Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e33302e302f32342d3234203d3e203238343936.roa
File:                     3230302e32332e33302e302f32342d3234203d3e203238343936.roa (raw, json)
Hash identifier:          NhkbZfBDJiMYZQkY6eEU0HMXxnl0+G6V6A628cNS5R4=
Subject key identifier:   1A:E4:AC:C5:2B:26:6B:F9:15:6E:C5:85:85:C1:EB:0C:E8:EE:16:FB
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       10EDC517CBD14BAC5A7CB89515D83143F1A3EF71
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e33302e302f32342d3234203d3e203238343936.roa
Signing time:             Fri 26 Apr 2024 20:20:00 +0000
ROA not before:           Fri 26 Apr 2024 20:15:00 +0000
ROA not after:            Fri 25 Apr 2025 20:20:00 +0000
asID:                     28496
IP address blocks:        200.23.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ed:c5:17:cb:d1:4b:ac:5a:7c:b8:95:15:d8:31:43:f1:a3:ef:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 20:15:00 2024 GMT
            Not After : Apr 25 20:20:00 2025 GMT
        Subject: CN=1AE4ACC52B266BF9156EC58585C1EB0CE8EE16FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:43:7c:77:72:a0:e4:aa:53:9f:02:95:a6:
                    81:f3:51:d6:41:ff:4e:22:8c:54:52:25:b3:a2:94:
                    d6:c8:6b:0f:9f:5d:d0:0d:ce:29:1e:12:d5:41:9d:
                    31:4e:dc:51:f5:da:07:12:72:1f:ee:4d:ee:3f:ce:
                    52:99:d5:b8:39:cd:2f:9f:e9:26:3c:77:60:18:ec:
                    0e:0b:dd:f9:13:fb:8b:67:56:79:da:4b:ab:3c:fb:
                    9f:de:24:ec:01:60:2d:98:2c:bb:61:f3:fb:35:a8:
                    0f:07:64:0f:8d:34:38:53:da:4b:d5:30:2e:30:eb:
                    29:b4:e6:d4:77:3f:cd:d2:b0:47:47:8f:62:a4:19:
                    61:c3:a3:33:ff:ef:c2:51:fc:a7:ec:42:3f:e0:35:
                    2d:9e:2e:89:9a:16:22:d9:01:34:0b:23:5d:0c:0b:
                    e9:d2:da:7b:9d:81:f0:48:e7:01:ac:42:6d:29:87:
                    61:01:19:56:65:7e:f4:a0:ec:59:2e:d6:a5:6f:04:
                    27:56:99:47:04:e0:28:03:e0:cc:77:38:87:e1:9a:
                    af:15:64:4c:3b:d4:66:e4:91:c9:ea:03:ed:b2:9a:
                    d1:ce:28:8d:bd:ae:aa:95:0f:19:84:e5:e1:39:e5:
                    b9:54:ff:48:d0:8b:1e:c6:ac:98:92:69:16:72:67:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E4:AC:C5:2B:26:6B:F9:15:6E:C5:85:85:C1:EB:0C:E8:EE:16:FB
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e33302e302f32342d3234203d3e203238343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:b0:2e:97:dd:fd:2b:54:bc:d3:2e:06:27:1a:17:d4:1d:
         bd:fa:a6:24:27:c2:67:d0:c9:af:b9:7e:f5:70:ed:9b:db:2c:
         dd:09:3b:2b:29:33:e7:1d:26:ae:1b:42:ca:98:81:85:ca:2e:
         69:83:ff:e7:b5:84:a3:7b:0d:6e:48:e8:60:58:43:69:f6:03:
         6a:e6:4c:ec:fa:8d:b6:e4:9b:33:12:b4:92:52:ae:36:d5:a3:
         85:d3:3f:61:ec:e4:7b:56:47:3a:91:31:b6:2b:8f:c1:e7:be:
         bf:2e:0d:ed:2b:f2:bd:c0:aa:01:a1:db:be:0c:49:3f:63:64:
         09:b9:c0:67:c7:14:44:c1:94:9b:6d:d7:23:10:dd:e1:4a:04:
         e5:d0:0b:fd:5e:53:bc:3a:a1:a8:6a:76:53:fe:c2:5a:c2:0b:
         d8:10:56:81:48:98:09:ca:71:7c:ff:1f:75:a3:ac:98:f7:eb:
         de:d4:b7:13:37:03:25:ea:a7:88:45:9a:59:00:d8:fb:1c:d2:
         f2:ff:ab:a5:a0:b9:59:35:b3:ee:2f:48:33:e2:fc:85:d4:14:
         b4:ae:48:a5:f1:3a:22:98:02:2e:b3:d9:10:1a:14:86:c7:9d:
         85:e9:74:78:8c:5c:00:2b:52:e0:e5:28:42:45:78:d8:58:d3:
         01:ba:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org