Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e312e302f32342d3234203d3e203238343938.roa
File:                     3230302e32332e312e302f32342d3234203d3e203238343938.roa (raw, json)
Hash identifier:          Hmr7wobAKyZMqPiqoJu1ont9KzrM7uyTx4QROIO5ZGA=
Subject key identifier:   6D:AB:A1:74:23:A6:E1:70:4D:DF:1E:96:48:D5:87:84:BB:ED:3E:2D
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       66EBF7FC0BC88647E09DF15412299263B70E8C41
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e312e302f32342d3234203d3e203238343938.roa
Signing time:             Wed 22 May 2024 04:25:00 +0000
ROA not before:           Wed 22 May 2024 04:20:00 +0000
ROA not after:            Wed 21 May 2025 04:25:00 +0000
asID:                     28498
IP address blocks:        200.23.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:eb:f7:fc:0b:c8:86:47:e0:9d:f1:54:12:29:92:63:b7:0e:8c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: May 22 04:20:00 2024 GMT
            Not After : May 21 04:25:00 2025 GMT
        Subject: CN=6DABA17423A6E1704DDF1E9648D58784BBED3E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:04:27:3a:05:4a:76:34:da:9c:a5:ac:f6:
                    9a:05:33:8a:4d:f9:c8:8f:25:09:a7:7c:f0:e8:c7:
                    86:b5:b0:e3:b7:14:83:c4:6a:e4:92:14:3b:f8:9b:
                    c7:85:b3:a1:85:9f:d3:ba:71:61:c7:23:12:1f:bf:
                    e8:c1:17:6e:d5:3a:67:86:f1:35:61:fe:4f:31:37:
                    0e:1e:f0:96:4d:32:09:31:d9:c0:bc:3e:3b:bc:87:
                    5f:17:e6:03:01:ab:df:29:66:07:d7:58:b8:d4:79:
                    0a:ba:f1:1e:76:7e:b8:63:cc:e3:0b:2f:71:b0:f9:
                    a7:ff:c4:5e:4a:c3:d9:27:76:7f:04:3f:28:d6:31:
                    92:13:5b:46:57:97:63:4a:e4:f3:7c:c4:44:a2:21:
                    01:b2:49:f8:70:03:c1:c9:0a:fe:1c:41:a3:94:61:
                    97:83:f4:79:c2:5a:c8:ee:93:15:8a:b1:dd:41:bc:
                    10:1b:81:6e:f3:29:25:d0:f4:10:14:3c:c6:cf:6f:
                    48:eb:4b:f3:c7:10:da:ad:29:91:bf:25:73:3a:44:
                    9f:e7:6d:40:57:1a:16:57:9a:6a:6b:5b:7b:4b:82:
                    ee:25:be:bd:a6:31:f7:dc:16:d7:4b:21:db:16:7a:
                    d4:97:79:ed:04:97:90:97:84:1d:b7:51:3c:9a:33:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AB:A1:74:23:A6:E1:70:4D:DF:1E:96:48:D5:87:84:BB:ED:3E:2D
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e312e302f32342d3234203d3e203238343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a7:7d:f4:aa:42:cd:8b:7b:37:90:cd:be:18:4b:a7:09:68:
         6e:bd:c3:e4:2f:e6:4c:a8:46:b0:f8:c3:26:31:3a:5c:63:15:
         44:fb:2b:98:d3:cd:83:9c:37:e7:64:9a:eb:9a:82:c2:c5:2f:
         2f:8c:5c:c2:d2:f2:35:f7:b8:0b:b7:ce:bf:05:b4:bc:11:48:
         7f:8d:66:f0:ca:c1:1e:61:5a:f6:71:81:3b:76:a9:12:4a:eb:
         e8:5c:72:2b:a9:08:df:09:6d:9f:98:1e:6a:10:5a:e1:8e:4e:
         c5:ca:08:30:ef:fe:a4:4d:c2:6f:a7:82:71:64:de:1a:df:16:
         6c:16:34:8d:79:b4:d7:e4:41:6a:71:ed:3f:ae:2d:32:df:e4:
         52:7e:cc:d7:0b:89:cf:32:78:19:4c:d9:ea:5b:d6:c6:79:51:
         da:6a:1c:c0:78:24:92:dc:d0:08:15:ed:d8:e6:85:ce:4a:06:
         e7:c4:12:3b:fd:9c:0c:f3:1d:c9:7c:5a:b9:a1:4c:7d:b3:25:
         1e:51:c3:a7:ad:1e:99:88:5e:4b:1b:09:c3:d6:a9:25:55:a3:
         6d:3c:7d:6d:9e:2e:0b:9b:c5:0d:c7:a7:a4:a0:e5:ba:2c:a1:
         3e:be:c3:91:00:45:7c:e7:ff:5b:d7:6e:90:8d:92:62:37:b7:
         d7:b5:10:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:17 2024 by rpki-client on console-fra.rpki-client.org