Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3230302e3131352e32302e302f32322d3232203d3e20323632313638.roa
File:                     3230302e3131352e32302e302f32322d3232203d3e20323632313638.roa (raw, json)
Hash identifier:          GNES6agVhtctL+iFLfotBh4cFV9B7DHbCZQGefNNRV0=
Subject key identifier:   74:FB:59:27:23:E5:79:95:A1:7C:55:D7:0F:7F:27:9F:6E:C1:F2:D7
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       3001B86E396381BA5B30ECC459209F41AF814482
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3230302e3131352e32302e302f32322d3232203d3e20323632313638.roa
Signing time:             Tue 05 Mar 2024 18:00:31 +0000
ROA not before:           Tue 05 Mar 2024 17:55:31 +0000
ROA not after:            Tue 04 Mar 2025 18:00:31 +0000
asID:                     262168
IP address blocks:        200.115.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:01:b8:6e:39:63:81:ba:5b:30:ec:c4:59:20:9f:41:af:81:44:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Mar  5 17:55:31 2024 GMT
            Not After : Mar  4 18:00:31 2025 GMT
        Subject: CN=74FB592723E57995A17C55D70F7F279F6EC1F2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:63:3a:a6:94:4f:bf:95:95:89:14:b8:37:
                    4a:75:3f:16:a9:2f:d2:76:e5:fc:2d:64:a2:3b:21:
                    c6:4d:42:24:57:f3:48:67:76:e6:01:d0:aa:2b:ce:
                    23:ea:95:ab:7a:f0:58:a2:8f:f9:0f:bb:49:35:b5:
                    2a:e1:b2:9f:f1:fd:fc:3f:1b:41:b7:4e:27:c3:c2:
                    0e:37:6a:e7:b4:e8:27:a9:34:22:5e:ca:c1:01:3f:
                    36:8d:44:18:71:f9:7b:62:3e:1b:98:01:fe:ff:b4:
                    16:9e:c1:56:31:f0:f1:a1:94:9e:5e:3c:bc:1c:1c:
                    a5:4e:2d:d9:59:9c:96:96:e5:82:f8:5d:7d:98:1c:
                    f9:5f:1c:44:58:1b:8d:d1:0c:73:e3:e7:66:17:6d:
                    a9:f0:a8:23:8f:eb:55:d3:26:7e:d4:56:24:88:4d:
                    98:3f:2a:18:e7:df:c5:39:c9:ed:05:8f:e4:bb:ec:
                    21:3a:95:38:bf:06:36:a7:96:ef:d4:3d:d8:94:2f:
                    f1:d3:97:f9:1b:1b:19:c0:b5:95:16:3b:6e:f2:57:
                    7d:85:2f:93:c6:6c:e1:ab:81:c6:10:bf:aa:d0:17:
                    f9:40:03:0a:dd:24:21:40:b2:33:e4:21:f5:31:57:
                    4f:5c:a6:61:77:a3:1f:b4:02:ce:1f:cf:79:e6:59:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FB:59:27:23:E5:79:95:A1:7C:55:D7:0F:7F:27:9F:6E:C1:F2:D7
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3230302e3131352e32302e302f32322d3232203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:59:8f:42:23:6e:cd:07:44:33:8b:3b:03:ed:17:52:c2:63:
         d5:32:d5:dd:e3:26:82:61:fa:bc:a5:bf:e2:c6:65:19:8d:57:
         3a:2a:f0:f0:da:ee:e2:fa:f1:61:cd:4a:f6:cc:d7:14:47:33:
         14:e0:4e:06:8d:2f:49:65:2a:a1:e5:28:dc:bb:40:37:0c:c8:
         3c:01:15:6b:eb:e2:22:71:4d:5d:d0:2b:ff:a5:99:b3:0b:f3:
         a3:3d:a5:ed:72:e0:2f:c8:5f:5e:fd:36:45:91:6d:ac:c3:35:
         4f:b5:e5:c8:a0:6f:f3:bf:d6:cf:d8:a6:e9:9a:7a:b2:a7:d5:
         5e:0f:8e:0d:60:dc:b2:85:df:01:08:50:5a:4d:48:98:71:2a:
         c0:07:d8:43:2b:38:f0:b0:a8:27:d1:09:6c:14:42:a5:36:a9:
         b7:19:c7:ff:da:81:0f:bc:c9:d5:aa:f1:05:e1:32:2b:68:c8:
         73:86:8f:bb:f9:c5:e1:ad:30:02:9f:62:04:3f:84:63:b1:49:
         2f:95:c2:59:35:ed:77:cc:c9:10:1f:2c:76:a3:37:93:e1:f5:
         f7:1e:8c:43:f9:ed:57:f1:5f:29:32:20:c4:e5:fe:65:f2:40:
         47:ce:74:0a:42:3e:d4:fd:94:21:a3:5c:b2:83:71:62:fc:ed:
         11:13:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:04 2024 by rpki-client on console-fra.rpki-client.org