Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3137362e302f32342d3234203d3e203238343938.roa
File:                     3230302e39342e3137362e302f32342d3234203d3e203238343938.roa (raw, json)
Hash identifier:          tPL0fi1jiyuPjfAkK+bHov6MsGflOFg5e5rypvjFU5I=
Subject key identifier:   B6:E5:3B:CC:5D:79:8B:89:D7:07:1C:F4:6F:1C:0F:C1:02:17:80:E9
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       7BB7F7F0B8EAB1312D8E54CFC06CFAFD738563DC
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3137362e302f32342d3234203d3e203238343938.roa
Signing time:             Wed 22 May 2024 04:25:01 +0000
ROA not before:           Wed 22 May 2024 04:20:01 +0000
ROA not after:            Wed 21 May 2025 04:25:01 +0000
asID:                     28498
IP address blocks:        200.94.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b7:f7:f0:b8:ea:b1:31:2d:8e:54:cf:c0:6c:fa:fd:73:85:63:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: May 22 04:20:01 2024 GMT
            Not After : May 21 04:25:01 2025 GMT
        Subject: CN=B6E53BCC5D798B89D7071CF46F1C0FC1021780E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:b5:4a:a6:e9:ef:43:6e:6d:dd:c6:63:41:
                    7b:9d:e0:e6:b1:ac:b1:65:c5:cd:5a:f6:58:07:7d:
                    e3:4c:52:a4:11:b5:6b:6c:13:d5:cc:12:8c:1b:7d:
                    aa:7f:f5:49:e1:04:70:ad:4d:f0:97:20:b4:e1:38:
                    5c:a8:a2:b9:90:1b:4e:3c:bb:31:90:05:83:e2:b3:
                    70:b3:79:93:e5:fb:9e:ee:79:a4:19:07:62:76:6c:
                    e1:ae:d4:e1:6e:5e:45:ce:54:57:31:54:67:8e:28:
                    0e:dc:34:19:2b:60:c9:23:88:6c:d5:fa:d6:79:17:
                    d6:e5:5c:ed:f7:60:63:e0:ce:af:79:d5:1d:fc:10:
                    19:f3:71:95:b0:f6:ea:f3:98:2f:c9:e0:6d:11:86:
                    b5:1e:78:69:18:b5:a4:10:6f:d2:6e:75:88:e5:f6:
                    35:ba:d5:c0:68:7e:da:c0:d2:43:e3:4b:0b:05:a4:
                    8b:0e:4c:9d:44:59:7d:94:e8:e1:16:dd:fd:f7:ee:
                    b2:fc:f2:4a:a8:4e:fe:dd:f2:a7:01:f8:9c:d6:ec:
                    3c:c9:c9:1f:79:49:37:cc:ee:98:82:ee:dd:48:2d:
                    e9:d3:f5:c2:8e:af:06:5e:2a:4f:5d:14:c8:f1:52:
                    37:b6:f4:e4:a0:81:4e:3f:f1:c0:45:25:5f:2e:2f:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E5:3B:CC:5D:79:8B:89:D7:07:1C:F4:6F:1C:0F:C1:02:17:80:E9
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3137362e302f32342d3234203d3e203238343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c5:27:27:ff:3a:64:ea:a9:da:0f:f2:71:31:2f:d5:d6:f5:
         c0:78:31:e3:a7:7a:f5:09:a6:78:1f:b9:6c:ab:cf:90:92:6a:
         37:96:e0:71:b1:fb:8a:60:25:66:48:1c:eb:75:46:84:f9:52:
         24:5a:e7:cc:f8:98:d9:8e:4c:7c:e1:79:63:b4:ec:ac:7f:89:
         55:36:dc:fe:4d:df:05:3e:25:87:d0:c4:35:46:a0:07:1a:b7:
         5d:69:af:8f:f4:a8:6e:47:8b:b3:79:4e:44:f7:59:2d:04:d5:
         ab:89:74:f3:de:72:2f:36:df:8e:9a:22:9a:bc:77:17:8e:15:
         d7:47:90:ad:41:48:6e:0d:e4:c0:b4:5d:6d:f3:79:ac:b9:c8:
         67:73:db:bd:e4:55:53:33:9d:f3:da:8e:9c:32:a4:48:f1:14:
         a4:a7:61:80:97:24:60:62:c0:3a:09:92:6a:ec:01:50:82:7d:
         1e:d2:d7:30:8c:da:09:c3:92:22:8d:9c:57:87:26:53:2f:f9:
         3f:a5:96:fe:cd:38:29:f3:d6:97:12:2e:d7:b2:19:8e:7a:71:
         d5:79:5f:8c:a1:56:ea:ec:78:5c:90:71:5e:95:4e:2e:59:e5:
         ed:7a:64:d6:69:de:13:05:d1:15:25:3d:ad:b9:27:65:0b:61:
         cb:21:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:44 2024 by rpki-client on console-fra.rpki-client.org