Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138322e302f32342d3234203d3e2038313531.roa
File:                     3230302e39342e3138322e302f32342d3234203d3e2038313531.roa (raw, json)
Hash identifier:          VU5pKSq0YGgXmMsZq0IJfJt1j/81PYIAG6Y1yE6h8L4=
Subject key identifier:   8C:27:89:64:8B:AB:38:34:23:57:2D:09:4B:4D:7D:D1:DE:FB:18:84
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       3BF9850F6D4854A8383EBA7CAF80BB813D6022D0
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138322e302f32342d3234203d3e2038313531.roa
Signing time:             Fri 30 Aug 2024 20:55:03 +0000
ROA not before:           Fri 30 Aug 2024 20:50:03 +0000
ROA not after:            Fri 29 Aug 2025 20:55:03 +0000
asID:                     8151
IP address blocks:        200.94.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f9:85:0f:6d:48:54:a8:38:3e:ba:7c:af:80:bb:81:3d:60:22:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Aug 30 20:50:03 2024 GMT
            Not After : Aug 29 20:55:03 2025 GMT
        Subject: CN=8C2789648BAB383423572D094B4D7DD1DEFB1884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:e9:62:9f:e2:08:e1:bb:14:5e:dd:5d:85:
                    a9:93:1d:40:28:c9:c1:62:d9:4e:d9:4d:1e:d1:a5:
                    f8:01:3d:b5:2e:2f:b9:20:d7:db:5d:a4:76:f1:dd:
                    48:de:c8:63:aa:4f:04:2c:22:f6:d4:cc:8b:89:43:
                    f7:ef:a1:ce:ef:01:f9:d4:df:c7:c9:3b:08:2c:59:
                    50:cf:03:ea:72:50:67:83:d3:d6:41:d4:c3:65:9c:
                    63:d9:e8:77:d5:84:9b:18:c0:6f:71:a2:68:63:8e:
                    68:b8:75:9f:7d:77:35:1f:66:e1:ae:7f:03:a0:07:
                    59:5f:e6:ba:ee:dd:fe:20:57:2b:28:5e:be:d3:34:
                    2b:74:50:cb:cf:5e:8e:70:30:c0:e8:8e:d1:f4:47:
                    27:95:39:3e:69:b9:dd:78:cc:17:9b:d2:27:46:44:
                    dc:db:15:10:f1:0c:63:20:ef:0d:99:69:b4:14:a0:
                    3c:19:47:dd:3c:cb:08:db:f1:de:2f:fa:7a:30:63:
                    85:94:45:95:d9:8a:53:21:bc:ff:21:5d:06:b9:d8:
                    cd:3e:f7:65:35:01:0e:99:aa:4b:17:4d:d5:4a:27:
                    dc:e1:59:77:ef:6e:bb:61:08:14:c9:ec:27:52:9f:
                    63:f6:b0:7f:54:a4:b4:f4:ab:a2:09:fc:05:94:d4:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:27:89:64:8B:AB:38:34:23:57:2D:09:4B:4D:7D:D1:DE:FB:18:84
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138322e302f32342d3234203d3e2038313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:87:ee:8e:11:3d:8d:6b:27:6c:c3:b2:aa:7b:ff:fe:b9:4e:
         b1:e6:02:c2:5c:b0:4d:e3:97:d1:7b:83:80:11:a7:9c:8a:cc:
         c8:35:40:6e:41:48:96:f7:aa:23:85:cd:6a:88:62:83:ec:88:
         ac:73:57:a3:c4:c3:82:86:45:2e:38:16:0a:37:95:ed:5b:6c:
         b5:2a:58:c3:0a:ce:61:de:00:7c:f6:18:89:d1:69:91:2b:87:
         67:c4:68:3b:48:cf:67:74:b5:20:ef:72:bb:23:3e:bc:b7:bb:
         7d:d6:77:74:83:30:a9:0a:5b:36:b8:c2:83:64:6f:af:26:5b:
         3d:76:57:b3:54:07:c1:0e:fe:66:73:1b:75:d9:09:1a:2e:8f:
         79:e5:bd:9a:fa:7a:23:e1:0d:b7:af:11:a7:42:2d:b1:78:3c:
         52:f4:f8:ed:ba:82:bf:58:ee:d4:89:63:fb:e7:b6:f2:55:f8:
         8f:ef:41:0c:4e:d7:ff:8b:3b:15:95:cc:91:96:c8:4c:f1:05:
         e0:16:ad:97:de:6d:2e:b4:f5:61:60:d9:94:62:f5:2c:cb:45:
         a6:9c:19:6b:12:2f:d7:c6:d5:af:48:9f:2c:ce:9e:64:9c:fe:
         cf:bd:24:f6:07:14:b3:b9:dd:46:e7:f3:2a:d4:f3:f3:3c:54:
         f6:ec:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:18 2024 by rpki-client on console-fra.rpki-client.org