Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34382e302f32342d3234203d3e203236363137.roa
File:                     3230302e31322e34382e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          hoK5bLARkhm2n0e+WwMmU8UcYRp3QYvLoVbcxQ7VQ+0=
Subject key identifier:   63:0B:B3:0F:63:D4:93:68:E5:98:CD:92:80:91:DF:AC:DF:E8:B1:4F
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       0947DCDE9C023FA8035708805EE0DDA33B60B79B
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34382e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:06:37 +0000
ROA not before:           Tue 04 Feb 2025 18:01:37 +0000
ROA not after:            Tue 03 Feb 2026 18:06:37 +0000
asID:                     26617
IP address blocks:        200.12.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:47:dc:de:9c:02:3f:a8:03:57:08:80:5e:e0:dd:a3:3b:60:b7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:37 2025 GMT
            Not After : Feb  3 18:06:37 2026 GMT
        Subject: CN=630BB30F63D49368E598CD928091DFACDFE8B14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:7f:98:a9:25:16:1e:a2:02:b1:42:88:df:
                    28:af:6e:26:5d:4d:c3:f3:89:8a:c6:59:8f:8c:8a:
                    99:2e:88:14:f9:0f:94:36:1d:a8:f6:df:b2:db:55:
                    1f:50:15:15:7c:46:a8:a7:49:9c:17:de:cb:4b:3c:
                    70:7f:73:d8:fd:fb:2f:e7:91:da:bf:e5:cf:f3:ae:
                    3a:5b:8b:be:97:69:89:6e:f5:91:bb:fc:0d:b6:fd:
                    78:bb:27:ec:18:e5:fd:d6:39:8f:f0:dd:3e:53:c2:
                    76:a6:77:39:3b:ee:84:be:8d:c8:a1:3a:80:a4:26:
                    ff:f0:df:64:21:91:a1:b1:af:a3:7d:0d:01:7a:0e:
                    7b:e9:75:7c:c1:1a:32:a4:5b:60:d7:20:03:48:c0:
                    5c:15:61:44:5f:df:18:c2:0a:b8:e4:82:64:ed:05:
                    c5:eb:52:70:e8:a6:4c:7c:cf:62:4a:b5:08:51:05:
                    8c:f2:f8:a4:1e:d4:0b:7d:27:a8:e6:d6:a7:1d:07:
                    02:29:34:f0:b2:44:d2:8a:a0:d5:0d:2b:4c:7e:81:
                    68:41:a9:8d:3c:16:20:02:cc:fa:cf:b3:21:23:2f:
                    c8:33:66:ce:80:8b:70:67:b8:24:c9:d2:a4:65:39:
                    38:94:68:27:a3:a8:0c:79:ab:f3:1b:5e:cc:50:22:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0B:B3:0F:63:D4:93:68:E5:98:CD:92:80:91:DF:AC:DF:E8:B1:4F
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34382e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:b4:6f:8b:7a:ea:64:57:4b:bc:93:65:c5:7d:72:ba:e2:
         0c:90:ec:71:d1:51:22:36:0e:ff:72:98:7c:f9:80:78:b8:72:
         d4:01:bf:10:f4:dc:a8:22:dd:97:7f:4c:30:7f:27:38:04:9e:
         b3:a2:27:29:ea:9f:d9:ed:0b:24:51:47:90:b9:27:e8:56:8d:
         d3:a3:8b:00:33:4a:a0:82:39:1a:ba:cf:08:6f:d8:f5:21:c5:
         96:65:c0:1e:53:ae:05:a1:18:7b:17:67:32:01:b4:53:29:da:
         f0:80:56:8c:3a:28:83:f3:58:35:27:c3:f7:be:c5:d3:5d:30:
         7d:b5:22:93:43:1e:7d:c0:58:98:76:9b:3b:b6:27:59:aa:b3:
         b3:64:c0:46:db:5a:78:b1:d0:3a:d8:c2:c9:a9:f7:a3:3a:78:
         48:79:61:63:5d:b4:64:e3:50:a8:23:13:82:66:66:52:26:3b:
         24:2a:58:eb:7b:98:95:20:07:af:36:6e:5a:0b:a7:c0:18:07:
         9b:f1:48:2d:a3:59:10:18:8a:df:68:9b:b2:3b:e6:e4:6b:18:
         16:57:e9:7b:a3:c8:c8:42:12:6f:b1:d6:30:f4:4a:a8:f0:94:
         9b:93:c6:c0:b5:85:3b:14:da:e5:71:1f:a9:e2:f2:13:fe:e3:
         7f:c9:da:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:10 2025 by rpki-client