:bc:9c:26:67:86:5f:e3:89:dd:f7:b9:05:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A4:2E:24:E5:25:FA:BF:7E:56:32:3E:01:90:CE:13:CE:7E:12:AC
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e33322e302f31392d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:45:91:e4:df:ca:69:51:8d:17:ed:1e:e5:9a:21:89:ef:3b:
         a9:1c:b6:2f:a1:13:50:93:54:e0:be:d9:99:38:d5:d5:af:4e:
         f5:48:7f:b5:bd:02:7b:17:28:f2:e5:fe:9d:b5:91:fd:cf:eb:
         e9:65:83:53:3c:c7:05:f2:58:2a:0a:a7:ae:c6:b0:ba:ac:52:
         dc:8d:3d:89:40:76:fe:b5:ec:32:18:47:b3:17:dc:95:0d:5e:
         cb:37:9f:63:cf:18:0b:ca:29:46:38:00:0c:be:0e:50:27:41:
         f4:c3:43:35:b6:f0:19:80:18:58:86:fb:62:55:07:29:db:ac:
         b6:58:19:9d:1c:35:1d:ad:6d:20:ba:bc:7f:2a:93:eb:16:7e:
         84:70:cd:6c:65:f4:c3:44:58:24:64:94:b3:62:8f:db:af:b9:
         d6:fa:3a:b5:8e:9a:0a:35:a9:16:13:f1:1c:f6:1b:6e:43:ca:
         06:3a:e3:cc:ea:b7:0d:80:9a:47:59:b1:52:18:21:ec:12:ea:
         14:75:75:1c:d5:8d:28:43:41:36:89:41:91:0d:f2:1c:f1:0b:
         cd:ac:2a:e0:99:9b:b2:9e:0d:44:6d:30:04:6b:a0:46:ac:e7:
         2d:16:bd:2f:9f:1c:09:39:fd:36:a5:17:2a:45:b1:85:19:ec:
         cf:74:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org