Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131302e302f32342d3234203d3e2037303034.roa
File:                     3230302e35342e3131302e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          Uhoofq+1aXqpw2vOoGjN0NR1nWzUunECpARchGUPjHo=
Subject key identifier:   65:83:35:25:A1:6B:EA:FF:E0:AE:83:FC:33:95:98:2D:6F:03:CB:C9
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       0CD19782497E4A20B1DF37CBB5F9CD849EDDDAA5
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131302e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 04 Feb 2025 18:31:57 +0000
ROA not before:           Tue 04 Feb 2025 18:26:57 +0000
ROA not after:            Tue 03 Feb 2026 18:31:57 +0000
asID:                     7004
IP address blocks:        200.54.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d1:97:82:49:7e:4a:20:b1:df:37:cb:b5:f9:cd:84:9e:dd:da:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:26:57 2025 GMT
            Not After : Feb  3 18:31:57 2026 GMT
        Subject: CN=65833525A16BEAFFE0AE83FC3395982D6F03CBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:d1:26:a5:df:db:26:ae:b8:14:58:8d:71:
                    19:63:73:06:60:36:89:cf:95:8c:d9:11:07:77:08:
                    fd:3a:3b:20:f2:a1:88:5a:c7:08:52:44:d4:b2:a3:
                    21:8e:55:04:01:3d:be:e3:72:90:46:93:46:f0:f2:
                    1a:52:6d:b1:2b:f6:43:29:a5:92:59:99:aa:c8:97:
                    28:de:98:1b:37:b1:a2:3b:b7:df:2d:c4:8c:96:b3:
                    4f:f4:13:60:58:d8:d0:f4:49:6a:fc:8f:a0:04:e5:
                    f6:ab:8a:33:0f:75:94:a2:8f:c5:2a:6d:be:fb:40:
                    73:35:a2:dd:35:a0:a2:bd:02:72:40:bc:5f:67:ed:
                    22:30:ba:ac:6f:cf:06:f4:ff:1f:0b:91:05:3e:14:
                    b6:e3:02:bd:9b:7a:91:15:02:33:5b:87:16:c2:2c:
                    b5:09:58:1f:23:f6:a6:96:25:21:49:38:0f:da:2d:
                    fc:94:be:51:8f:4e:a2:57:bd:21:92:c2:b9:eb:54:
                    79:d2:0f:dc:f2:70:8a:8e:39:33:1b:ca:c8:06:64:
                    74:3c:75:39:bf:a1:b6:a8:8d:cc:c5:9f:ad:8f:5c:
                    19:83:88:c6:b1:a9:ee:69:b5:0d:af:ad:48:67:e1:
                    f5:b1:02:7f:3e:22:48:6c:72:3d:49:bb:5e:6e:91:
                    19:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:83:35:25:A1:6B:EA:FF:E0:AE:83:FC:33:95:98:2D:6F:03:CB:C9
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131302e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:59:73:ea:06:df:b0:ec:f2:ee:1b:47:a7:d1:55:ba:06:5c:
         ac:04:0f:c0:72:09:81:b6:37:30:48:48:84:af:2f:1c:63:87:
         2d:2a:15:cb:d6:80:b5:d1:16:c1:9d:45:f6:d9:ec:48:ad:1e:
         bb:36:d5:d5:00:3b:06:e1:54:ad:37:4c:7d:57:71:0e:9d:30:
         e0:20:9b:f2:4f:4e:3e:26:08:ca:34:9f:71:60:e2:f3:6c:ef:
         ae:83:d1:70:45:f8:d0:29:dc:ca:08:03:95:84:d2:14:b1:d5:
         c6:5b:ca:b3:2c:24:fc:6d:bb:be:da:a7:8f:56:fc:80:f0:19:
         ff:64:9a:c5:cd:32:2b:ee:58:d1:9c:ee:4b:dd:e6:10:f7:86:
         23:3c:ef:1c:53:bd:94:cb:7e:da:41:2f:3c:f4:6e:c3:1f:39:
         ec:e5:3f:cd:29:9c:1b:08:91:86:46:04:7a:4c:f8:c5:bb:81:
         97:f5:b1:56:39:5c:69:b5:27:5f:06:b3:12:15:35:a4:38:1b:
         7b:d4:c1:fb:3e:71:21:e0:6a:ec:26:a8:9d:66:f2:b8:5a:38:
         99:0c:d5:cd:98:2b:83:96:7b:81:4a:62:7c:2e:b6:bc:da:3a:
         71:34:dd:af:0e:91:ce:fb:1c:fc:b0:85:a8:62:b3:e4:66:6b:
         bf:58:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:24 2025 by rpki-client