Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3137362e302f32302d3230203d3e203237373235.roa
File:                     3230302e35352e3137362e302f32302d3230203d3e203237373235.roa (raw, json)
Hash identifier:          hdz3b++xqIJwmiJ3uUusZTbLUdiyBHonzbbHnLY2Vck=
Subject key identifier:   F0:32:2A:53:45:63:D8:F7:B0:19:20:08:F5:26:CA:4C:B9:72:7B:97
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       0906937D9CB2DC0EB15537F8BFF70A44A3D54BC9
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3137362e302f32302d3230203d3e203237373235.roa
Signing time:             Tue 05 Mar 2024 18:04:59 +0000
ROA not before:           Tue 05 Mar 2024 17:59:59 +0000
ROA not after:            Tue 04 Mar 2025 18:04:59 +0000
asID:                     27725
IP address blocks:        200.55.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:93:7d:9c:b2:dc:0e:b1:55:37:f8:bf:f7:0a:44:a3:d5:4b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Mar  5 17:59:59 2024 GMT
            Not After : Mar  4 18:04:59 2025 GMT
        Subject: CN=F0322A534563D8F7B0192008F526CA4CB9727B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:44:b4:f0:f2:0d:80:4f:14:ac:00:85:13:
                    9a:18:92:7e:a1:87:c5:89:fa:fe:0e:25:9e:e8:5a:
                    c3:25:95:5b:60:fc:10:41:5d:67:ba:39:d5:1a:c5:
                    b2:09:7e:c1:87:25:ed:8a:58:68:72:fa:73:e8:3e:
                    5e:23:10:7b:5f:e5:b7:c9:9a:aa:12:78:3c:ff:b5:
                    f5:4a:41:d5:5c:81:1d:f4:f0:e4:09:39:5d:d3:52:
                    14:1f:98:91:a6:87:06:1f:0a:49:d2:f4:13:5c:43:
                    f2:ba:fa:4a:55:20:15:13:3e:89:67:49:55:28:38:
                    d8:ee:d1:a7:9a:68:7d:e8:e1:2e:54:a2:35:6b:67:
                    93:07:02:0e:22:1e:4a:cc:6d:4b:cc:fe:1e:a4:f3:
                    25:f1:c1:c9:f0:01:c7:62:55:88:43:35:27:bf:a9:
                    e4:38:00:28:77:67:e7:05:e7:e5:89:a7:76:02:80:
                    15:a9:a4:4f:21:7d:16:f3:22:61:ba:aa:fd:74:91:
                    18:4b:09:7f:dc:23:8d:bf:9c:22:10:4a:18:9b:b0:
                    c8:0b:f1:63:c1:3a:61:29:f2:67:e3:31:31:2e:a2:
                    35:69:be:70:29:3d:77:f7:a1:1d:94:05:28:a3:72:
                    3c:d2:bd:4e:43:47:aa:aa:2c:53:a8:67:9a:8e:81:
                    0f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:32:2A:53:45:63:D8:F7:B0:19:20:08:F5:26:CA:4C:B9:72:7B:97
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3137362e302f32302d3230203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:ca:6f:75:5e:a3:95:6b:01:4c:fc:44:5b:01:f0:a4:28:48:
         65:ae:ee:b1:2c:61:53:28:6b:67:c0:28:dd:e3:d3:39:7a:7e:
         b5:a1:78:64:85:17:0f:67:d3:15:e9:7e:c6:7a:dc:11:eb:1b:
         0a:4b:60:b0:8e:99:38:15:91:9b:17:eb:6d:17:4e:47:2e:5d:
         ed:83:4e:67:9a:67:af:8a:5d:6c:6d:8e:09:08:62:8e:e3:f5:
         55:a4:ab:30:7d:10:f8:0b:71:a5:f4:5a:c8:58:8c:d0:d8:0f:
         21:4b:57:ca:cc:a0:1e:22:3f:17:89:28:e7:93:0c:3a:a5:f7:
         87:54:42:33:ba:a5:b7:ed:1e:c7:74:e1:0e:55:47:61:41:2e:
         9e:37:8d:68:6a:0d:f7:d3:14:2e:e7:b2:df:12:5b:0e:5b:81:
         2c:b5:3a:7b:eb:65:27:5a:2d:b7:94:11:8d:50:c1:ca:aa:24:
         a8:39:ad:76:de:2a:46:f9:94:89:fe:49:32:00:15:b2:3e:e9:
         ce:9f:d9:d2:23:11:f8:7a:7e:9b:5f:49:ac:6d:7a:31:83:b7:
         40:cd:3b:f3:8b:2f:0f:7b:60:ff:9f:6b:f7:de:25:02:c1:c5:
         b8:2c:f6:59:1d:e4:92:a0:83:42:e8:85:bb:6f:4e:a1:e7:22:
         9d:11:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org