Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138312e302f32342d3234203d3e203232383934.roa
File:                     3230302e39342e3138312e302f32342d3234203d3e203232383934.roa (raw, json)
Hash identifier:          oiMc93+NQpDXAaTdnFgob1TexQjP/NvgT7zc82oSAPk=
Subject key identifier:   78:15:11:94:DD:7F:DE:2C:EC:D7:0D:EE:64:02:43:DC:04:AA:9C:51
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       7B26826C9FB8A0989025B61959F800ACDD60DF7F
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138312e302f32342d3234203d3e203232383934.roa
Signing time:             Fri 26 Apr 2024 23:15:01 +0000
ROA not before:           Fri 26 Apr 2024 23:10:01 +0000
ROA not after:            Fri 25 Apr 2025 23:15:01 +0000
asID:                     22894
IP address blocks:        200.94.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:26:82:6c:9f:b8:a0:98:90:25:b6:19:59:f8:00:ac:dd:60:df:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 23:10:01 2024 GMT
            Not After : Apr 25 23:15:01 2025 GMT
        Subject: CN=78151194DD7FDE2CECD70DEE640243DC04AA9C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a1:54:03:5e:6b:e7:23:9f:2a:60:f1:d7:88:
                    55:23:ea:2a:17:cd:18:fc:7b:ca:d2:bf:e2:51:a7:
                    fb:ea:02:7f:cf:52:2a:f8:22:54:3e:75:68:02:a5:
                    a0:ca:d8:7f:81:8b:f7:d1:f5:1f:dc:4b:a4:0b:85:
                    72:94:aa:3a:ee:5d:33:0f:bd:2f:1b:ec:1d:06:4b:
                    6d:f8:d7:70:65:6d:b9:7a:00:17:35:79:e0:c5:f0:
                    2a:8a:fd:3e:db:4a:87:9f:03:a5:56:e6:97:aa:18:
                    05:94:52:b8:d0:1a:92:4b:e7:56:5c:48:78:19:0c:
                    37:53:14:91:31:64:63:f1:6d:f3:ca:c8:35:4e:6c:
                    43:7c:49:cb:8a:dc:33:0c:9c:05:4c:35:17:29:6a:
                    f3:2d:76:94:08:92:f7:6c:32:a0:fa:61:27:24:73:
                    a5:05:3c:82:c1:e3:dc:e6:cb:51:7d:8d:ee:4a:8c:
                    5c:42:5c:eb:ec:13:b9:84:ff:a3:0b:80:15:56:b2:
                    7f:15:6f:c8:bb:9a:2f:90:24:a6:10:61:9d:04:42:
                    40:dc:a0:9a:b0:94:a7:01:d1:74:25:b0:c1:16:74:
                    b0:07:ba:6c:36:c8:2b:34:04:31:1d:c7:89:08:39:
                    c8:47:2a:4f:59:d7:9f:23:1b:8e:3e:23:e5:8c:92:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:15:11:94:DD:7F:DE:2C:EC:D7:0D:EE:64:02:43:DC:04:AA:9C:51
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138312e302f32342d3234203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:95:f7:43:ab:bb:a9:02:b2:af:93:65:21:eb:30:77:80:a3:
         2f:b3:17:b2:f8:bd:ea:0e:e5:54:b2:fa:72:a1:26:2b:25:3b:
         17:82:c1:be:63:81:df:ce:c7:d8:58:2c:de:e1:a3:7d:5c:7f:
         03:2b:52:ce:cd:9b:13:a1:da:c8:12:1b:f6:e4:59:48:80:37:
         f5:cf:72:20:35:ee:89:23:48:cb:a5:69:9e:0b:6b:d7:41:31:
         b1:4c:9b:a2:53:d5:56:3d:cb:06:18:d1:80:31:8d:d1:1c:94:
         4e:b8:e4:f6:07:19:43:b6:91:55:dd:36:ee:bd:6f:b0:dc:77:
         24:ad:13:15:3e:6b:fb:c0:ca:5a:cc:7f:e0:af:bd:6a:ab:82:
         d9:0a:ff:bf:a0:9f:95:f2:6a:a6:0e:e6:53:ab:8a:05:79:ab:
         9b:41:a2:8e:da:ec:5c:d4:f1:c7:ea:08:14:97:2a:54:97:a5:
         31:54:76:3d:53:a2:78:48:fe:61:31:f6:83:09:38:36:d6:b9:
         11:76:6a:a5:30:a4:4d:d8:75:d1:56:20:8b:4b:1e:0e:7e:41:
         c4:c6:3a:23:c9:a5:b2:ac:ad:03:14:f0:8e:2e:ec:69:9b:b7:
         20:27:d7:32:f0:6f:ea:af:b4:49:c2:d7:fc:7a:7a:3f:bf:68:
         7f:0c:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:24 2024 by rpki-client on console-ams.rpki-client.org