Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132352e302f32342d3234203d3e203532333936.roa
File:                     3230302e35342e3132352e302f32342d3234203d3e203532333936.roa (raw, json)
Hash identifier:          ne/Y+yHqIafoYlpdhq8W22G4CSXv/e4sTD38tlBmLno=
Subject key identifier:   5D:C8:5B:68:6B:20:9B:2B:22:EF:86:68:74:30:A1:F6:E3:28:C2:CE
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       6626EE96685E27E336D6F2350E05F25233F04A3E
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132352e302f32342d3234203d3e203532333936.roa
Signing time:             Tue 05 Mar 2024 17:51:46 +0000
ROA not before:           Tue 05 Mar 2024 17:46:46 +0000
ROA not after:            Tue 04 Mar 2025 17:51:46 +0000
asID:                     52396
IP address blocks:        200.54.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:26:ee:96:68:5e:27:e3:36:d6:f2:35:0e:05:f2:52:33:f0:4a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:46 2024 GMT
            Not After : Mar  4 17:51:46 2025 GMT
        Subject: CN=5DC85B686B209B2B22EF86687430A1F6E328C2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:f1:30:fb:80:28:45:d9:01:24:aa:fe:cd:
                    b0:16:11:c9:c5:5d:90:9d:da:81:ae:34:8b:fc:71:
                    21:9c:5e:9d:a3:62:60:bb:8a:1a:4b:9e:42:22:d9:
                    a7:b8:bf:5e:d8:07:07:b8:b2:74:6b:4d:0c:9e:1a:
                    1b:16:60:b2:11:99:a0:14:d1:e6:b7:8d:4e:00:04:
                    4b:c7:ac:3e:b3:de:b3:36:43:6d:73:d4:b6:96:a7:
                    79:c0:5a:ef:dc:df:8b:cc:97:6c:2f:24:86:7d:89:
                    83:1c:35:05:95:74:8a:20:27:87:5b:e5:f0:1f:75:
                    12:a3:94:34:7f:19:fb:ee:c9:ff:62:a4:4a:7e:48:
                    91:76:45:e8:b4:1c:4e:37:6a:ba:dd:96:c9:b1:a9:
                    35:96:61:4c:7a:39:72:b4:88:1d:c0:7e:a2:cb:06:
                    b7:d8:60:4b:31:4a:d3:3a:84:38:7f:66:a0:e5:7f:
                    80:9f:d8:ab:fd:e1:39:bd:41:db:b7:75:98:79:7d:
                    f1:78:6c:80:bb:8e:2a:d5:0c:32:e1:b6:ea:d8:94:
                    6e:15:b8:60:08:ed:d8:b5:81:22:60:91:5f:2e:67:
                    f5:43:43:0e:b0:72:f5:a5:7b:5a:a2:14:4b:0c:8a:
                    6e:4b:78:75:34:a9:24:18:6c:f1:7b:40:6d:a4:26:
                    29:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C8:5B:68:6B:20:9B:2B:22:EF:86:68:74:30:A1:F6:E3:28:C2:CE
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132352e302f32342d3234203d3e203532333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:ac:05:c8:fc:45:f1:06:c0:72:08:aa:4d:e8:b0:88:49:
         82:5d:f9:c1:59:58:d2:c4:52:0f:cb:5a:fb:67:dd:22:f4:02:
         f4:0f:59:6c:3b:89:23:a7:b0:cc:09:c7:e3:13:56:58:90:90:
         8d:e5:1d:16:16:cb:d7:59:c0:9d:c7:3c:4b:ec:6c:96:70:c2:
         ea:64:85:a6:c7:dc:e1:98:39:88:43:1c:8d:93:70:3c:32:4a:
         bc:20:df:fd:3f:d3:f7:1f:dc:44:ca:2f:6b:3e:90:65:42:23:
         c5:41:e6:41:ec:96:45:b8:ff:ef:c0:44:92:41:7d:84:37:02:
         1d:27:5c:80:c3:25:f8:ed:1f:38:f6:3f:3f:a3:e6:38:58:f9:
         8e:9e:79:57:65:dd:e6:33:37:1b:a6:40:08:72:e9:a1:c4:b6:
         e4:7d:87:ec:7b:ec:fc:80:29:42:e4:09:fd:ee:cc:f4:32:99:
         79:b1:37:8a:1d:e7:20:96:82:4d:05:76:1f:47:f1:b6:3a:09:
         86:3d:34:bf:6a:7e:eb:8f:e0:fa:f8:c0:55:bc:b2:48:9a:61:
         50:5a:49:7a:55:a9:7d:57:9d:c5:5d:02:22:f1:5a:a2:ff:b9:
         47:ab:c4:8b:ff:10:28:95:da:8f:e0:24:68:55:6b:68:fd:11:
         34:f3:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:15 2024 by rpki-client on console-fra.rpki-client.org