Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e32382e302f32342d3234203d3e203230323037.roa
File:                     3230302e35352e32382e302f32342d3234203d3e203230323037.roa (raw, json)
Hash identifier:          DKy3HasoQErtxH+/FtCcSFliackfmlmDYthA8ljMGvM=
Subject key identifier:   63:A2:C5:6C:47:28:EC:B8:E3:6A:6D:3D:57:F7:9A:EC:90:69:03:9F
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       14AFABA6AD38C88712C1C3E0A99368A96D0CB084
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e32382e302f32342d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:00:42 +0000
ROA not before:           Tue 05 Mar 2024 17:55:42 +0000
ROA not after:            Tue 04 Mar 2025 18:00:42 +0000
asID:                     20207
IP address blocks:        200.55.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:af:ab:a6:ad:38:c8:87:12:c1:c3:e0:a9:93:68:a9:6d:0c:b0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:42 2024 GMT
            Not After : Mar  4 18:00:42 2025 GMT
        Subject: CN=63A2C56C4728ECB8E36A6D3D57F79AEC9069039F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:55:3c:fd:8c:94:42:35:e4:01:4c:83:31:
                    7a:7f:0f:18:b8:d1:71:b1:51:8d:6c:86:26:1d:5d:
                    6f:55:b7:d8:d0:f1:90:90:1a:71:df:6a:b6:1e:d6:
                    b8:0b:eb:4b:22:25:7c:44:01:cd:51:34:fb:ae:bb:
                    7c:45:f4:2c:33:18:d0:2c:a7:17:dc:fb:06:1f:70:
                    75:c7:34:10:20:1e:b5:a9:c5:ef:38:6a:1c:cc:4a:
                    5a:4a:4b:3e:02:69:03:1d:68:6f:09:35:e0:07:7b:
                    ec:30:af:7f:0c:94:71:e5:07:f9:ec:97:9b:a5:5c:
                    81:a5:e3:28:25:a1:db:a9:a8:7b:1a:17:6f:bd:c0:
                    80:13:ee:0a:36:23:4c:31:a6:29:3c:0a:b7:8f:fc:
                    9a:15:9f:1d:48:1e:69:69:ad:dc:67:54:63:50:c9:
                    f6:2b:8a:f8:3a:d2:8f:77:47:48:ee:ad:d8:1c:e6:
                    76:d0:d7:18:64:8b:ab:8a:d9:b2:69:8a:35:79:a6:
                    77:c3:a8:be:fb:6f:07:58:f9:81:68:87:cd:e7:ed:
                    90:2c:25:ee:1a:74:d2:30:67:a4:37:12:5d:0e:ec:
                    52:ae:8d:cf:c1:64:f0:94:07:66:e7:c6:53:41:92:
                    c6:22:c9:3f:0e:79:4f:f4:95:38:3c:40:15:77:30:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A2:C5:6C:47:28:EC:B8:E3:6A:6D:3D:57:F7:9A:EC:90:69:03:9F
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e32382e302f32342d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:7e:0b:74:43:87:bc:de:3f:24:48:96:1e:a7:79:0f:54:ab:
         e7:63:1d:35:c0:cd:c6:c8:bd:64:43:b7:c7:4f:94:b9:d3:12:
         47:2b:b5:ae:b8:f0:ef:52:f1:ab:f6:27:af:dc:e1:4a:f1:3f:
         30:d6:62:57:92:84:2e:e5:d0:49:54:69:a0:32:e8:15:d9:b4:
         0b:0c:e9:a7:74:b6:80:c5:97:36:6e:46:ce:42:34:4f:c6:23:
         16:0f:6c:33:b3:27:26:00:ab:c2:c5:55:ba:62:48:47:e8:b8:
         00:e2:01:b3:53:4c:6a:8b:bc:1f:0a:19:76:de:ee:9b:7a:b5:
         81:ab:0e:e8:58:64:66:34:f8:0f:e5:7c:36:72:20:a6:34:44:
         5a:54:7b:b5:85:95:85:e2:76:fc:cb:45:fe:c2:6e:cb:17:1c:
         2f:98:2c:78:7a:15:ae:40:6c:47:cb:e3:a6:6c:04:ac:c7:c6:
         24:c4:87:d9:c8:52:68:0c:67:a8:43:87:99:ee:9d:cb:76:78:
         e5:d6:91:7c:d6:40:d3:7f:92:17:57:7a:fd:71:8f:fb:b8:24:
         5a:de:d2:f6:f3:bf:14:d1:56:ae:e1:b9:d6:41:e8:ad:2e:6d:
         8e:e9:71:0a:54:8b:2a:82:83:8f:45:e9:2f:6b:f6:b5:82:7a:
         4b:88:97:a7
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUFK+rpq04yIcSwcPgqZNoqW0MsIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNDAzMDUxNzU1NDJaFw0yNTAzMDQxODAwNDJaMDMxMTAvBgNV
BAMTKDYzQTJDNTZDNDcyOEVDQjhFMzZBNkQzRDU3Rjc5QUVDOTA2OTAzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAlU8/YyUQjXkAUyDMXp/Dxi4
0XGxUY1shiYdXW9Vt9jQ8ZCQGnHfarYe1rgL60siJXxEAc1RNPuuu3xF9CwzGNAs
pxfc+wYfcHXHNBAgHrWpxe84ahzMSlpKSz4CaQMdaG8JNeAHe+wwr38MlHHlB/ns
l5ulXIGl4yglodupqHsaF2+9wIAT7go2I0wxpik8CreP/JoVnx1IHmlprdxnVGNQ
yfYrivg60o93R0jurdgc5nbQ1xhki6uK2bJpijV5pnfDqL77bwdY+YFoh83n7ZAs
Je4adNIwZ6Q3El0O7FKujc/BZPCUB2bnxlNBksYiyT8OeU/0lTg8QBV3MIABAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUY6LFbEco7Ljjam09V/ea7JBpA58wHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDJlMzUzNTJlMzIzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADINxwwDQYJ
KoZIhvcNAQELBQADggEBAER+C3RDh7zePyRIlh6neQ9Uq+djHTXAzcbIvWRDt8dP
lLnTEkcrta648O9S8av2J6/c4UrxPzDWYleShC7l0ElUaaAy6BXZtAsM6ad0toDF
lzZuRs5CNE/GIxYPbDOzJyYAq8LFVbpiSEfouADiAbNTTGqLvB8KGXbe7pt6tYGr
DuhYZGY0+A/lfDZyIKY0RFpUe7WFlYXidvzLRf7CbssXHC+YLHh6Fa5AbEfL46Zs
BKzHxiTEh9nIUmgMZ6hDh5nunct2eOXWkXzWQNN/khdXev1xj/u4JFre0vbzvxTR
Vq7hudZB6K0ubY7pcQpUiyqCg49F6S9r9rWCekuIl6c=
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:21 2024 by rpki-client on console-fra.rpki-client.org