Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e3132322e3132382f32362d3236203d3e203532343434.roa
File:                     3230302e33322e3132322e3132382f32362d3236203d3e203532343434.roa (raw, json)
Hash identifier:          E5US5p1d4Eya2Mb1YxnT2OT1j3nhvtdFMHZpQvl5iBY=
Subject key identifier:   36:12:16:0A:4C:EB:CB:0B:ED:3C:7B:05:C3:85:0E:99:D2:AC:02:DD
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       08FB4A9DEBA63B1279E3E2BBCEB813520D373B85
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e3132322e3132382f32362d3236203d3e203532343434.roa
Signing time:             Tue 05 Mar 2024 18:00:43 +0000
ROA not before:           Tue 05 Mar 2024 17:55:43 +0000
ROA not after:            Tue 04 Mar 2025 18:00:43 +0000
asID:                     52444
IP address blocks:        200.32.122.128/26 maxlen: 26

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fb:4a:9d:eb:a6:3b:12:79:e3:e2:bb:ce:b8:13:52:0d:37:3b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:43 2024 GMT
            Not After : Mar  4 18:00:43 2025 GMT
        Subject: CN=3612160A4CEBCB0BED3C7B05C3850E99D2AC02DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e8:52:2f:a4:41:ae:da:37:e0:df:51:53:79:
                    44:4f:ee:fe:f8:cc:35:ae:ad:71:75:f5:fb:89:86:
                    47:20:eb:48:49:8d:e7:22:07:d2:d8:e8:ad:f1:c3:
                    d1:b9:78:cf:c3:79:16:41:86:8b:5f:9d:a5:85:1c:
                    1a:9d:a7:88:0d:1d:1e:9f:f0:2c:a8:57:bf:5e:7b:
                    18:e0:70:f7:33:8c:42:0e:3e:96:42:e6:3f:cc:ae:
                    63:e2:9c:87:df:c1:0f:3c:11:f9:a3:d3:c6:a8:4f:
                    5e:eb:9f:09:3a:d8:0b:74:51:ff:4d:10:37:b8:5a:
                    14:fc:e1:f2:5d:45:ee:7a:09:30:f0:5b:6a:8b:0b:
                    5a:6f:68:7a:70:35:d5:51:d5:25:91:b8:b6:4f:bd:
                    4c:87:90:8a:a8:a4:39:1c:d2:58:16:96:0d:33:a5:
                    ab:5f:72:15:0b:d4:64:a9:c7:8c:23:7a:4a:8a:d6:
                    2d:b8:9f:cc:47:ca:cd:15:f1:79:74:2a:c7:77:2f:
                    bd:e0:13:3e:d3:66:31:78:d9:36:5c:f7:d4:65:06:
                    9b:b6:f9:22:da:bd:72:4c:e5:a0:6c:c6:73:41:6e:
                    6f:08:41:a8:f5:5c:10:a5:bc:80:c5:b1:ff:6e:b6:
                    0d:d9:a2:cd:7b:f6:b7:3b:9f:01:a8:20:02:12:eb:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:12:16:0A:4C:EB:CB:0B:ED:3C:7B:05:C3:85:0E:99:D2:AC:02:DD
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e3132322e3132382f32362d3236203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.122.128/26

    Signature Algorithm: sha256WithRSAEncryption
         22:94:6d:5b:96:38:e4:50:ad:f3:58:bb:5c:9c:46:be:82:9e:
         cd:03:6b:a2:d3:d6:df:fd:1c:85:3d:77:36:ba:c0:95:7c:d6:
         4c:c0:71:c0:38:60:88:e2:0a:b3:d9:c4:2e:15:6d:a7:e4:f1:
         22:19:30:d5:89:5f:a1:fe:ef:2d:9a:f7:5f:7d:0e:27:8b:12:
         19:73:be:6f:16:c8:f0:3c:cd:f6:e6:5d:58:97:14:07:8b:30:
         2b:63:4d:67:28:56:c7:cd:dc:28:b5:69:74:fd:a6:2b:2d:3f:
         de:9f:72:ce:15:4e:4b:ac:c2:c3:71:b4:b0:bb:e4:33:98:7e:
         79:35:64:25:f9:7b:d1:c9:8f:13:fe:47:a7:a6:a3:ad:b0:68:
         42:10:49:d0:bf:f6:c8:37:c2:6e:2d:a1:7f:b5:ba:83:67:b0:
         13:5d:c3:3d:f1:3e:e9:04:cc:fd:6b:ab:82:ec:70:8b:e4:86:
         7d:11:ba:d4:f5:bd:fd:12:73:7c:dd:fd:3e:7c:28:94:37:0e:
         6e:ea:1d:95:3b:3a:f3:a1:a8:91:c5:8e:b9:48:ff:39:fa:91:
         c0:84:6e:0b:6c:92:cb:68:33:56:4f:ee:53:b8:07:90:99:e7:
         55:27:5c:6e:d2:54:a5:0e:89:e9:2a:a9:a3:1a:02:db:76:ce:
         9c:ec:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:10 2024 by rpki-client on console-ams.rpki-client.org