Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138312e302f32342d3234203d3e203535303032.roa
File:                     3230302e39342e3138312e302f32342d3234203d3e203535303032.roa (raw, json)
Hash identifier:          cUf5/14B4gyTbYmA87Fn/pyC9Lt9qErMRBQem76tYvw=
Subject key identifier:   91:D7:30:97:5B:66:D4:B7:5C:D7:5E:EE:E5:B8:FD:A1:01:7A:D5:4A
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       3BF48FC2BAD8591CAD8E30193F2DD7B040CD54A1
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138312e302f32342d3234203d3e203535303032.roa
Signing time:             Fri 26 Apr 2024 23:15:01 +0000
ROA not before:           Fri 26 Apr 2024 23:10:01 +0000
ROA not after:            Fri 25 Apr 2025 23:15:01 +0000
asID:                     55002
IP address blocks:        200.94.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f4:8f:c2:ba:d8:59:1c:ad:8e:30:19:3f:2d:d7:b0:40:cd:54:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 23:10:01 2024 GMT
            Not After : Apr 25 23:15:01 2025 GMT
        Subject: CN=91D730975B66D4B75CD75EEEE5B8FDA1017AD54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:41:8d:9e:ac:12:6b:02:a6:88:36:4f:88:
                    82:91:bf:6b:a5:d0:7a:ca:e3:f0:c9:18:45:0f:2c:
                    70:ac:66:fc:f2:cd:4d:38:cf:52:b1:45:60:8a:bd:
                    4a:7e:3a:65:ae:6b:01:c3:4c:0d:7d:bf:4b:ce:e2:
                    33:67:a5:6b:e4:4b:4e:81:a6:48:bf:00:f3:c1:7e:
                    d2:b7:21:f0:f1:92:39:69:de:02:cf:df:51:b6:d4:
                    b6:02:e3:74:bd:1a:75:e8:45:48:fd:57:9f:3b:46:
                    95:ba:57:74:05:2e:0c:b0:24:a9:5c:82:4e:e0:08:
                    32:8b:26:e8:f7:d1:14:ca:7c:b6:87:2d:12:58:a7:
                    bb:0c:54:2b:96:0a:7d:5d:90:81:cf:f0:e5:97:1f:
                    fb:ed:a2:44:c0:5c:f7:d7:41:cc:f7:6d:2f:9b:36:
                    3f:84:01:2d:8f:8a:cd:dc:5b:87:fa:44:8e:78:da:
                    a3:71:ad:2b:9d:89:78:0f:63:61:63:b4:48:67:e5:
                    f7:21:49:c5:f7:14:7c:d9:44:fb:fb:7e:72:85:60:
                    20:f6:08:91:52:69:22:7b:bd:06:01:bc:66:81:2e:
                    ca:45:5f:af:da:6b:36:ef:8d:b2:ce:52:e2:2e:95:
                    29:93:f6:b6:ba:c0:b7:c6:19:52:d9:a9:78:a8:39:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D7:30:97:5B:66:D4:B7:5C:D7:5E:EE:E5:B8:FD:A1:01:7A:D5:4A
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138312e302f32342d3234203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e2:97:a1:52:9b:19:79:e4:e5:a7:10:99:b1:75:0c:6d:07:
         bd:b0:d0:7f:5a:19:5d:8a:ce:67:70:12:8c:6c:9e:ad:7b:4f:
         b0:79:0d:29:e8:35:48:30:e1:0a:95:e1:85:96:cb:ee:fb:b7:
         57:01:cc:80:bb:46:be:a9:86:b2:16:e1:41:4f:da:1f:e2:6a:
         11:58:33:b7:e2:09:3c:4d:39:ff:7a:6e:9f:b8:41:2b:fd:b5:
         89:7c:17:ee:4a:90:34:60:7e:86:86:18:d4:5d:93:44:9d:36:
         19:6e:32:49:7f:6a:39:e1:56:7e:92:43:2c:04:16:b2:c6:1e:
         64:7f:2b:20:1e:0e:9e:10:d3:f4:3b:84:59:65:b8:1e:a2:e8:
         63:e4:b5:19:16:60:aa:54:21:25:da:bf:2f:a2:b9:40:03:4d:
         65:46:68:5e:1b:47:3b:ce:1e:00:e8:38:ef:ce:57:ab:ae:e8:
         b8:09:b4:5e:4f:b9:00:d9:9c:9d:89:76:8f:de:0a:c0:0d:09:
         51:5e:21:f5:ca:bf:20:39:a5:ec:74:6a:db:54:6c:19:b1:02:
         b1:9e:13:e6:94:fa:ad:64:50:6b:f7:9a:36:a0:ef:61:0f:3c:
         e0:36:0e:c8:3e:e0:23:e1:de:29:15:74:05:67:38:40:bb:ec:
         27:0e:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org