Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233362e302f32342d3234203d3e203237393538.roa
File:                     3230302e35302e3233362e302f32342d3234203d3e203237393538.roa (raw, json)
Hash identifier:          PXpTb3pQ3FRIXZo/Bg8eYtkXdVe63mGpJ1Z4ajgJoYA=
Subject key identifier:   22:B5:99:06:CB:7E:50:F9:9C:06:03:19:4B:E4:C6:2D:49:9F:C2:96
Certificate issuer:       /CN=41806D94B94505925BCA08B32FC096F1C4BED461
Certificate serial:       0477942C5505EE997DB7D3EE087EBBC611C5D0DC
Authority key identifier: 41:80:6D:94:B9:45:05:92:5B:CA:08:B3:2F:C0:96:F1:C4:BE:D4:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233362e302f32342d3234203d3e203237393538.roa
Signing time:             Tue 05 Mar 2024 18:08:25 +0000
ROA not before:           Tue 05 Mar 2024 18:03:25 +0000
ROA not after:            Tue 04 Mar 2025 18:08:25 +0000
asID:                     27958
IP address blocks:        200.50.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/41806D94B94505925BCA08B32FC096F1C4BED461.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/41806D94B94505925BCA08B32FC096F1C4BED461.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:77:94:2c:55:05:ee:99:7d:b7:d3:ee:08:7e:bb:c6:11:c5:d0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41806D94B94505925BCA08B32FC096F1C4BED461
        Validity
            Not Before: Mar  5 18:03:25 2024 GMT
            Not After : Mar  4 18:08:25 2025 GMT
        Subject: CN=22B59906CB7E50F99C0603194BE4C62D499FC296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:49:c1:20:a4:06:7f:2d:93:7d:fd:24:0c:e5:
                    ad:53:58:cd:6a:c5:55:39:a1:ab:90:0f:a1:88:f0:
                    b7:ec:9c:e5:b7:ea:c9:1f:33:3a:98:d6:db:8d:d0:
                    a4:12:e0:ac:57:28:d6:ef:f4:f1:a9:3c:eb:d9:26:
                    0a:db:1a:b1:2d:ba:7b:f6:5b:58:0f:40:ad:05:10:
                    10:a2:fb:81:36:ca:09:72:bf:de:c7:f5:53:6a:2f:
                    2f:02:5d:6a:c4:23:61:40:8a:07:01:1d:d0:69:53:
                    46:d6:a3:32:a0:ac:9c:ff:3d:12:11:ee:4e:78:b8:
                    71:2b:37:dd:66:06:ca:b4:c6:c1:fa:59:ec:23:52:
                    8b:4f:42:8a:f9:13:2d:35:79:06:a1:74:57:bb:74:
                    31:5d:29:3a:6a:5b:b2:6e:d3:f8:9b:96:72:1a:6b:
                    52:0e:1d:9b:f5:49:19:7c:3a:35:ec:55:7b:0a:2f:
                    88:e4:35:2c:c8:0d:03:8e:7b:8d:27:44:5d:38:b1:
                    c3:12:3b:7c:44:4a:45:42:0f:36:08:98:23:10:14:
                    27:82:82:8e:6b:13:1d:36:13:a3:2c:8c:80:0c:26:
                    3e:ec:a9:a8:b7:99:e3:2f:47:a1:15:d7:10:6d:a2:
                    63:36:59:64:5c:c4:7a:d9:e7:0b:8c:8c:41:ae:71:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B5:99:06:CB:7E:50:F9:9C:06:03:19:4B:E4:C6:2D:49:9F:C2:96
            X509v3 Authority Key Identifier:
                keyid:41:80:6D:94:B9:45:05:92:5B:CA:08:B3:2F:C0:96:F1:C4:BE:D4:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/41806D94B94505925BCA08B32FC096F1C4BED461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233362e302f32342d3234203d3e203237393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:62:c8:c2:71:98:4d:b8:40:6d:cc:f0:49:7c:c5:f2:ff:53:
         e5:20:2a:3e:ea:7a:bc:b9:34:e6:94:62:a3:63:83:cc:57:16:
         85:fd:35:33:ec:53:3a:7e:3c:68:22:fc:54:d7:ed:a5:dd:5a:
         69:1b:19:eb:5d:d3:80:b9:5f:1b:85:c7:94:c7:74:98:61:18:
         fc:f6:7a:3d:90:2a:47:16:15:fd:94:45:f2:ca:a1:c9:dc:db:
         71:1d:b1:ad:4c:f4:be:70:52:e5:fa:de:fd:a1:61:f4:2b:47:
         ae:3b:14:d2:e3:4c:d8:21:10:cd:19:b2:dd:ef:46:15:2b:04:
         31:c0:5e:03:94:4c:99:67:76:1b:39:a0:7d:c7:9f:1d:44:93:
         a5:20:d9:80:fc:f1:6b:45:f0:7e:6d:08:b7:18:8c:b2:5d:97:
         d8:68:3c:41:cf:9e:aa:54:78:32:e5:be:c6:a7:d1:33:74:d8:
         73:74:bf:24:25:fe:d7:87:a4:ad:fe:9c:fa:e4:12:5d:c4:51:
         ad:d1:85:3d:79:1d:d3:93:15:da:32:7f:e3:7c:3d:fb:3d:7a:
         e2:37:5a:2a:78:c7:6e:29:26:b9:76:83:46:b5:bf:3d:95:10:
         97:d6:cf:7f:1b:e4:ec:90:1e:cd:6b:b9:05:af:d7:95:bc:81:
         4f:21:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 09:25:23 2024 by rpki-client on console-fra.rpki-client.org