Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131302e302f32342d3234203d3e2037303034.roa
File:                     3230302e35342e3131302e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          7F2DCQVQZkPCUX5h/LSlp6LOdrCnoc+9sbmQruIIijk=
Subject key identifier:   F4:C8:B2:3C:24:A0:B7:89:0C:8C:4C:C9:BF:A4:7E:B6:3C:BB:22:70
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       284B2D856AFB77526D67841BD6859322C3CF7394
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131302e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:51:48 +0000
ROA not before:           Tue 05 Mar 2024 17:46:48 +0000
ROA not after:            Tue 04 Mar 2025 17:51:48 +0000
asID:                     7004
IP address blocks:        200.54.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4b:2d:85:6a:fb:77:52:6d:67:84:1b:d6:85:93:22:c3:cf:73:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:48 2024 GMT
            Not After : Mar  4 17:51:48 2025 GMT
        Subject: CN=F4C8B23C24A0B7890C8C4CC9BFA47EB63CBB2270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:33:45:2c:64:37:41:7f:29:3c:f8:b9:3c:
                    32:e2:40:1a:5a:59:02:9f:d8:bb:e0:d1:73:8d:82:
                    bd:cd:c2:3f:9d:f2:84:cb:d1:4c:6a:da:24:9e:9b:
                    91:1d:50:ad:51:9c:f6:72:e1:fb:1a:55:13:5b:89:
                    6d:2e:7d:27:2e:b1:e0:94:08:c9:34:7b:22:a3:58:
                    16:43:ac:ca:b8:fa:51:ed:7a:61:86:14:68:9c:97:
                    76:0b:95:bc:cc:81:99:ce:6b:2d:2b:76:cb:ff:96:
                    31:d4:8e:51:a7:9f:37:1b:26:86:a5:a0:2e:a8:44:
                    b1:14:78:ea:ed:c1:bf:86:15:38:43:3f:fe:d6:9b:
                    17:4e:86:3f:45:97:18:ce:c2:b8:84:0c:21:c7:77:
                    da:ab:73:26:f2:95:f7:9d:0e:db:93:99:c5:64:2b:
                    4b:fd:5d:8c:e8:04:7b:f2:51:ff:ce:e1:c2:06:3d:
                    5f:a2:ea:21:ae:a0:0e:8e:13:92:0d:9c:dd:5c:29:
                    80:e2:4e:8f:cf:98:52:13:f5:3b:ed:bb:fc:94:f7:
                    66:b9:6f:5b:04:c1:3b:a4:e6:ed:98:df:b8:e3:b6:
                    9c:06:8b:31:81:38:82:cf:07:45:31:5d:ca:f7:79:
                    47:ef:d9:26:f5:be:9c:c2:d1:26:4b:25:dd:88:74:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:B2:3C:24:A0:B7:89:0C:8C:4C:C9:BF:A4:7E:B6:3C:BB:22:70
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131302e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:b9:34:b1:c2:57:4e:49:b5:a8:12:2f:0f:66:4b:f3:50:43:
         b2:37:35:0f:1f:c8:8e:fa:49:35:aa:86:43:cf:00:3e:64:5c:
         e4:b9:ec:6f:ef:bd:6d:3e:7d:be:0a:ff:1d:81:8c:05:bc:e8:
         6c:5d:68:4b:48:8a:8d:b2:be:47:7f:36:45:f3:f5:8d:e7:bb:
         b7:a9:55:67:00:56:20:a9:97:36:a6:3b:d2:50:f9:27:da:26:
         ea:ef:fe:39:d2:f4:35:ea:41:88:9a:44:01:eb:49:f3:71:f6:
         d3:04:c9:e0:b4:91:96:f6:fc:27:00:80:f9:d3:bc:0b:c1:cf:
         f1:3e:0d:e3:a1:e3:86:6d:fb:3a:87:43:9d:04:e2:75:08:82:
         fe:3b:f0:ea:86:f4:2e:5d:93:dd:20:2c:69:89:c5:f6:47:eb:
         15:2b:9e:85:ac:ba:1a:60:ae:df:1e:45:60:ca:37:b4:2a:8f:
         ba:c5:76:cf:6d:48:79:bd:93:b4:51:38:3d:23:64:65:27:09:
         9d:2a:d5:8c:78:42:62:d7:e6:95:c1:62:f8:d5:0c:17:28:97:
         87:2b:a1:2b:ea:b2:82:65:79:e6:d6:59:d8:13:1d:bf:59:45:
         7e:18:38:fd:b5:b2:ec:20:79:ca:9f:ea:6c:56:d4:14:ae:66:
         76:4a:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org