Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e3137392e302f32342d3234203d3e203232383934.roa
File:                     3230302e32332e3137392e302f32342d3234203d3e203232383934.roa (raw, json)
Hash identifier:          SDW6cMrhOWAUGhLYV5A0b1iRlENcjcTazwYfMljuuXM=
Subject key identifier:   7A:D8:03:93:35:3B:33:D7:F3:9B:E8:DC:63:95:CE:86:0D:72:82:B6
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       72BE14FFBB984CF761129FD2AE33DB6C112B52F0
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e3137392e302f32342d3234203d3e203232383934.roa
Signing time:             Fri 26 Apr 2024 21:10:00 +0000
ROA not before:           Fri 26 Apr 2024 21:05:00 +0000
ROA not after:            Fri 25 Apr 2025 21:10:00 +0000
asID:                     22894
IP address blocks:        200.23.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:be:14:ff:bb:98:4c:f7:61:12:9f:d2:ae:33:db:6c:11:2b:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 21:05:00 2024 GMT
            Not After : Apr 25 21:10:00 2025 GMT
        Subject: CN=7AD80393353B33D7F39BE8DC6395CE860D7282B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:4f:3c:0f:8d:97:4f:6d:6d:7d:8c:8c:d7:
                    f9:fb:df:f9:af:7a:9b:08:59:ce:fd:52:cf:7a:e0:
                    26:8f:45:a9:e9:46:72:60:ae:b2:0a:5d:a6:6e:2f:
                    6e:ef:a1:c0:a2:a3:eb:4d:75:92:0d:be:81:53:83:
                    ec:da:01:d2:a3:88:54:4e:77:7a:6e:c0:a5:3e:48:
                    5b:f1:4f:57:1a:dd:9d:08:47:77:40:a8:ff:eb:d5:
                    56:bf:8f:4c:ea:1a:a5:20:09:3b:a9:10:ca:c3:27:
                    7f:17:a5:24:dd:02:11:98:4e:80:80:1c:de:da:b4:
                    13:21:63:16:ac:bd:3d:f1:89:a6:6b:0f:fd:6a:1e:
                    a3:4e:63:9f:80:08:ae:f8:12:a6:a9:5b:19:e8:62:
                    e9:fe:0f:04:d0:ec:3e:43:e5:82:b5:ff:36:f6:50:
                    a3:60:4b:01:7e:88:23:1a:05:d4:27:77:05:28:a2:
                    be:46:42:50:8b:0f:e6:96:92:eb:3b:a9:7e:37:23:
                    c0:5a:a0:67:55:84:d3:fd:31:a3:70:59:68:a4:c5:
                    58:91:90:06:ea:eb:5e:b5:fb:f2:6b:e9:a0:ce:05:
                    c6:07:16:42:d0:a7:34:37:71:2a:be:20:b0:8b:f5:
                    61:ae:23:e8:65:95:53:b0:a8:0b:94:0b:c8:f1:39:
                    25:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D8:03:93:35:3B:33:D7:F3:9B:E8:DC:63:95:CE:86:0D:72:82:B6
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e3137392e302f32342d3234203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:cb:37:00:72:33:d7:3d:a3:76:36:54:85:d7:45:24:35:97:
         cc:9a:a0:15:91:37:01:0c:ac:34:31:53:b3:58:43:af:8a:d6:
         b5:71:61:da:71:c4:11:84:03:5c:e3:a4:83:35:d1:5c:fc:c2:
         03:a1:28:ef:9e:da:53:93:0f:07:5c:ad:63:d8:8d:5d:0b:b3:
         5f:7d:88:17:b9:7e:4c:06:df:d4:bc:6c:a0:d0:dd:ca:2d:5c:
         73:95:a3:0c:b5:02:07:6d:ca:d8:a1:64:10:f6:4e:dd:79:3b:
         bc:6e:d5:b3:b2:e5:0d:bc:ee:8f:a9:b6:1b:db:15:0f:37:fd:
         a3:63:0a:9d:4d:db:5b:10:98:3d:c4:7e:bf:38:cc:1e:2c:60:
         13:38:48:ed:85:cf:44:7e:dd:fe:11:1e:fb:af:8f:21:65:e6:
         18:c9:0b:65:c8:6c:9e:e6:4a:a4:c7:d2:38:df:ae:bc:82:d9:
         ad:66:3d:de:04:5a:79:5c:ea:72:b7:57:05:5c:89:a8:3f:70:
         b1:87:c2:93:e5:f6:d9:fd:72:0c:61:cd:d8:7a:17:d7:f7:af:
         53:e7:de:79:79:00:59:7d:f2:49:d2:d9:aa:bd:0e:4e:08:7c:
         f8:fb:ee:cf:0f:4e:52:e9:c7:23:df:78:ef:c6:67:1a:13:ee:
         4b:f0:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:35 2024 by rpki-client on console-ams.rpki-client.org