Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e33332e302e302f32342d3234203d3e203238343937.roa
File:                     3230302e33332e302e302f32342d3234203d3e203238343937.roa (raw, json)
Hash identifier:          Tiai/XF8Fh8ghCsyhk8qG6zasdaOu6GJcl+3AKT+jME=
Subject key identifier:   B3:9F:2C:A1:B3:B4:74:26:CA:9C:07:BE:92:49:6C:43:FD:AD:44:7A
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       2DB01FD92BBE1AE6C2625455FD4A356709C3796B
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e33332e302e302f32342d3234203d3e203238343937.roa
Signing time:             Sat 27 Apr 2024 01:45:00 +0000
ROA not before:           Sat 27 Apr 2024 01:40:00 +0000
ROA not after:            Sat 26 Apr 2025 01:45:00 +0000
asID:                     28497
IP address blocks:        200.33.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b0:1f:d9:2b:be:1a:e6:c2:62:54:55:fd:4a:35:67:09:c3:79:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 27 01:40:00 2024 GMT
            Not After : Apr 26 01:45:00 2025 GMT
        Subject: CN=B39F2CA1B3B47426CA9C07BE92496C43FDAD447A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:a8:7c:9a:34:21:a4:71:70:46:a6:35:fe:
                    45:b3:74:fb:8e:97:e0:e9:ae:36:c6:1f:73:e4:c7:
                    fd:27:20:36:70:fe:39:2b:6e:f0:33:3d:2f:73:ed:
                    fd:0d:e2:0d:b6:95:f4:23:29:93:38:af:f3:b8:68:
                    3e:03:b0:33:c7:bb:ca:4b:19:92:09:73:2e:19:5a:
                    ec:c5:5a:01:be:11:90:88:29:a5:87:9f:4c:a6:ce:
                    29:b0:dd:f9:69:e1:87:f2:d7:a7:a7:ff:2a:8b:3b:
                    ee:c6:ee:1b:23:8e:8d:5c:dd:c7:ce:6f:ab:66:bb:
                    bd:4b:95:df:0c:b4:a2:88:02:54:ed:b8:42:86:80:
                    5c:87:d1:fb:cb:1f:4c:c3:d8:51:a5:ca:a9:de:43:
                    1c:c5:e7:ee:57:0f:07:a4:26:79:e4:b5:4d:3a:cf:
                    e5:f6:78:fb:99:9c:3b:93:7e:f1:42:d1:49:a7:4d:
                    5c:60:b0:87:4d:42:2b:ba:eb:23:d4:37:48:3a:17:
                    83:eb:b7:18:79:88:bd:75:f6:4d:50:3c:4f:2b:29:
                    08:91:34:77:f5:65:58:6f:f8:b4:4e:86:17:b4:b3:
                    a2:a3:92:16:49:1c:be:30:96:a3:7c:2d:dc:50:22:
                    9f:af:f2:3c:2f:db:3a:f5:60:54:e8:f5:1e:89:b9:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9F:2C:A1:B3:B4:74:26:CA:9C:07:BE:92:49:6C:43:FD:AD:44:7A
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e33332e302e302f32342d3234203d3e203238343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:c3:20:98:16:92:b2:e3:31:4e:d5:3f:f1:a8:8f:ff:b8:
         98:9d:06:6a:82:6c:cf:b0:ba:be:19:a3:6a:8d:08:db:4e:b7:
         62:61:6b:35:35:25:47:76:70:ee:ff:99:a5:38:d0:b8:81:79:
         e3:ea:8c:63:9f:3e:97:c2:31:da:f8:49:7b:a2:2b:30:63:67:
         5b:1c:74:b8:49:14:3b:8b:da:27:23:59:3d:4a:ff:54:96:f8:
         ee:90:12:50:df:b2:36:26:aa:f4:d4:2f:ad:ea:cf:56:31:2c:
         9c:42:5a:c1:b9:5a:f7:41:29:ee:5e:99:b7:87:0e:56:cd:08:
         e6:e2:f3:c2:e5:6c:6e:c7:c5:c9:5c:25:bf:77:0b:e1:21:3d:
         f3:ba:b5:44:ec:f0:7d:9a:e7:f8:b0:6a:4f:08:05:9f:5d:23:
         a8:c4:78:23:fa:7c:cc:dc:7a:fc:6c:07:f3:91:e8:9f:2e:57:
         89:2f:2d:f9:2c:19:65:24:18:4a:21:3d:c1:1d:da:28:34:2f:
         e2:e9:a0:0a:1f:a6:ae:f6:32:be:1c:3a:f3:6f:11:b9:8d:e0:
         cf:c9:b6:e4:8c:d7:a5:c7:61:54:7e:06:04:17:d0:b4:1f:bd:
         cb:cc:88:4d:f4:ae:d5:f7:66:30:49:f4:fe:bf:f1:aa:de:45:
         1e:ce:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org