Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230372e3234392e3234302e302f32302d3230203d3e2032353439.roa
File:                     3230372e3234392e3234302e302f32302d3230203d3e2032353439.roa (raw, json)
Hash identifier:          KP5dNl04OrixVavl6N3K9sW5cJmPd1d9b3c5MqNpBPk=
Subject key identifier:   9E:10:0B:B4:CD:CC:28:C5:06:18:B8:FD:3C:77:34:19:DC:DD:25:33
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       73561A2F1F35A4ABFE25CA2731C7CC595E0D4358
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230372e3234392e3234302e302f32302d3230203d3e2032353439.roa
Signing time:             Sat 10 May 2025 03:18:17 +0000
ROA not before:           Sat 10 May 2025 03:13:17 +0000
ROA not after:            Sat 09 May 2026 03:18:17 +0000
asID:                     2549
IP address blocks:        207.249.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:56:1a:2f:1f:35:a4:ab:fe:25:ca:27:31:c7:cc:59:5e:0d:43:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: May 10 03:13:17 2025 GMT
            Not After : May  9 03:18:17 2026 GMT
        Subject: CN=9E100BB4CDCC28C50618B8FD3C773419DCDD2533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:71:a3:9c:56:ca:b6:09:7d:be:19:6f:49:
                    ab:6a:87:f3:a3:bf:e6:59:1b:23:97:c5:cc:51:22:
                    14:0f:36:be:63:1d:5b:38:8d:86:80:f0:fe:12:5c:
                    9e:4d:50:31:24:fb:9f:e3:33:c8:1f:22:3e:39:5e:
                    76:bb:33:2b:97:fd:ed:e2:59:2c:bf:24:ae:b4:23:
                    b2:76:fb:d4:11:0c:32:8a:20:29:59:19:85:34:e5:
                    ac:13:43:73:af:dd:e7:b0:15:9e:60:db:97:a4:f8:
                    28:33:b3:6b:9e:1c:53:38:e9:6a:53:9c:c6:ad:d5:
                    a3:65:4b:7d:14:f9:b5:a1:79:a3:d4:0f:03:c8:c7:
                    24:44:ab:b7:85:05:50:e6:48:da:43:0f:bf:90:fe:
                    f0:ab:78:b7:e1:9b:47:06:78:1b:97:e9:63:bf:06:
                    e6:24:f4:59:c9:5a:a0:95:e7:0e:86:13:74:50:a5:
                    58:b6:55:43:04:eb:31:d6:b2:61:cd:97:68:91:c7:
                    69:2a:77:2a:a4:6b:cc:9c:78:e2:2b:37:8d:c5:a7:
                    68:0f:b7:49:27:77:ac:ef:c5:27:73:34:a5:49:d8:
                    6a:c4:42:78:11:4f:88:c4:2b:99:5f:a7:27:d5:c5:
                    dd:86:37:ca:25:f3:99:79:59:d3:20:29:e5:c0:3a:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:10:0B:B4:CD:CC:28:C5:06:18:B8:FD:3C:77:34:19:DC:DD:25:33
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3230372e3234392e3234302e302f32302d3230203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.249.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:8c:4a:87:a0:55:8e:a2:4d:18:7e:94:24:d2:ed:67:7c:90:
         4e:c1:ed:1d:1a:a5:96:1a:df:fd:7b:4c:5a:70:e3:5e:84:38:
         d3:bf:b1:4d:41:9d:fd:28:2b:88:0b:9b:48:7c:ac:63:f1:a9:
         fe:14:ae:e0:43:7a:6b:1f:3b:f1:79:6f:23:6c:80:de:0f:86:
         66:a7:dc:2a:c9:20:a9:cd:1e:a4:f8:03:7b:e3:d2:93:fd:c4:
         58:55:a2:9c:8b:6d:61:d8:b1:46:6c:83:d1:e5:12:ff:85:9e:
         71:c6:d2:c8:29:de:f0:70:c0:93:39:e2:d6:6f:0e:74:64:f9:
         9b:f1:a7:ac:67:71:04:b1:ee:45:5c:28:b1:29:06:7d:2b:5c:
         6e:9e:99:03:81:a0:2b:e0:da:4e:2b:ed:b4:ac:4c:66:82:21:
         a1:53:8d:dd:0d:b5:2a:78:8b:2c:c4:4c:ea:f0:5c:3d:22:be:
         ee:6e:56:9e:a0:c5:24:5a:0f:bd:c5:ac:08:af:7e:0e:7f:42:
         04:5c:e0:05:14:6f:e7:a8:59:c1:9d:86:43:89:0a:0e:30:5f:
         b3:1f:a6:18:39:92:80:01:07:c1:1f:8b:88:b4:dd:3a:a8:bd:
         90:09:f0:09:95:c6:3e:0d:ed:9e:67:79:ca:a0:58:b7:94:cf:
         c0:73:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:59:11 2025 by rpki-client