Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3130392e302f32342d3234203d3e2037303034.roa
File:                     3230302e35342e3130392e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          ilILm2Grhx0MiROM9+505KsYMR2YlP3ILpsMLrb7yxA=
Subject key identifier:   64:65:30:3A:00:13:48:2D:06:A2:4F:36:8C:5A:89:B8:CE:98:58:BB
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       04258640394A282ADAFA2AB3A44E34243CC03AB1
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3130392e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 04 Feb 2025 18:31:55 +0000
ROA not before:           Tue 04 Feb 2025 18:26:55 +0000
ROA not after:            Tue 03 Feb 2026 18:31:55 +0000
asID:                     7004
IP address blocks:        200.54.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:25:86:40:39:4a:28:2a:da:fa:2a:b3:a4:4e:34:24:3c:c0:3a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:26:55 2025 GMT
            Not After : Feb  3 18:31:55 2026 GMT
        Subject: CN=6465303A0013482D06A24F368C5A89B8CE9858BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:10:a2:50:31:fe:d6:1a:e5:68:47:62:60:
                    1a:c0:58:77:c0:38:79:03:75:bb:21:ca:cf:ec:89:
                    c6:30:0a:6a:2a:28:87:44:f2:c3:59:af:e8:b3:3f:
                    52:31:30:46:11:ac:06:05:f1:84:65:f5:6c:6d:f3:
                    ce:0a:78:fe:57:a4:03:64:10:22:ce:d3:28:a1:a0:
                    0b:1f:52:ac:3e:7c:53:ce:61:85:0d:81:aa:4a:fe:
                    a9:9a:5d:97:df:0a:7a:9d:fe:74:ff:e2:ef:88:e1:
                    b5:9c:fa:e6:a3:29:f9:3c:c1:32:e0:77:41:61:4b:
                    e4:c8:98:5a:35:07:61:f4:a2:85:9c:03:b5:d4:70:
                    6e:0f:55:8c:11:71:c7:af:76:7b:29:9a:84:f8:b8:
                    67:d3:ee:42:33:7a:e2:79:5b:ae:7e:99:c3:db:a6:
                    b9:bc:21:8f:42:50:b1:d7:02:66:64:08:a4:4c:96:
                    c4:d0:dc:6a:d1:40:93:92:49:46:85:dc:a2:b8:6d:
                    21:ea:36:79:76:69:7d:60:ff:98:f3:7b:26:9a:56:
                    aa:05:9a:b0:2d:fa:a1:6b:e6:1c:9e:b7:6c:a7:72:
                    16:b2:a7:ce:96:8f:2c:a0:a4:c8:bc:6f:21:2e:f3:
                    c5:6b:f9:04:46:ab:53:68:15:84:89:d2:43:e3:b6:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:65:30:3A:00:13:48:2D:06:A2:4F:36:8C:5A:89:B8:CE:98:58:BB
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3130392e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:51:c6:c0:ec:5b:74:8c:cb:4e:dd:12:9d:44:6a:0d:9c:46:
         e7:d5:75:fd:e3:0b:e4:78:13:a4:dd:1f:26:da:98:3a:4f:35:
         e9:aa:43:2c:ec:74:19:2e:de:cd:84:34:96:73:32:1e:6e:5c:
         45:1c:3c:12:16:02:a7:7a:92:ef:f2:f3:42:74:3f:96:ea:f5:
         f4:4d:a0:40:6f:05:90:7c:4c:74:28:7e:95:35:0b:e2:69:ea:
         97:eb:78:81:c7:30:d3:e6:90:fa:4c:c9:bf:e1:cf:42:25:ed:
         ba:94:14:27:9d:77:fd:99:2c:df:de:be:24:03:df:35:5d:dc:
         42:26:91:41:6b:c9:86:4b:d8:b6:d1:b0:a1:7f:49:bb:2d:5c:
         07:ce:69:33:67:89:68:57:6e:8f:85:51:b2:ea:8f:a0:c1:aa:
         d7:ee:fb:7a:bb:20:d8:3d:95:61:bf:80:e2:02:5e:88:9b:9e:
         6a:19:03:77:c7:74:e5:6b:68:db:91:ce:9a:97:28:0d:a7:25:
         1e:fa:ba:a6:98:66:e5:34:13:f1:4d:d7:2f:1e:d0:6f:3f:a4:
         1e:55:f3:d2:03:77:93:70:38:89:c4:45:38:d4:fc:7b:c4:a9:
         d8:29:a9:cb:d5:84:2d:aa:b9:cb:20:f9:0d:1e:a7:6d:0e:60:
         19:52:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:24 2025 by rpki-client