Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e31362e342f33302d3330203d3e20323636373639.roa
File:                     3230302e35352e31362e342f33302d3330203d3e20323636373639.roa (raw, json)
Hash identifier:          gxORlh/jluhaWun8t+PYWyP6R3LER8mh+zyG4rM/hMY=
Subject key identifier:   15:AA:84:4A:B3:FC:09:E0:20:85:47:8F:EE:7B:BF:4C:96:8E:74:16
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       58FB527D751A5688867EBFD95CD2C0B81ADE6AEF
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e31362e342f33302d3330203d3e20323636373639.roa
Signing time:             Tue 05 Mar 2024 18:00:43 +0000
ROA not before:           Tue 05 Mar 2024 17:55:43 +0000
ROA not after:            Tue 04 Mar 2025 18:00:43 +0000
asID:                     266769
IP address blocks:        200.55.16.4/30 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fb:52:7d:75:1a:56:88:86:7e:bf:d9:5c:d2:c0:b8:1a:de:6a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:43 2024 GMT
            Not After : Mar  4 18:00:43 2025 GMT
        Subject: CN=15AA844AB3FC09E02085478FEE7BBF4C968E7416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:d1:0d:5c:c2:96:45:b2:3a:9f:68:2f:13:
                    2e:f8:ea:51:3a:89:2d:cb:25:d0:b6:3a:f1:23:aa:
                    0d:e6:99:14:65:6d:78:27:7e:c7:97:99:cb:4f:21:
                    a0:03:5d:b0:bb:8a:65:33:d9:4d:22:46:79:93:3b:
                    73:8f:63:2b:d5:9a:b1:76:62:8b:0b:cf:c6:6a:f5:
                    a2:0c:62:a6:64:ea:f7:8e:7a:33:88:a9:85:a6:f3:
                    c3:41:2d:c5:69:54:d8:a4:39:4d:e4:e5:dc:a4:eb:
                    69:ea:31:bf:6e:dc:26:12:b7:9a:54:1a:be:db:ff:
                    b8:b2:6e:cd:3c:c2:39:84:42:0d:30:1a:54:64:d3:
                    f7:81:a9:6e:c3:66:1d:59:b1:2f:b4:50:3e:3a:b1:
                    f4:5f:b4:05:0f:1c:7a:7d:be:e6:b3:82:4c:43:5b:
                    4d:69:72:29:df:51:2e:9b:e1:ad:c5:b4:5e:ba:f2:
                    ba:d9:5e:e8:65:ba:88:b3:41:aa:9d:b3:a5:3e:9c:
                    2d:68:90:7c:cb:ce:73:34:7c:22:62:7f:b9:6c:ca:
                    89:8f:4f:f5:ce:e7:64:92:db:3b:a6:17:08:d8:0d:
                    ba:6c:33:33:bf:07:23:2b:67:e8:61:56:f4:00:3f:
                    91:91:f3:d7:04:46:81:e5:57:fb:0b:3c:dc:bb:47:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AA:84:4A:B3:FC:09:E0:20:85:47:8F:EE:7B:BF:4C:96:8E:74:16
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e31362e342f33302d3330203d3e20323636373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.16.4/30

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:e6:4e:9d:c1:33:22:97:ca:58:55:a2:36:86:4d:8f:b4:
         77:61:25:84:29:38:39:6e:38:69:f1:17:e7:94:e1:4d:2b:6e:
         49:62:3b:53:1d:7e:ea:84:5e:8f:66:ae:e1:28:99:bb:9f:ae:
         5f:3e:0c:4b:63:90:ae:d1:1a:42:9b:e8:cb:ab:78:7f:c1:09:
         22:c0:db:f6:cf:68:b7:52:c9:7a:a2:df:7d:81:8e:d0:f7:7c:
         87:86:06:0e:72:4c:04:d1:98:1f:f5:58:57:08:ed:70:c6:78:
         82:8f:df:ce:b0:a7:ae:aa:07:aa:ee:92:7f:1a:f5:8b:79:74:
         cf:03:ce:8e:86:b6:7c:0e:c2:cf:a6:98:60:9b:c3:47:1a:c6:
         a3:03:fb:ff:40:21:41:ab:2a:31:17:e4:32:4c:1b:18:77:05:
         53:c4:2b:fd:3c:c1:a2:3b:2d:64:f1:64:99:72:e0:42:b0:3d:
         42:93:71:8b:b7:81:95:2e:ce:09:f0:19:8a:ee:8a:69:e2:e3:
         5d:6f:47:46:e0:99:9d:73:e0:1d:8a:87:71:83:21:21:ab:62:
         34:81:5e:e4:e7:6f:5e:4a:58:02:e0:af:c5:1d:07:29:7c:20:
         5c:ee:64:90:a2:03:a5:d7:35:29:ca:00:a4:9c:b9:cf:72:fb:
         28:62:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org