Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3133362e302f32312d3231203d3e203237373235.roa
File:                     3230302e35352e3133362e302f32312d3231203d3e203237373235.roa (raw, json)
Hash identifier:          gS/o35cfdQ9K1quyBh64j+gBA9YCWZLYdbGPtijE45A=
Subject key identifier:   8F:76:46:3B:C4:5C:E8:E7:67:17:45:31:76:F0:4D:AF:F9:33:54:5F
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       07BC6CF2765EF190091D7BC8A6AEF25E642AE3FD
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3133362e302f32312d3231203d3e203237373235.roa
Signing time:             Tue 05 Mar 2024 18:04:57 +0000
ROA not before:           Tue 05 Mar 2024 17:59:57 +0000
ROA not after:            Tue 04 Mar 2025 18:04:57 +0000
asID:                     27725
IP address blocks:        200.55.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bc:6c:f2:76:5e:f1:90:09:1d:7b:c8:a6:ae:f2:5e:64:2a:e3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Mar  5 17:59:57 2024 GMT
            Not After : Mar  4 18:04:57 2025 GMT
        Subject: CN=8F76463BC45CE8E76717453176F04DAFF933545F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:24:e5:58:c0:73:35:fe:78:b4:7b:a2:23:
                    fa:5c:3b:87:15:8c:d7:5e:eb:0d:a1:97:32:00:ca:
                    4d:a1:da:54:33:40:88:a1:27:93:b5:ae:3e:db:f2:
                    88:7c:19:b5:46:2b:3c:ce:7b:6f:aa:ec:b9:2c:08:
                    63:fa:69:74:00:1b:f2:1d:1e:e6:8b:61:f4:58:10:
                    8e:01:80:dd:78:b2:02:4d:79:d0:9d:e5:80:58:ad:
                    3d:94:bd:64:b9:4a:20:69:41:8b:5b:6e:e1:4a:ca:
                    cc:2e:d4:e0:e8:97:45:50:19:03:6d:31:17:16:35:
                    fc:4a:2c:5f:39:d4:48:98:8b:f6:e0:ed:7d:22:b5:
                    ee:84:d2:25:2e:86:2f:4e:55:71:5e:b2:bb:5a:71:
                    f5:ed:21:c6:5c:87:aa:2f:5d:9a:01:d3:07:1c:e8:
                    3b:33:4e:09:7c:aa:ef:5b:0f:ee:60:85:1e:b8:b4:
                    50:32:f4:29:dd:5d:cc:3c:1c:00:00:56:19:3d:9b:
                    c0:86:1b:cb:6a:d1:99:4e:15:ea:21:10:4a:5b:34:
                    2f:3a:c9:c2:d4:bb:75:c4:8c:8d:3f:2a:ab:cc:ca:
                    65:0f:ff:0b:85:0d:33:14:a8:69:9d:14:f4:4c:10:
                    aa:06:4b:e9:b8:e2:e7:9f:00:66:d5:89:ea:ff:d5:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:76:46:3B:C4:5C:E8:E7:67:17:45:31:76:F0:4D:AF:F9:33:54:5F
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3133362e302f32312d3231203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:67:79:86:e7:3b:87:74:f0:c2:4f:f1:54:e2:70:37:b0:6b:
         ef:70:d1:6f:f7:c2:cf:48:a7:f2:0a:dc:42:0f:58:6b:b3:5e:
         1d:4b:87:b1:28:95:0e:e0:5c:aa:47:ba:47:bc:17:94:96:ee:
         39:ae:0f:5b:1f:dc:de:5c:ab:ab:61:f7:f7:bf:9c:c7:a6:54:
         26:17:8e:7c:c5:77:82:ee:06:e1:82:20:1b:8c:72:16:a9:2c:
         b3:c1:99:b3:58:68:11:43:ba:93:54:d6:15:70:45:00:38:7c:
         d7:3c:2c:20:42:d0:25:bf:42:6a:7a:40:c9:fe:68:5b:ea:2f:
         0c:3d:82:d6:13:ad:0d:ca:d2:1c:9c:dc:eb:ce:24:b3:e2:d7:
         92:24:e0:0e:b9:6b:e1:93:76:77:0d:6d:09:cf:00:ac:13:3d:
         d4:eb:c7:4d:08:3f:29:95:1c:d7:74:1d:30:59:71:14:1c:fb:
         cf:49:b7:1a:76:e1:59:64:07:6d:fe:06:60:79:ca:a2:7c:25:
         c6:5a:d4:af:40:f3:9e:fc:b5:9f:d9:77:2b:34:6a:db:60:00:
         0a:f5:8b:55:b0:31:58:78:de:07:16:94:fd:57:9c:d5:ab:29:
         f8:76:c0:12:a6:54:8f:00:98:9b:ff:16:dd:2f:9e:15:a4:37:
         2e:69:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org