Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e302e302f31362d3234203d3e203136363239.roa
File:                     3230302e35342e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          QMrRXHCgQy4EoCGErNmEMgmirmba5rK8w0KqFbwAbtQ=
Subject key identifier:   E2:CE:5B:BE:12:34:EA:82:DF:E5:37:74:38:13:62:E2:3B:70:B4:86
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       686224C86842ECDABEDA8DC3DFC6CFE3A97F4705
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:51:52 +0000
ROA not before:           Tue 05 Mar 2024 17:46:52 +0000
ROA not after:            Tue 04 Mar 2025 17:51:52 +0000
asID:                     16629
IP address blocks:        200.54.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:62:24:c8:68:42:ec:da:be:da:8d:c3:df:c6:cf:e3:a9:7f:47:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:52 2024 GMT
            Not After : Mar  4 17:51:52 2025 GMT
        Subject: CN=E2CE5BBE1234EA82DFE53774381362E23B70B486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:56:3b:68:ab:29:9d:38:90:43:29:ac:d4:
                    d8:7f:5d:a5:eb:60:93:50:11:0a:21:07:d0:61:cb:
                    68:96:f4:57:4a:32:07:65:cc:8a:38:9a:94:d9:a5:
                    83:7a:04:b9:f6:1e:8e:13:ba:68:b2:ac:ee:85:bc:
                    58:a8:ef:92:5c:40:1d:94:7c:c0:7c:a6:1b:70:52:
                    8c:13:72:74:3e:14:f6:b6:69:5f:93:25:98:d3:75:
                    b4:28:d7:89:7b:3c:82:2e:7f:27:f7:70:c9:19:d6:
                    0a:8c:1f:29:8c:46:85:49:ef:13:64:d9:f4:9a:78:
                    df:0a:bc:02:8a:70:7b:31:c6:21:be:3d:3a:7a:57:
                    b4:7b:81:70:98:39:47:5f:6e:ab:8c:a8:3c:1d:28:
                    b0:85:04:c7:34:af:a2:c7:ea:0d:90:92:7f:34:c5:
                    60:54:34:b3:7c:3e:f4:d2:69:97:07:f7:5d:03:54:
                    a5:0a:8a:cb:84:6e:c1:77:3f:38:0e:5a:de:8f:f2:
                    45:50:73:a0:d7:7c:b3:82:81:1f:2a:a7:7d:c5:1f:
                    ef:bf:82:81:09:13:77:c3:2d:31:57:0a:4d:da:10:
                    f6:5c:12:cb:47:d3:ae:1a:22:51:8f:78:e3:a2:a8:
                    72:39:f1:9c:14:3c:b3:a7:79:c6:2e:67:b9:52:67:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CE:5B:BE:12:34:EA:82:DF:E5:37:74:38:13:62:E2:3B:70:B4:86
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:5d:02:6f:f4:be:63:3c:c2:e1:d9:b5:8f:e3:73:42:f7:
         3f:7f:67:17:22:62:aa:9c:d1:29:c2:c4:9c:13:3e:41:7b:43:
         2c:b8:c8:74:a0:68:82:31:04:f2:78:68:fb:56:4f:ff:b0:05:
         0e:ff:d3:b1:c8:81:ea:17:e7:09:10:50:2e:05:8c:21:1d:9d:
         c6:74:53:70:14:22:92:77:2d:3f:df:13:06:13:f3:17:40:45:
         fc:2e:02:5b:e4:5a:ba:63:a0:a6:7c:51:88:09:fb:ac:ad:21:
         32:b1:3b:93:99:d9:0a:ec:df:77:47:86:78:e1:08:81:d5:04:
         0b:3c:a4:4b:4d:78:b3:80:7f:db:31:aa:3e:69:e2:1c:2c:b4:
         79:75:b6:2b:84:a1:f7:85:55:4a:51:9a:bf:33:70:3b:3f:00:
         25:db:96:51:53:1b:0c:86:9b:f2:ed:08:8c:ec:20:61:c5:c7:
         5a:b2:a5:0b:4d:b7:54:c7:3a:f3:cd:30:71:03:84:31:5e:6c:
         8a:5b:96:d6:44:34:5a:28:39:c3:98:fd:c9:5f:ff:4e:25:35:
         77:13:db:15:8d:9f:ec:3f:6d:50:8e:45:98:6d:06:ba:e3:f4:
         c3:27:19:43:71:9f:b0:ae:d3:1d:9c:ae:85:a7:60:46:46:e3:
         c3:da:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org