Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e2038313531.roa
File:                     3230302e33332e372e302f32342d3234203d3e2038313531.roa (raw, json)
Hash identifier:          ZEH16+hpEkqj0oEvWRvwI7F6O++v++PDoWCIrlUrB0A=
Subject key identifier:   55:C7:56:33:22:32:7A:74:53:BE:66:CB:5C:7C:A9:39:E9:DD:5A:45
Certificate issuer:       /CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Certificate serial:       11F9B338617A744434CE49AC903E3FC0768F7458
Authority key identifier: B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e2038313531.roa
Signing time:             Tue 05 Mar 2024 18:06:31 +0000
ROA not before:           Tue 05 Mar 2024 18:01:31 +0000
ROA not after:            Tue 04 Mar 2025 18:06:31 +0000
asID:                     8151
IP address blocks:        200.33.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f9:b3:38:61:7a:74:44:34:ce:49:ac:90:3e:3f:c0:76:8f:74:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
        Validity
            Not Before: Mar  5 18:01:31 2024 GMT
            Not After : Mar  4 18:06:31 2025 GMT
        Subject: CN=55C7563322327A7453BE66CB5C7CA939E9DD5A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:ef:0d:ba:4b:6e:41:87:f9:cd:ba:69:dd:
                    b2:01:67:40:41:fd:9e:9d:4e:82:42:f3:dc:c2:f9:
                    5a:ce:b4:7f:73:aa:5a:70:04:e8:d8:36:9c:38:6c:
                    6e:55:e3:fa:bf:9f:d1:fd:0c:21:97:f3:59:70:50:
                    da:7c:87:93:20:00:0d:05:18:0f:1c:27:6f:e2:6a:
                    0f:79:cb:fd:7d:a8:36:16:9d:4e:d2:85:5d:19:76:
                    7e:6d:0f:3f:52:0b:5e:f1:5a:69:36:00:fb:4b:1a:
                    c5:02:c7:60:b8:b7:7f:dd:b5:a7:ec:68:4c:66:8e:
                    e2:0d:85:2d:a2:75:7b:4e:f9:f1:66:e8:5c:dc:5b:
                    31:ab:25:3c:41:63:15:2e:90:01:9b:b6:ac:ee:84:
                    c0:28:74:22:3b:dd:59:68:fa:f1:ef:9c:18:5d:2a:
                    49:5e:a6:61:9f:51:9d:37:3d:af:f5:29:40:10:8a:
                    cc:af:20:d9:de:34:c3:0f:ea:d3:48:b4:66:5f:8b:
                    40:6d:4f:bb:68:f5:09:4d:e5:74:fd:f1:00:24:da:
                    50:e1:fe:ac:87:08:56:26:22:35:17:b2:f4:10:8c:
                    39:13:17:39:bc:ca:8f:05:29:a9:2f:41:00:6e:ac:
                    f3:1e:f2:d4:92:2d:6f:68:5a:e3:d3:dc:fe:de:30:
                    93:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C7:56:33:22:32:7A:74:53:BE:66:CB:5C:7C:A9:39:E9:DD:5A:45
            X509v3 Authority Key Identifier:
                keyid:B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/3230302e33332e372e302f32342d3234203d3e2038313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:92:71:33:66:58:8f:3b:22:eb:0a:b9:05:e2:a6:6c:38:
         58:bc:93:8f:3e:dc:39:74:6e:af:d7:e5:59:30:a4:ea:83:54:
         0a:67:cb:29:f5:e9:db:03:cc:9c:46:2c:a2:33:4a:7d:81:30:
         d2:7c:0f:e9:07:77:f6:5c:d9:4e:d0:ee:9b:7c:ae:e7:b4:f2:
         95:c6:62:23:dc:80:76:0e:80:d3:6e:8c:f1:5d:b2:09:29:d1:
         89:d6:dd:ce:67:a9:2b:36:98:5f:70:fe:09:3b:de:0d:3f:37:
         e9:2f:6a:82:69:22:32:b3:24:62:61:df:b1:6a:cb:f0:cf:cc:
         a3:be:16:f8:05:80:95:de:26:18:25:21:0e:bb:9b:e4:b6:fb:
         a6:bb:ba:3a:27:a0:5a:27:1a:f7:77:50:6f:61:fc:6d:a4:99:
         cb:35:81:f1:49:33:1b:6c:9d:09:4f:45:df:4d:d3:ae:45:fa:
         84:bf:de:3f:1f:2a:43:22:e2:00:aa:b1:2f:fb:57:22:a4:7d:
         15:13:66:b6:28:a9:36:96:eb:60:ab:73:5e:05:69:59:fe:0e:
         ad:6d:74:06:65:b6:7f:dd:dd:31:5a:6b:29:26:8b:61:64:73:
         de:1b:75:b8:0a:09:31:ad:aa:4d:25:a8:45:70:40:6f:04:96:
         1d:0c:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:28:27 2024 by rpki-client on console-fra.rpki-client.org