Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131352e302f32342d3234203d3e203532323330.roa
File:                     3230302e35342e3131352e302f32342d3234203d3e203532323330.roa (raw, json)
Hash identifier:          4VfHGdf6Fjttu6/7xtMTKYeUhNN7KH2HO9JP5HiaR9o=
Subject key identifier:   AF:7F:64:3D:04:9F:2F:CD:D4:16:60:F0:28:64:0B:74:2D:01:44:13
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       7FEF8F91F60AA171C10700CDC8B01B5197B682BA
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131352e302f32342d3234203d3e203532323330.roa
Signing time:             Tue 05 Mar 2024 17:51:52 +0000
ROA not before:           Tue 05 Mar 2024 17:46:52 +0000
ROA not after:            Tue 04 Mar 2025 17:51:52 +0000
asID:                     52230
IP address blocks:        200.54.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ef:8f:91:f6:0a:a1:71:c1:07:00:cd:c8:b0:1b:51:97:b6:82:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:52 2024 GMT
            Not After : Mar  4 17:51:52 2025 GMT
        Subject: CN=AF7F643D049F2FCDD41660F028640B742D014413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:3a:4a:02:4f:ae:54:6d:3b:5b:f1:a9:02:
                    5f:a6:80:4c:30:5a:85:4b:a3:64:97:8b:3a:38:93:
                    23:88:a8:2d:9f:14:3c:e0:b8:df:98:22:db:37:0b:
                    ef:3d:55:be:51:d3:05:ac:d1:bb:46:df:db:f8:47:
                    4b:55:77:98:3c:b8:00:20:cc:44:e6:f2:f9:fe:22:
                    cc:75:03:d2:6c:9c:b2:d8:ff:7f:6d:e0:b7:f4:1f:
                    74:5d:2a:69:77:aa:c3:ef:74:2f:c7:06:f1:f3:8b:
                    43:40:e3:da:6c:eb:6b:eb:43:30:17:d1:63:e4:0a:
                    8e:16:81:37:9c:56:eb:0a:02:c9:e9:ec:0d:b9:ce:
                    33:57:26:99:db:b9:d4:cd:90:6a:93:54:d2:39:0e:
                    50:f8:99:ab:d4:1c:60:ee:7c:15:87:62:4e:26:34:
                    bc:50:e3:a1:d6:68:b8:0b:95:a7:cd:e3:ef:20:4d:
                    1b:67:a3:cc:ad:97:d7:6e:37:18:44:23:c6:58:6b:
                    5e:52:89:ec:ce:ec:16:be:bf:3d:78:59:50:d6:9b:
                    2d:fc:b4:fa:2f:b0:aa:bf:85:91:48:85:e5:c7:84:
                    7b:9b:2e:32:f0:9f:0c:e2:cd:84:7d:ec:95:9b:74:
                    08:48:d8:fb:95:65:cb:4f:29:a0:cb:a4:b9:dc:b4:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7F:64:3D:04:9F:2F:CD:D4:16:60:F0:28:64:0B:74:2D:01:44:13
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131352e302f32342d3234203d3e203532323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b0:21:da:c9:3d:b8:57:4d:aa:44:c6:b4:73:82:ae:0f:5a:
         87:b4:75:57:35:c6:9f:1a:69:3e:6e:97:9d:0f:27:54:5a:41:
         7a:cd:07:5c:6e:81:c9:23:75:0e:64:90:0c:e0:4a:56:ec:7b:
         5f:a2:a9:e5:3b:ac:d4:c7:10:46:aa:07:0b:6a:08:ee:5b:c0:
         f0:0c:3e:22:cc:8d:48:2a:a7:7a:ab:42:03:46:a5:01:8c:65:
         4f:0c:97:a3:86:74:50:62:e0:ba:ee:01:7b:48:20:49:75:04:
         5d:8b:ae:1d:1a:ba:60:5b:d6:93:9c:a5:1c:9d:56:60:3a:9d:
         87:f7:01:1e:bb:62:f2:bd:62:5c:b2:4d:30:5b:83:67:a5:f0:
         4c:0e:00:46:65:f1:1b:3b:33:cf:06:fc:96:5e:f0:93:d5:60:
         e8:68:51:c2:35:64:3e:9d:5e:40:ba:8a:eb:48:e0:5e:ab:ae:
         da:81:c6:b5:b3:6e:c5:9a:f7:31:a7:3a:72:a3:3c:84:9b:24:
         ba:da:db:07:84:68:cb:9d:9d:2e:ce:00:e9:85:3b:6d:65:e9:
         ec:ca:de:d6:7d:32:d3:98:56:80:60:7d:1d:50:96:a6:97:7d:
         21:d3:87:8a:9e:c5:80:84:3a:98:1c:61:74:2c:e7:fc:40:c4:
         de:60:4e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org