Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3130382e302f32342d3234203d3e203532333130.roa
File:                     3230302e35342e3130382e302f32342d3234203d3e203532333130.roa (raw, json)
Hash identifier:          vgwaSK9iWV2wxgPvXKcWshB12YqlYEXFAIyHbBhecgs=
Subject key identifier:   2D:9E:46:28:75:AB:BB:02:BB:71:52:17:1E:5D:34:D8:E0:9B:E6:43
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       0409D6B1A0F0DBC34BBEC5D5840CF34E7722AF85
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3130382e302f32342d3234203d3e203532333130.roa
Signing time:             Tue 05 Mar 2024 17:51:46 +0000
ROA not before:           Tue 05 Mar 2024 17:46:46 +0000
ROA not after:            Tue 04 Mar 2025 17:51:46 +0000
asID:                     52310
IP address blocks:        200.54.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:d6:b1:a0:f0:db:c3:4b:be:c5:d5:84:0c:f3:4e:77:22:af:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:46 2024 GMT
            Not After : Mar  4 17:51:46 2025 GMT
        Subject: CN=2D9E462875ABBB02BB7152171E5D34D8E09BE643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:12:d3:b2:56:28:e8:33:4e:15:75:31:e5:
                    79:41:89:45:e5:e0:a7:01:59:57:c8:89:56:c6:d9:
                    c1:c5:80:2a:d4:c2:de:fe:66:ed:46:92:12:8a:73:
                    05:de:ab:cd:fc:1b:5a:a8:4c:fd:88:0b:1a:d8:61:
                    83:1b:af:0d:a4:e3:8f:3c:07:3b:ab:fa:cf:1f:fe:
                    3b:26:5c:df:aa:09:cd:88:a1:de:e7:21:98:70:c1:
                    ae:b9:92:42:94:a8:dd:a9:60:a3:d4:f2:bb:59:4e:
                    18:e2:bc:d0:63:f1:df:0e:3f:84:7f:e0:8d:67:aa:
                    21:a7:28:92:73:be:da:6b:4a:61:f7:90:10:37:71:
                    98:88:a2:14:05:e2:f8:40:11:9c:d0:5a:d9:23:fe:
                    b3:8a:de:08:5e:e1:f9:e1:3d:b2:7e:a8:4a:06:1d:
                    7f:43:8c:a1:48:77:85:62:48:fd:ba:f8:dd:a6:0b:
                    5f:d8:d2:f9:fe:47:19:e1:15:16:df:53:c7:97:8e:
                    96:b1:12:04:d8:4e:70:76:d9:f3:09:a2:8a:1c:45:
                    a4:1e:f3:4f:4e:71:fd:ad:ac:81:44:f5:b0:ae:1b:
                    59:5b:ed:53:05:62:ae:f1:89:f1:38:6e:a4:17:fb:
                    87:e3:1a:2a:06:4d:e2:e5:77:f3:b9:0e:6c:2a:96:
                    e3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9E:46:28:75:AB:BB:02:BB:71:52:17:1E:5D:34:D8:E0:9B:E6:43
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3130382e302f32342d3234203d3e203532333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:0c:1e:c2:d2:2d:53:ce:ef:54:9a:47:24:07:a2:bc:af:30:
         74:cd:70:45:bf:60:a0:ae:6a:f4:3f:a1:1f:d0:33:ac:f6:87:
         f5:96:eb:0f:33:6f:f4:84:56:07:72:27:f2:9d:52:df:58:c3:
         41:a9:ba:bf:db:d1:97:dd:b2:14:39:c4:e9:e5:d5:69:6f:4c:
         5a:2a:c1:16:c0:b6:d4:28:bf:83:c8:42:45:dc:be:94:f3:d1:
         40:af:e9:48:02:01:0e:f2:39:cb:a4:47:c1:67:c7:ad:ce:c5:
         f2:80:cd:7d:8c:de:d3:4b:6f:9a:80:cf:32:c3:71:6c:95:24:
         c8:29:10:8f:f6:e9:fd:99:f2:84:f4:e9:67:53:55:25:a9:d2:
         5b:9a:c9:bd:f9:a7:11:99:11:27:40:fc:5b:e2:ed:e1:c7:0e:
         c1:58:ee:69:47:4f:18:fa:db:c8:4d:ba:cf:21:97:c9:af:9a:
         42:16:1e:f2:21:89:46:a8:1c:19:bd:5a:85:6e:f3:14:2b:b7:
         b6:78:2d:0f:4f:68:99:83:a7:c5:e8:24:ce:58:bf:d6:d3:52:
         c2:f9:a3:a4:7b:d4:40:69:3f:e0:e1:21:56:53:e5:a0:da:4d:
         24:b2:1a:1b:34:05:7e:5e:7a:ea:70:61:7d:70:e0:32:8a:36:
         64:cf:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 20:46:17 2024 by rpki-client on console-fra.rpki-client.org