Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e342e302f32342d3234203d3e203237393431.roa
File:                     3230302e34312e342e302f32342d3234203d3e203237393431.roa (raw, json)
Hash identifier:          eXiJm7yHVFYwYEOybtpnQ5QtMgx18C3R2e+pek3BiM0=
Subject key identifier:   55:4D:00:E3:7A:43:20:05:8B:72:8F:C3:76:91:EA:93:0C:21:48:DF
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       5BB95D7E218A460BAC18E39428E2F820663AE111
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e342e302f32342d3234203d3e203237393431.roa
Signing time:             Tue 04 Feb 2025 18:41:35 +0000
ROA not before:           Tue 04 Feb 2025 18:36:35 +0000
ROA not after:            Tue 03 Feb 2026 18:41:35 +0000
asID:                     27941
IP address blocks:        200.41.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b9:5d:7e:21:8a:46:0b:ac:18:e3:94:28:e2:f8:20:66:3a:e1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:35 2025 GMT
            Not After : Feb  3 18:41:35 2026 GMT
        Subject: CN=554D00E37A4320058B728FC37691EA930C2148DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:22:c9:6c:f5:94:88:0e:6b:19:36:d4:0c:
                    51:70:5c:3d:01:cb:a3:0c:76:16:bd:67:a5:b5:fa:
                    66:f4:0d:48:71:f8:e8:1e:c6:fa:6b:0c:3e:72:1e:
                    0c:22:63:62:7f:82:ea:82:90:28:d9:7a:ad:33:65:
                    ba:0d:99:4e:3f:f6:22:d5:dd:51:30:26:1b:11:7d:
                    4c:1c:5e:7f:c8:a9:7b:75:53:20:06:f1:d0:f2:4d:
                    48:e1:61:e6:7b:b9:af:e6:3d:6b:11:b0:a1:dc:20:
                    0e:5f:90:50:47:0d:54:18:7c:6c:ac:34:47:01:06:
                    01:6a:97:49:69:39:7a:f3:8d:f2:6a:64:a3:3e:96:
                    0b:98:75:bd:13:d9:e8:e5:7d:00:3a:6c:9d:df:c4:
                    2e:74:62:d0:04:d1:06:6d:c5:76:ce:4f:13:96:59:
                    70:43:16:dd:6a:ca:62:ee:0d:7e:05:29:d6:80:d7:
                    95:d4:ba:b7:eb:bf:a6:c9:0c:bf:2e:e9:dc:44:64:
                    b0:6f:30:ea:e3:53:6d:f3:4c:07:28:40:c8:ac:8c:
                    35:c9:0f:a9:77:35:af:14:78:28:19:25:72:e8:71:
                    b1:bd:d0:ba:97:78:39:81:05:24:24:bc:47:5d:a7:
                    46:ea:8a:6a:d5:61:70:2e:da:7e:e3:a4:39:29:09:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4D:00:E3:7A:43:20:05:8B:72:8F:C3:76:91:EA:93:0C:21:48:DF
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e342e302f32342d3234203d3e203237393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:e5:7d:45:9e:01:72:f1:16:92:ab:85:f8:7c:b7:df:1f:f0:
         54:5d:ad:b1:6b:72:f0:92:9f:7e:04:64:0d:f9:52:37:44:b0:
         30:98:36:62:3e:db:fc:18:47:61:f9:bc:5f:02:2a:df:80:7c:
         47:74:02:1e:05:e6:66:30:2d:4c:16:f3:96:5b:af:05:9b:6e:
         03:cf:5c:b9:f2:b4:16:49:a9:4e:a5:03:36:5e:25:6a:f6:28:
         7e:75:75:28:66:e1:88:73:59:a7:f8:a5:b4:3e:98:3b:3a:97:
         de:fa:9a:e6:ac:b0:50:66:49:38:a9:88:13:45:b3:4d:49:0e:
         40:29:48:99:87:5d:aa:b1:98:05:e8:49:95:bd:21:2a:9e:00:
         8d:33:0a:0e:d4:ca:2e:38:3d:ce:1c:98:e2:6d:17:bc:42:be:
         32:e1:2f:b6:96:c4:c8:24:90:de:db:00:b9:10:13:cf:41:15:
         ba:00:e0:57:29:ac:0c:d4:ae:28:24:aa:74:a1:1a:05:bb:ee:
         d3:2d:cb:09:65:e0:0a:3a:e6:37:03:5c:f2:7f:db:5d:d0:ed:
         95:07:a5:84:0c:90:8f:dc:a4:19:1e:7d:f2:fa:15:f9:92:16:
         06:71:62:64:0e:4f:33:66:5f:13:c1:79:39:58:c9:1a:f9:d7:
         3b:30:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:06:54 2025 by rpki-client