Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3234382e302f32342d3234203d3e203232383934.roa
File:                     3230312e3133312e3234382e302f32342d3234203d3e203232383934.roa (raw, json)
Hash identifier:          v0pqssotQaHIFXRf83L1aJ3J/tNka1jsCPfiBlpPjeE=
Subject key identifier:   EA:82:BF:1D:92:CE:B0:DC:C5:C9:F4:F5:DC:BD:EE:26:FB:45:AE:F7
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       6C2324ED1DD0288B1D5ECB3B1756ED8E116D142E
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3234382e302f32342d3234203d3e203232383934.roa
Signing time:             Fri 26 Apr 2024 22:45:02 +0000
ROA not before:           Fri 26 Apr 2024 22:40:02 +0000
ROA not after:            Fri 25 Apr 2025 22:45:02 +0000
asID:                     22894
IP address blocks:        201.131.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:23:24:ed:1d:d0:28:8b:1d:5e:cb:3b:17:56:ed:8e:11:6d:14:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Apr 26 22:40:02 2024 GMT
            Not After : Apr 25 22:45:02 2025 GMT
        Subject: CN=EA82BF1D92CEB0DCC5C9F4F5DCBDEE26FB45AEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:23:d2:14:f0:88:8b:f2:e7:6c:07:63:fa:
                    bd:ad:d0:e4:1d:2f:68:5c:30:b0:06:76:1d:28:76:
                    a5:8b:46:e1:49:bc:93:83:ae:37:f7:a5:b2:3e:a8:
                    2b:82:57:c0:04:c9:88:c3:1e:69:11:42:47:b4:cf:
                    cf:32:6a:29:ef:40:5e:f4:46:01:02:de:2b:05:87:
                    ce:cd:f0:38:e5:ad:d3:82:18:b8:b9:7b:d3:8a:13:
                    73:39:3d:dc:a1:75:d8:9d:b6:a0:88:52:22:3d:4b:
                    7a:a5:d1:f2:27:24:33:5e:b8:8f:c1:bc:f1:f6:33:
                    ae:57:69:09:b6:71:cb:a6:e7:40:ec:57:ae:76:1a:
                    0c:0a:0f:2f:65:e7:a1:6d:5b:5b:2f:13:51:a1:af:
                    dd:1c:cd:2e:6f:a7:b7:34:2e:b4:58:2b:e5:fe:f5:
                    9d:48:e4:bb:81:30:29:27:cd:2d:e0:4d:1a:90:3c:
                    e0:b8:9c:22:9c:20:44:9b:78:0c:15:9e:6e:18:92:
                    b9:bf:f8:06:9b:47:c2:81:22:ec:c1:09:ad:de:ed:
                    26:39:d9:67:c6:e7:fd:d2:e8:82:4d:2f:9c:fc:ee:
                    36:a8:1f:77:bd:e5:4c:f2:2d:51:a7:97:0d:c4:eb:
                    24:eb:59:59:68:42:37:78:c2:ce:3e:2f:84:7d:1b:
                    b0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:82:BF:1D:92:CE:B0:DC:C5:C9:F4:F5:DC:BD:EE:26:FB:45:AE:F7
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230312e3133312e3234382e302f32342d3234203d3e203232383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:b0:15:71:18:a3:06:6b:4b:f5:51:2b:8c:3a:6d:c1:e6:93:
         23:04:60:a6:27:5e:70:05:4d:2e:6c:ca:f9:ba:da:35:da:93:
         f3:52:ad:4c:e7:8b:db:8c:ad:be:ed:a1:dc:84:53:53:08:c9:
         36:5a:b4:41:51:14:ec:c0:7e:21:a3:70:d0:ba:8b:45:62:e4:
         61:f4:72:e4:46:89:a5:1e:34:57:2c:89:f0:51:51:47:ee:a4:
         fa:0a:6e:bd:68:c3:21:f3:87:5e:18:3d:2a:68:85:73:2f:2a:
         c5:38:07:0f:06:43:37:37:11:8e:fa:7f:7b:c8:f2:b0:ba:b1:
         60:47:70:48:92:20:37:0e:7f:dc:51:f4:aa:cd:db:af:24:96:
         71:8a:60:60:c6:7c:a5:32:d3:68:61:ef:c9:2c:54:9a:c2:c9:
         07:de:2f:41:74:89:e8:e0:dd:12:b6:ab:c7:12:36:e5:53:e8:
         19:49:0a:5c:78:c6:b0:54:84:ec:a1:00:07:fb:2e:d5:b1:f1:
         47:21:2c:d7:05:cc:b4:11:af:43:e4:b2:d5:d8:ba:47:f5:6f:
         17:f9:e8:da:0d:f4:41:e4:74:27:aa:7d:dc:5f:a0:b8:c6:a6:
         c3:21:5e:81:31:c1:dd:93:d3:34:06:0d:3f:37:bf:fd:e2:66:
         a6:c1:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:36 2024 by rpki-client on console-ams.rpki-client.org