Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e302e302f31362d3234203d3e203136363239.roa
File:                     3230302e35342e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          t9j+INiE7Xh0bNVdL/RvF6Q6IU/d1kEUloJkmgkcK5s=
Subject key identifier:   21:F4:05:6E:25:67:E8:D8:6F:1F:90:9A:DA:0A:3F:A1:97:AF:85:53
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       70DC1C6942197B03A50B584BEED36A0E4642EBF1
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:32:04 +0000
ROA not before:           Tue 04 Feb 2025 18:27:04 +0000
ROA not after:            Tue 03 Feb 2026 18:32:04 +0000
asID:                     16629
IP address blocks:        200.54.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:dc:1c:69:42:19:7b:03:a5:0b:58:4b:ee:d3:6a:0e:46:42:eb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:04 2025 GMT
            Not After : Feb  3 18:32:04 2026 GMT
        Subject: CN=21F4056E2567E8D86F1F909ADA0A3FA197AF8553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:83:fb:6c:ae:9f:5c:a5:f6:82:49:cf:41:
                    2d:f9:b6:de:f2:e3:07:26:19:66:54:3b:f5:09:41:
                    2c:de:78:01:e2:a1:09:7a:e9:fc:1e:4c:9f:85:79:
                    c3:a4:e8:7b:a9:59:07:0a:60:64:06:04:de:69:14:
                    9f:6b:17:fc:4e:87:99:8a:99:2b:bd:dc:0f:77:25:
                    51:50:cd:99:8e:f8:14:e1:1a:d0:2b:e1:44:22:04:
                    8c:4a:1f:57:b7:60:60:ab:b8:38:5e:d6:a6:ea:09:
                    bb:05:73:0f:e2:9c:78:bb:0a:01:55:1c:ef:15:43:
                    7b:5d:c4:7d:09:6b:50:15:13:6f:ad:f9:43:49:f2:
                    f8:01:e1:f0:34:d2:6f:4a:0e:8f:a4:5d:bd:49:9d:
                    00:80:ae:2c:d2:53:66:5d:47:ec:d8:3b:8a:98:95:
                    5d:d1:de:eb:1b:ab:2e:5d:9e:03:21:a9:aa:1a:c9:
                    da:a2:00:05:64:7c:6d:ea:8c:29:62:16:f2:43:b8:
                    80:f9:46:b4:b5:42:db:c0:04:45:d4:bb:eb:36:0d:
                    2e:dd:42:f0:7c:4b:df:3d:10:a3:e9:31:fd:8e:37:
                    68:db:68:75:a2:d5:48:8e:5c:b1:2c:fd:c7:94:6a:
                    87:de:96:e7:18:87:f8:83:4f:64:86:60:36:c2:d0:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F4:05:6E:25:67:E8:D8:6F:1F:90:9A:DA:0A:3F:A1:97:AF:85:53
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:56:e2:62:81:a1:e3:7d:bd:84:57:95:98:b1:de:0c:8e:44:
         c4:23:e6:c5:27:1c:71:17:01:27:52:51:1e:77:b7:dd:8f:4b:
         da:25:b8:46:54:39:f5:e8:19:5e:f0:c9:52:83:fa:cd:61:92:
         ca:66:a0:40:a2:d3:06:e8:ec:a1:f2:ac:d0:f3:96:f4:6b:05:
         e9:4a:e3:6b:12:31:cb:df:df:aa:de:ef:2b:b0:d5:d2:27:bc:
         2b:c2:31:f6:87:30:42:98:e2:85:e7:e1:4d:3f:2c:01:25:97:
         a4:c5:d1:9d:0d:2d:b3:9b:a0:b0:78:9e:f0:5d:3a:00:6a:41:
         1b:f0:0a:52:a8:17:97:62:06:f7:d3:e9:dc:aa:6a:ed:88:e1:
         5d:28:34:5a:74:ea:fb:78:5d:5c:d1:d7:53:04:45:31:fa:4d:
         ce:01:10:12:b8:20:b5:cc:4d:f1:cb:73:b1:ef:6e:91:92:6b:
         4c:c2:3c:72:84:48:16:70:8e:c6:3f:36:ce:59:94:0c:20:cf:
         af:0f:55:99:61:14:50:d7:44:2c:09:ef:17:d8:28:1f:bf:63:
         af:4c:dc:71:5f:da:dc:c8:dd:eb:b8:50:dc:02:1d:67:25:a0:
         5a:27:6e:fc:20:c1:f8:1a:4b:90:cc:1c:32:dd:63:e8:31:8f:
         65:fc:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:53 2025 by rpki-client