Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234302e302f32312d3234203d3e203237393838.roa
File:                     3230302e35352e3234302e302f32312d3234203d3e203237393838.roa (raw, json)
Hash identifier:          S78CISxCJAapVilWTKG/ctZMsobjP4pe1oXX7kGp7VU=
Subject key identifier:   49:86:A5:21:25:6F:19:F4:1A:42:85:C2:FE:78:BA:EB:FF:8D:98:4F
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       2EC30D881B100E28998E7C48DE2988C899F60EB3
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234302e302f32312d3234203d3e203237393838.roa
Signing time:             Tue 05 Mar 2024 18:09:06 +0000
ROA not before:           Tue 05 Mar 2024 18:04:06 +0000
ROA not after:            Tue 04 Mar 2025 18:09:06 +0000
asID:                     27988
IP address blocks:        200.55.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c3:0d:88:1b:10:0e:28:99:8e:7c:48:de:29:88:c8:99:f6:0e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Mar  5 18:04:06 2024 GMT
            Not After : Mar  4 18:09:06 2025 GMT
        Subject: CN=4986A521256F19F41A4285C2FE78BAEBFF8D984F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:f7:3e:1c:be:b2:8d:4b:df:ee:2b:0c:80:
                    17:a9:c9:36:20:0a:bc:ac:64:7b:26:97:89:e5:0d:
                    33:db:ed:73:8c:56:b0:5b:86:28:6e:7b:1f:a7:f1:
                    5e:23:5e:e9:88:09:e4:38:cd:35:a1:96:ef:b4:e7:
                    78:da:85:ab:b2:62:55:fc:b7:71:c6:6f:ac:5f:1d:
                    6b:1d:87:3e:36:85:c8:00:bb:2d:67:e7:2f:2c:98:
                    34:1c:9d:1c:90:05:27:eb:60:a4:ec:1d:c3:6e:77:
                    82:41:ad:9c:c4:4c:ce:d3:0a:b8:0e:1a:8d:bf:5c:
                    e6:61:90:83:9e:8f:bf:e6:17:54:e2:74:b0:5d:e8:
                    e3:49:ae:58:03:7d:24:c7:c0:b0:b0:dd:41:c5:50:
                    51:c1:77:4b:15:d8:71:92:d1:22:08:ae:06:d6:b1:
                    49:6e:2b:95:d1:0b:7b:f2:7f:99:9c:a7:27:71:8b:
                    c1:aa:99:bd:8a:f5:1e:6f:18:25:e2:c6:e5:f0:b1:
                    e9:bf:cc:63:97:29:c1:d2:2a:ca:75:44:c5:0d:48:
                    d9:38:2a:6d:a8:11:f5:c1:7e:44:71:5c:95:e5:ee:
                    63:0b:53:5e:a6:b0:98:e7:9b:31:de:50:39:ea:01:
                    ea:23:5f:2e:98:e3:c2:e2:f9:a0:21:85:6e:9d:cc:
                    a6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:A5:21:25:6F:19:F4:1A:42:85:C2:FE:78:BA:EB:FF:8D:98:4F
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234302e302f32312d3234203d3e203237393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:58:c4:bf:51:25:1a:b3:f0:0c:1d:6b:61:fb:69:52:d5:b1:
         e9:7c:74:c8:a9:d5:90:11:73:9b:b9:32:c6:a1:09:6c:91:18:
         ad:39:c7:7c:ec:44:c8:c6:64:5b:a6:71:00:ff:0b:9e:db:c5:
         16:b7:b4:cd:37:32:72:10:59:55:be:ca:c7:0c:37:62:92:c1:
         da:d7:42:10:74:d2:f0:05:2b:57:73:4a:c0:6d:a5:11:3e:70:
         51:5a:2b:34:58:0b:4b:83:12:ed:f2:b6:67:76:ac:0d:b7:85:
         d9:b1:fb:53:31:5f:66:fe:a2:2f:12:21:8e:6a:b4:eb:15:50:
         bf:49:3a:a9:8d:3c:79:8a:fe:2b:b0:76:99:3c:69:d7:90:93:
         2d:13:8b:a4:76:d9:a8:03:5f:fe:33:80:36:da:9b:8c:0c:9a:
         e4:58:d6:b0:a6:3f:08:6d:43:5a:2a:44:ce:4b:38:b5:09:d6:
         04:71:56:83:79:6e:ce:95:a6:aa:ca:7c:36:70:90:e7:81:e1:
         40:b1:8d:34:d2:e6:a2:a6:c2:b5:f0:f0:96:a0:de:b9:79:38:
         a7:5d:ec:bf:76:2c:eb:c6:66:89:56:dd:9f:25:19:21:20:34:
         f7:5c:ce:5b:98:00:45:07:a6:06:11:44:e8:cd:8c:22:b9:89:
         48:10:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org