Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138322e302f32342d3234203d3e203232383934.roa
File:                     3230302e39342e3138322e302f32342d3234203d3e203232383934.roa (raw, json)
Hash identifier:          ElDZQvsQXs1mHVjVZPC2n1nkNvjphIiDubV+PoVjisQ=
Subject key identifier:   8B:7A:08:4A:63:48:F5:5C:D2:82:8E:46:21:B6:C3:D5:2A:21:48:68
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       319383FACA5A93088E2DCBFCC45333EDB5822146
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138322e302f32342d3234203d3e203232383934.roa
Signing time:             Fri 26 Apr 2024 20:20:00 +0000
ROA not before:           Fri 26 Apr 2024 20:15:00 +0000
ROA not after:            Fri 25 Apr 2025 20:20:00 +0000
asID:                     22894
IP address blocks:        200.94.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:93:83:fa:ca:5a:93:08:8e:2d:cb:fc:c4:53:33:ed:b5:82:21:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 20:15:00 2024 GMT
            Not After : Apr 25 20:20:00 2025 GMT
        Subject: CN=8B7A084A6348F55CD2828E4621B6C3D52A214868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ba:5f:8f:25:98:d1:2f:91:6b:0f:87:fd:a2:
                    91:66:0e:b6:26:fd:73:4f:ef:22:e8:bb:b8:56:f6:
                    e6:d4:7a:c0:5d:6e:2d:eb:7b:0a:85:04:56:5b:ca:
                    06:e6:ea:0a:d8:3b:3f:24:5d:d9:02:9b:4d:f7:73:
                    c6:2a:06:c1:cb:db:1d:02:9a:5c:75:1a:3e:db:ca:
                    17:1c:bd:48:4f:b3:3f:3a:ce:60:d5:55:95:0e:29:
                    3b:09:82:e1:82:9b:9f:a3:4a:a5:30:38:fd:ee:02:
                    54:20:fd:e6:76:da:82:5a:81:6c:bd:b2:25:7f:70:
                    3d:8b:c7:99:a5:4d:95:24:28:ee:a7:45:5d:21:b0:
                    cf:c8:bd:ed:f2:fd:17:c3:f6:9a:34:da:ed:65:18:
                    0b:5d:5c:14:cb:53:88:6f:6a:11:f1:2e:05:c5:cb:
                    b2:27:26:16:89:30:83:36:54:f7:c0:db:66:cc:88:
                    a2:04:e5:80:cd:c6:8e:07:69:f9:73:cf:9e:14:f4:
                    bb:2f:7f:bd:a6:fc:de:2c:23:5b:86:5f:18:e4:41:
                    25:f4:48:09:34:b1:ce:1c:90:42:67:0e:c0:8a:e3:
                    b4:91:c8:08:42:e9:27:8e:07:0c:29:ac:de:21:a1:
                    7b:11:b0:7e:b6:9c:e1:62:40:c1:a6:60:ee:38:6f:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7A:08:4A:63:48:F5:5C:D2:82:8E:46:21:B6:C3:D5:2A:21:48:68
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e39342e3138322e302f32342d3234203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:d7:ef:bc:21:0c:0e:ba:94:57:b9:45:a8:6b:26:0e:8c:fe:
         82:e7:a2:ff:be:4d:8c:d6:51:e9:48:c1:55:5f:f3:f3:40:d4:
         16:70:73:5f:b2:e1:85:9e:f4:4c:62:50:94:ea:f3:46:05:c0:
         6e:2b:cf:b7:41:99:4f:cb:c1:fa:8b:ee:f0:69:d1:ce:f0:69:
         0c:32:90:08:cc:23:58:ed:ba:f9:e5:21:8e:f0:88:9e:24:bf:
         92:7f:89:86:4e:d8:d0:26:5b:c5:58:ff:a0:a6:fc:24:d3:dc:
         a4:21:c2:2e:54:30:1d:52:d8:fd:49:48:47:5c:71:4a:c6:52:
         ac:4d:f2:dc:ca:99:ad:2e:c3:59:08:c2:0a:8b:1b:a7:f2:72:
         cd:17:70:9b:f5:07:46:8b:32:b8:66:f7:8f:bd:0c:ea:13:4e:
         cc:56:89:c5:f1:91:0e:03:77:1a:11:96:c1:2d:c2:e8:4b:6b:
         74:85:85:b7:8d:f1:bb:8e:ce:6b:f6:3a:2b:7d:ad:ad:c5:bc:
         91:f1:e4:54:82:e5:ba:d4:7a:c1:9d:ae:bf:82:ac:64:8b:65:
         8b:26:7c:dd:21:bd:4e:f9:12:fe:fb:72:7e:47:e7:de:8c:81:
         a3:47:97:01:1a:73:23:1b:17:d9:b1:91:c3:1b:fb:3c:4f:a7:
         e6:66:a8:5d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMZOD+spakwiOLcv8xFMz7bWCIUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4
OTM2NkYzMzAeFw0yNDA0MjYyMDE1MDBaFw0yNTA0MjUyMDIwMDBaMDMxMTAvBgNV
BAMTKDhCN0EwODRBNjM0OEY1NUNEMjgyOEU0NjIxQjZDM0Q1MkEyMTQ4NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7ul+PJZjRL5FrD4f9opFmDrYm
/XNP7yLou7hW9ubUesBdbi3rewqFBFZbygbm6grYOz8kXdkCm033c8YqBsHL2x0C
mlx1Gj7byhccvUhPsz86zmDVVZUOKTsJguGCm5+jSqUwOP3uAlQg/eZ22oJagWy9
siV/cD2Lx5mlTZUkKO6nRV0hsM/Ive3y/RfD9po02u1lGAtdXBTLU4hvahHxLgXF
y7InJhaJMIM2VPfA22bMiKIE5YDNxo4Haflzz54U9Lsvf72m/N4sI1uGXxjkQSX0
SAk0sc4ckEJnDsCK47SRyAhC6SeOBwwprN4hoXsRsH62nOFiQMGmYO44b77VAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUi3oISmNI9VzSgo5GIbbD1SohSGgwHwYDVR0j
BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC
QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3
RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw
RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0NTMxQkFBMzg0RUY0RDkxMDc4QzEwNTI5MEM0RjBGQkMwNTIxMzhG
QzlCMjFFN0Q5MTJGQkU5QUE4QTdGMC8wLzMyMzAzMDJlMzkzNDJlMzEzODMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjM4MzkzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhetjAN
BgkqhkiG9w0BAQsFAAOCAQEAWdfvvCEMDrqUV7lFqGsmDoz+guei/75NjNZR6UjB
VV/z80DUFnBzX7LhhZ70TGJQlOrzRgXAbivPt0GZT8vB+ovu8GnRzvBpDDKQCMwj
WO26+eUhjvCIniS/kn+Jhk7Y0CZbxVj/oKb8JNPcpCHCLlQwHVLY/UlIR1xxSsZS
rE3y3MqZrS7DWQjCCosbp/JyzRdwm/UHRosyuGb3j70M6hNOzFaJxfGRDgN3GhGW
wS3C6EtrdIWFt43xu47Oa/Y6K32trcW8kfHkVILlutR6wZ2uv4KsZItliyZ83SG9
TvkS/vtyfkfn3oyBo0eXARpzIxsX2bGRwxv7PE+n5maoXQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:44 2024 by rpki-client on console-fra.rpki-client.org