Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3235312e302f32342d3234203d3e203238353131.roa
File:                     3230312e3133312e3235312e302f32342d3234203d3e203238353131.roa (raw, json)
Hash identifier:          t94yQdUPQoseTKZze+XCQi+BiebiR0a2MrNk1gv4ikM=
Subject key identifier:   A2:D7:0D:76:CF:9E:51:52:24:BD:D9:52:C6:A1:CB:D2:C0:58:24:04
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       719F99BBB5A2383CF64D3EC8194ADD4E5F2D6E93
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3235312e302f32342d3234203d3e203238353131.roa
Signing time:             Fri 26 Apr 2024 23:15:01 +0000
ROA not before:           Fri 26 Apr 2024 23:10:01 +0000
ROA not after:            Fri 25 Apr 2025 23:15:01 +0000
asID:                     28511
IP address blocks:        201.131.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9f:99:bb:b5:a2:38:3c:f6:4d:3e:c8:19:4a:dd:4e:5f:2d:6e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 23:10:01 2024 GMT
            Not After : Apr 25 23:15:01 2025 GMT
        Subject: CN=A2D70D76CF9E515224BDD952C6A1CBD2C0582404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:af:c1:28:5c:01:d3:a2:84:cd:42:38:3d:
                    57:4f:9d:23:86:7d:5e:a8:83:ae:20:09:b1:0d:4f:
                    b7:1e:a7:02:d0:42:25:5d:72:66:90:3d:9c:10:55:
                    15:28:54:53:4e:53:6a:1e:7f:93:54:88:26:1e:42:
                    5f:08:8e:d5:08:f4:94:78:7c:dd:4b:ed:8d:56:78:
                    f7:f5:fa:cc:0d:4e:a8:14:ec:94:8c:7a:74:e9:79:
                    bc:13:08:65:06:d2:e2:e2:42:ac:f7:3d:bc:ee:5e:
                    2e:6b:da:3c:86:02:42:1c:42:1c:6e:15:9d:1f:63:
                    32:66:49:49:9f:85:5c:2a:b5:cb:02:c8:ee:ce:a9:
                    c0:58:79:94:15:78:70:0b:20:b8:5c:7e:eb:4f:b2:
                    b5:c7:db:a9:e0:78:d4:5b:6c:4f:ea:9d:52:f4:35:
                    aa:e2:fe:17:14:1d:b2:9c:49:9c:e5:bc:92:4c:d8:
                    e9:2c:77:2b:84:b1:e3:e7:75:30:20:cb:f2:ad:4a:
                    8b:0d:f7:f4:cf:d0:bd:a7:f2:f3:61:88:2f:0b:ed:
                    58:9c:99:d1:ce:db:1c:79:d0:be:40:9d:35:e3:6b:
                    ce:85:74:c1:e6:79:67:cb:71:76:92:c6:33:d8:fd:
                    c6:f9:9f:36:07:c7:d8:b6:73:ed:c8:c1:30:a2:6d:
                    20:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:0D:76:CF:9E:51:52:24:BD:D9:52:C6:A1:CB:D2:C0:58:24:04
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3235312e302f32342d3234203d3e203238353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:3b:0f:c3:35:b7:e0:a4:37:7a:91:95:ea:21:35:60:84:
         83:4b:1c:f8:31:be:5e:a3:57:98:e9:94:a3:31:37:e0:52:eb:
         9d:42:f6:30:f8:8e:80:dc:0d:e0:85:e3:ce:14:39:72:92:cf:
         d0:7c:ac:7f:31:a2:7b:59:64:b6:cc:ec:69:7c:60:9f:97:22:
         48:d7:3d:7f:5b:1f:a4:93:ba:b6:e0:ae:59:fc:19:5d:48:dd:
         ea:0b:a6:40:3c:d9:62:06:6a:ce:1d:a3:b5:20:27:18:21:19:
         aa:54:cc:48:da:34:bc:bb:5d:a0:15:10:ad:75:dd:f1:02:b2:
         c1:f1:f8:11:05:5c:90:b6:92:47:c7:6b:7f:cb:08:3d:0c:7b:
         ed:18:92:8a:ec:b0:7f:05:c2:f1:8a:db:fb:ae:00:29:c4:61:
         f5:d5:f7:0f:12:55:88:6f:1a:63:95:a8:aa:10:87:c2:90:3b:
         3f:81:93:db:02:20:bf:14:97:84:86:f5:61:3f:61:03:59:04:
         8f:bf:6a:66:82:e6:8f:5d:e4:c1:d5:8e:de:de:db:88:b7:ad:
         7a:09:d4:4d:13:ce:80:9c:35:14:97:e9:a8:2c:20:eb:e3:16:
         d8:02:a1:73:9a:b1:90:1b:a5:9b:94:72:39:f3:99:e0:ca:25:
         58:d5:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:18 2024 by rpki-client on console-fra.rpki-client.org