Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138302e302f32342d3234203d3e203232383934.roa
File:                     3230302e39342e3138302e302f32342d3234203d3e203232383934.roa (raw, json)
Hash identifier:          AN9RvyTQk0JBYLQsBZYIK0poB0/qEoqpCJxvu+L1sIE=
Subject key identifier:   73:62:6B:99:36:0B:CB:92:6B:B2:01:C9:F0:F9:53:D0:88:07:4D:85
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       3AA595FEDFD70DDD44CBCF0B206E88CCBBE52BCC
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138302e302f32342d3234203d3e203232383934.roa
Signing time:             Fri 26 Apr 2024 23:15:00 +0000
ROA not before:           Fri 26 Apr 2024 23:10:00 +0000
ROA not after:            Fri 25 Apr 2025 23:15:00 +0000
asID:                     22894
IP address blocks:        200.94.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a5:95:fe:df:d7:0d:dd:44:cb:cf:0b:20:6e:88:cc:bb:e5:2b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 23:10:00 2024 GMT
            Not After : Apr 25 23:15:00 2025 GMT
        Subject: CN=73626B99360BCB926BB201C9F0F953D088074D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d9:94:7a:6d:8a:72:06:eb:9d:54:a3:46:33:
                    30:7a:b3:5d:23:10:02:8e:b2:45:18:66:9d:b8:cc:
                    15:e3:56:99:ee:d0:7f:71:a8:6f:23:c9:b3:82:6e:
                    84:57:78:7c:e0:45:43:22:c2:0a:51:e2:3b:bd:5c:
                    99:d5:8e:4e:f5:4e:32:5a:4e:a6:b9:bb:05:58:d9:
                    60:16:23:51:9f:7d:7a:e4:21:a1:9c:72:8e:7f:64:
                    3e:33:37:c5:e7:88:98:0c:9b:f1:d8:05:7b:9d:42:
                    b2:e8:c0:2c:2e:19:b0:10:a2:bd:ad:7b:6f:25:54:
                    87:45:a4:14:2e:bc:b5:45:b8:d8:e7:fd:02:81:02:
                    a6:d3:3f:c0:5f:4c:85:b7:d3:cb:25:e2:85:77:03:
                    f7:d5:fe:8a:04:73:6b:3f:c0:91:80:90:a0:4a:fb:
                    75:8f:35:9c:7a:fa:ad:a3:0f:2b:6d:ae:7a:60:9e:
                    5c:d4:86:fd:dc:91:b1:d9:bc:56:b5:fb:1b:56:14:
                    c0:ad:8c:4d:98:e2:3d:77:c4:12:92:07:c6:d4:7e:
                    72:ea:bb:12:c5:20:15:74:fd:b9:44:cb:16:61:53:
                    5b:9c:64:51:8d:45:66:a9:71:a3:93:6c:b2:90:6a:
                    96:5c:6d:43:fa:07:a3:2f:6d:fe:dc:01:6c:ee:72:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:62:6B:99:36:0B:CB:92:6B:B2:01:C9:F0:F9:53:D0:88:07:4D:85
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138302e302f32342d3234203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:15:25:02:3a:f4:b8:e2:8e:09:bc:46:e8:61:66:3b:80:ba:
         22:0b:9f:24:21:7a:22:f7:e7:bf:96:a0:aa:0b:e7:ff:e6:fa:
         21:9d:d1:ac:50:46:e9:1b:1c:a6:14:4a:f0:36:50:85:dd:f7:
         d4:ef:69:33:a3:b1:74:e7:ed:26:67:c4:bd:30:1c:5c:4c:ca:
         f9:4c:0a:b6:2d:8d:27:ae:53:3e:9c:d8:a0:f3:7f:e1:03:64:
         9d:3b:5b:c6:7e:ad:dc:b9:9b:6b:31:a3:80:76:24:64:30:a6:
         68:dc:8c:c0:40:09:f5:51:13:46:f8:04:ef:e9:53:ff:b8:39:
         ea:9d:3a:0c:5d:02:49:f6:b6:b5:8f:a0:7d:f6:8f:93:13:c2:
         1c:42:f4:6f:06:1e:3a:dd:f2:ee:d0:8b:7f:7d:a2:67:b5:d2:
         ec:a0:d4:b2:4e:98:49:42:65:17:ce:15:00:7e:0c:54:71:85:
         ee:34:1b:7f:0d:4e:3c:18:8f:41:24:c5:bc:d4:3a:e8:28:21:
         f5:a4:db:b9:00:b4:9e:5f:60:58:2b:c5:31:9c:08:b0:57:53:
         fb:20:d1:9b:65:bc:eb:69:d8:d4:aa:ab:7e:b2:a1:6d:67:b4:
         e4:e0:95:4a:f7:c1:71:08:d9:e2:cc:52:86:5f:01:47:fc:ad:
         a9:21:11:d4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOqWV/t/XDd1Ey88LIG6IzLvlK8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4
OTM2NkYzMzAeFw0yNDA0MjYyMzEwMDBaFw0yNTA0MjUyMzE1MDBaMDMxMTAvBgNV
BAMTKDczNjI2Qjk5MzYwQkNCOTI2QkIyMDFDOUYwRjk1M0QwODgwNzREODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2ZR6bYpyBuudVKNGMzB6s10j
EAKOskUYZp24zBXjVpnu0H9xqG8jybOCboRXeHzgRUMiwgpR4ju9XJnVjk71TjJa
Tqa5uwVY2WAWI1GffXrkIaGcco5/ZD4zN8XniJgMm/HYBXudQrLowCwuGbAQor2t
e28lVIdFpBQuvLVFuNjn/QKBAqbTP8BfTIW308sl4oV3A/fV/ooEc2s/wJGAkKBK
+3WPNZx6+q2jDyttrnpgnlzUhv3ckbHZvFa1+xtWFMCtjE2Y4j13xBKSB8bUfnLq
uxLFIBV0/blEyxZhU1ucZFGNRWapcaOTbLKQapZcbUP6B6Mvbf7cAWzuckzPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUc2JrmTYLy5JrsgHJ8PlT0IgHTYUwHwYDVR0j
BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC
QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3
RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw
RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0NTMxQkFBMzg0RUY0RDkxMDc4QzEwNTI5MEM0RjBGQkMwNTIxMzhG
QzlCMjFFN0Q5MTJGQkU5QUE4QTdGMC8wLzMyMzAzMDJlMzkzNDJlMzEzODMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjM4MzkzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhetDAN
BgkqhkiG9w0BAQsFAAOCAQEARBUlAjr0uOKOCbxG6GFmO4C6IgufJCF6Ivfnv5ag
qgvn/+b6IZ3RrFBG6RscphRK8DZQhd331O9pM6OxdOftJmfEvTAcXEzK+UwKti2N
J65TPpzYoPN/4QNknTtbxn6t3LmbazGjgHYkZDCmaNyMwEAJ9VETRvgE7+lT/7g5
6p06DF0CSfa2tY+gffaPkxPCHEL0bwYeOt3y7tCLf32iZ7XS7KDUsk6YSUJlF84V
AH4MVHGF7jQbfw1OPBiPQSTFvNQ66Cgh9aTbuQC0nl9gWCvFMZwIsFdT+yDRm2W8
62nY1KqrfrKhbWe05OCVSvfBcQjZ4sxShl8BR/ytqSER1A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org