Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234362e302f32392d3239203d3e203634313138.roa
File:                     3230302e35352e3234362e302f32392d3239203d3e203634313138.roa (raw, json)
Hash identifier:          oMSgYeTO5e8FGfgCR+T/s6KULPzsG0J1JDAXiE5cOIo=
Subject key identifier:   C3:55:27:96:F4:4A:8F:B7:3F:75:0C:00:94:B6:DF:BC:F0:90:BC:68
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       60CD600AAC7764D0ADDA0CDC9CD0280AACC5057E
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234362e302f32392d3239203d3e203634313138.roa
Signing time:             Tue 15 Apr 2025 20:14:58 +0000
ROA not before:           Tue 15 Apr 2025 20:09:58 +0000
ROA not after:            Tue 14 Apr 2026 20:14:58 +0000
asID:                     64118
IP address blocks:        200.55.246.0/29 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cd:60:0a:ac:77:64:d0:ad:da:0c:dc:9c:d0:28:0a:ac:c5:05:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Apr 15 20:09:58 2025 GMT
            Not After : Apr 14 20:14:58 2026 GMT
        Subject: CN=C3552796F44A8FB73F750C0094B6DFBCF090BC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:c5:6c:e8:3d:93:94:a0:09:ba:87:e6:2c:
                    4d:79:0e:a5:a2:6a:9b:8d:c1:f9:a1:c6:60:c1:e7:
                    43:70:d0:c1:3f:05:2c:05:2e:cc:ce:55:c0:2e:67:
                    d2:dd:8c:65:d0:eb:86:be:c5:b6:aa:79:2a:fa:2a:
                    8e:07:b6:2a:ef:53:91:be:41:a0:7b:ec:5c:0c:f1:
                    f0:6b:53:78:6f:ca:1b:fa:1b:50:90:31:de:52:77:
                    3e:a3:18:d3:86:20:de:93:a0:6c:62:df:11:d8:95:
                    02:db:5b:f8:b3:38:14:05:c1:b3:07:8b:ad:64:db:
                    0e:38:14:19:7c:3b:be:16:53:9f:e2:a1:89:14:34:
                    e9:d0:9b:07:ad:ff:37:ed:0d:d3:7e:cb:75:ce:52:
                    6c:75:81:60:70:31:64:3f:95:00:71:32:7d:af:a2:
                    7f:f2:14:66:71:e4:ec:aa:36:a2:16:a3:ce:a8:0b:
                    4a:46:20:ca:7c:4b:c1:2b:b2:7e:32:aa:57:32:e8:
                    b8:2f:6d:1e:50:7d:f0:8d:74:6d:4e:01:6a:3a:ce:
                    b9:7f:64:f9:c4:ef:56:4a:56:51:3b:58:65:69:30:
                    87:da:3c:94:cd:e0:42:d1:b2:17:e2:6c:03:22:0c:
                    96:67:5a:67:12:78:b1:89:63:f1:de:89:fa:e2:5a:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:55:27:96:F4:4A:8F:B7:3F:75:0C:00:94:B6:DF:BC:F0:90:BC:68
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3230302e35352e3234362e302f32392d3239203d3e203634313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.246.0/29

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:c5:5d:a7:f0:7a:e3:32:d7:9b:49:48:e2:f5:bc:9c:77:
         5c:d4:b5:ab:fd:fa:c4:f0:ad:24:a8:f2:91:d4:42:8a:80:f2:
         6a:95:03:70:db:06:4d:37:16:b0:01:d6:10:ec:44:3a:65:fc:
         a1:e8:28:fd:40:0e:bf:1d:5f:3d:c8:31:b6:1e:5b:91:bc:48:
         01:16:d7:e4:c6:93:be:06:55:2b:eb:a9:28:06:c7:e3:fd:d6:
         c9:30:3b:4d:6e:c0:68:47:8c:a8:1c:61:31:df:c0:f9:94:a0:
         58:d0:60:c5:e0:22:35:b6:a9:c2:49:08:ab:da:fa:d2:46:59:
         ea:aa:74:ac:34:a2:03:05:38:54:e2:51:8b:99:9d:f7:16:9f:
         66:94:66:b7:06:8c:53:4f:87:d8:8c:0f:3d:14:35:4c:e1:e5:
         41:a9:8a:ab:58:a1:d5:ce:2a:ac:1b:72:91:07:1e:36:6d:8e:
         7b:9f:23:28:26:df:38:e6:eb:cb:87:a5:b6:10:56:83:63:23:
         a3:45:f2:81:d7:cd:f8:fa:a9:e7:5c:69:83:8e:ab:47:7a:96:
         4f:7e:1a:00:24:6e:aa:ba:6d:24:49:e5:93:34:21:9e:ba:9c:
         99:81:5b:1d:dd:97:6f:5e:81:aa:cc:74:7b:bc:07:8e:d4:89:
         4c:99:e6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:14 2025 by rpki-client on console.sobornost.net