Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230302e35352e3232342e302f32302d3234203d3e203237363638.roa
File:                     3230302e35352e3232342e302f32302d3234203d3e203237363638.roa (raw, json)
Hash identifier:          jpHWssuZ02Ax3yT+McOOLujBaVDaqvxj2ad1egQamo8=
Subject key identifier:   E7:0B:B5:92:4D:A0:D8:9F:4B:72:DF:26:9D:6A:D3:C4:E7:43:5B:32
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       583AC8B8409BF5FA8640DD314FB512E9229B639D
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230302e35352e3232342e302f32302d3234203d3e203237363638.roa
Signing time:             Tue 05 Mar 2024 18:21:40 +0000
ROA not before:           Tue 05 Mar 2024 18:16:40 +0000
ROA not after:            Tue 04 Mar 2025 18:21:40 +0000
asID:                     27668
IP address blocks:        200.55.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3a:c8:b8:40:9b:f5:fa:86:40:dd:31:4f:b5:12:e9:22:9b:63:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Mar  5 18:16:40 2024 GMT
            Not After : Mar  4 18:21:40 2025 GMT
        Subject: CN=E70BB5924DA0D89F4B72DF269D6AD3C4E7435B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:36:a8:65:3c:ec:f7:d4:f9:c4:3c:a6:bb:
                    dc:10:47:45:ec:67:e8:ac:fe:b1:f5:20:b9:84:36:
                    5d:33:03:30:85:88:61:ec:b0:52:29:d9:ce:e7:a1:
                    e5:3e:ed:82:70:41:c3:1a:ff:6b:34:4a:9f:9a:7a:
                    7b:66:2b:94:07:76:5f:6a:03:00:4e:1f:90:aa:80:
                    09:82:c7:48:f2:35:77:8d:09:0e:7c:f4:97:52:a6:
                    61:9b:ba:05:1a:f6:23:fd:28:51:f5:f0:f8:08:2c:
                    5b:48:5f:7a:e7:ce:38:f7:e3:8b:ce:b4:8d:01:f2:
                    e9:59:fe:85:04:f1:d4:46:ad:26:82:2a:28:c1:fc:
                    0a:9f:35:cf:9d:6f:84:b6:5a:a3:10:1a:ad:bf:d0:
                    b9:8f:61:01:c1:87:6f:21:ba:90:4d:7a:b0:db:44:
                    c5:1c:9a:96:e8:9b:01:db:66:0c:88:da:ef:32:c3:
                    45:b0:39:47:a5:3f:e8:7d:88:54:58:97:df:55:05:
                    45:e9:64:7d:15:c8:6b:14:da:b9:c8:31:94:00:a9:
                    90:97:84:e9:2e:d9:c2:fd:b6:a8:23:58:ff:4a:6e:
                    19:2a:39:43:1d:4c:6d:58:28:5a:81:75:db:15:7d:
                    50:b2:06:a9:70:bc:b1:d6:96:57:85:33:66:0a:e5:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0B:B5:92:4D:A0:D8:9F:4B:72:DF:26:9D:6A:D3:C4:E7:43:5B:32
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230302e35352e3232342e302f32302d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:34:a6:74:ed:e5:27:8d:8f:fc:6f:e6:a0:2c:f4:5a:06:ea:
         39:af:fd:54:f5:20:72:07:09:14:3b:46:f9:68:70:69:2b:ed:
         05:1d:4d:98:a9:b1:cd:48:1b:70:97:91:b8:a7:7c:8a:14:ef:
         2a:37:eb:df:b4:76:e7:91:98:db:01:be:36:31:92:fc:5f:99:
         a6:86:b1:79:46:0c:0a:c1:94:95:42:28:d1:79:4c:50:b8:68:
         69:80:9f:75:a2:7d:6b:45:e6:fe:c9:cb:84:bb:47:99:82:4c:
         53:e5:6b:a2:29:bf:0e:7c:46:a0:b9:62:c5:da:b7:e5:e2:16:
         7b:79:d5:c5:4e:a7:70:1f:96:78:28:9e:20:a7:55:0b:a8:a3:
         d8:e2:e4:3e:89:f3:4a:d2:0e:17:7a:95:b6:90:24:84:91:72:
         00:eb:e7:3c:f0:2c:e7:d7:0e:f9:53:65:6b:4d:6d:a8:e0:57:
         2c:9b:2f:1d:5f:0b:85:a3:97:c1:c9:d3:12:69:36:34:f9:eb:
         29:52:28:1f:ea:b9:c1:97:02:a4:7d:36:9f:e9:19:34:25:b9:
         59:36:6a:a2:fd:2f:32:60:cb:4b:3a:72:35:cf:e7:c5:74:ff:
         ad:fc:24:c0:9a:e7:e7:8c:cc:0a:b4:23:7e:a2:48:b7:29:ab:
         0b:30:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:53:32 2024 by rpki-client on console-fra.rpki-client.org