Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132302e302f32342d3234203d3e203237383830.roa
File:                     3230302e35342e3132302e302f32342d3234203d3e203237383830.roa (raw, json)
Hash identifier:          RbiYPtnF6BScDYC7rNBMELReAvWJZIDu0OhtwilnrGE=
Subject key identifier:   3C:97:AE:05:7B:6C:39:C7:CD:48:B3:4B:72:B9:76:57:E3:F5:69:59
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       3ABBF38C9FE78BC4EF1C8972CC6F472C0AAAD9DD
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132302e302f32342d3234203d3e203237383830.roa
Signing time:             Tue 04 Feb 2025 18:32:04 +0000
ROA not before:           Tue 04 Feb 2025 18:27:04 +0000
ROA not after:            Tue 03 Feb 2026 18:32:04 +0000
asID:                     27880
IP address blocks:        200.54.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bb:f3:8c:9f:e7:8b:c4:ef:1c:89:72:cc:6f:47:2c:0a:aa:d9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:04 2025 GMT
            Not After : Feb  3 18:32:04 2026 GMT
        Subject: CN=3C97AE057B6C39C7CD48B34B72B97657E3F56959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:e5:97:81:25:30:b1:77:9d:f5:53:cd:be:
                    e9:f3:37:3f:0d:52:cd:00:d9:df:6c:16:e3:84:67:
                    50:3a:03:0d:ea:9e:4f:75:d4:3c:dd:ce:c8:58:28:
                    77:7f:81:f8:f3:a6:c7:49:46:56:cb:49:da:4e:de:
                    53:41:aa:49:c2:41:7a:a5:be:92:3d:08:51:00:c8:
                    7a:92:3e:d4:fa:01:d1:8b:5e:46:69:23:a1:20:ae:
                    4f:75:09:c3:66:94:4d:89:32:56:f7:c8:78:4a:3e:
                    3c:70:fc:64:67:5c:bc:5b:ea:a8:86:c1:eb:36:e4:
                    d0:86:13:e7:cb:98:4c:39:5f:d4:62:5e:e3:87:de:
                    08:50:08:c9:aa:3e:fa:15:38:82:4c:48:4a:0a:be:
                    2d:ae:5c:ba:e8:50:d3:dc:47:61:19:bb:98:e2:5d:
                    c6:fb:1a:f6:39:9e:03:ce:31:0d:3e:13:3d:2f:59:
                    66:9d:c2:a5:20:17:21:ba:60:74:7b:63:1e:a8:61:
                    8d:4d:29:e2:7a:e6:7a:53:b2:8c:17:3f:31:c0:12:
                    ac:33:e2:d3:51:c1:24:a8:22:26:e8:93:a4:8e:5a:
                    a0:f4:31:97:cc:24:09:b1:9a:68:12:be:d7:e8:a4:
                    14:8d:2d:e5:96:e2:f2:30:77:d7:c4:db:83:22:09:
                    d8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:97:AE:05:7B:6C:39:C7:CD:48:B3:4B:72:B9:76:57:E3:F5:69:59
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132302e302f32342d3234203d3e203237383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:50:48:25:f3:ed:43:f6:64:7b:56:c0:69:46:11:75:ea:
         4b:87:91:a8:b3:63:4c:91:18:9c:56:87:8e:aa:c8:8d:eb:b7:
         2c:b4:ee:f9:e2:25:10:f0:81:77:47:b6:b4:2c:f2:5d:8c:0d:
         f8:f6:f0:e6:26:f6:ae:38:6b:c2:d9:b4:6c:6a:1d:f7:24:3d:
         1d:4c:99:a8:3e:cd:e4:c4:b7:4a:39:cd:b0:4c:72:7a:2e:77:
         d9:f8:33:b7:92:f3:a1:a1:a0:4a:ca:4d:94:87:a8:18:74:52:
         7c:4a:cf:3c:d6:49:7e:ca:7f:e8:61:8a:4c:79:b9:a9:ff:62:
         51:a0:96:d2:db:5a:33:e8:ea:de:32:7b:f7:27:7a:81:14:06:
         b8:82:29:cd:a7:9b:e0:7d:7a:a8:58:84:72:31:58:58:f1:f2:
         10:f2:a2:5a:bc:dd:34:94:47:27:7d:fe:9b:52:c0:0e:bb:35:
         e3:ed:b3:ba:86:f2:78:c7:47:72:71:9e:d3:ff:15:fd:61:74:
         4e:d8:16:0c:9a:e5:1c:c1:03:cc:42:b6:a1:1c:22:27:82:e4:
         1f:ef:72:93:71:dd:56:46:51:30:fa:8d:75:ac:86:3a:4c:44:
         95:fb:24:ed:ec:0d:fd:ac:cc:ac:4b:62:31:b2:35:96:47:eb:
         8f:39:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:18:12 2025 by rpki-client