Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa
File:                     3230302e35342e3132382e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          FPzH52VJcbl6K8t47Hct/jXAkZUHaznPe5/lmlEz7+g=
Subject key identifier:   E9:12:4E:77:4C:A6:91:C4:9A:57:7F:BA:ED:AD:65:D3:7A:F5:3C:F1
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       655F56BFF87CA4FC3EF023FD866A9B2670829F94
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:32:00 +0000
ROA not before:           Tue 04 Feb 2025 18:27:00 +0000
ROA not after:            Tue 03 Feb 2026 18:32:00 +0000
asID:                     16629
IP address blocks:        200.54.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5f:56:bf:f8:7c:a4:fc:3e:f0:23:fd:86:6a:9b:26:70:82:9f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:00 2025 GMT
            Not After : Feb  3 18:32:00 2026 GMT
        Subject: CN=E9124E774CA691C49A577FBAEDAD65D37AF53CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:07:a7:cc:84:e5:70:c1:bb:74:a8:a4:e1:
                    98:4c:d4:b4:0d:6b:e2:fa:8c:22:db:fb:5e:3c:9b:
                    72:3e:05:89:0b:6b:66:7c:6f:d5:4b:d1:53:a5:e1:
                    66:87:88:cd:0c:99:e7:f4:13:a3:08:39:1e:95:23:
                    ab:e7:98:3f:85:bb:1c:54:2d:a6:0e:b0:64:76:36:
                    04:ae:4c:38:aa:33:1b:3d:98:9f:65:a9:20:47:c6:
                    e6:95:6e:11:cb:e1:e9:f0:f8:5d:23:db:d6:17:fe:
                    ac:6b:6e:24:d3:ee:d9:5c:eb:b0:a7:e2:bb:6b:4a:
                    90:a3:49:c8:69:55:f6:89:f2:c7:b9:2c:f4:96:ea:
                    8b:e9:16:47:6a:84:94:b8:b0:65:d1:57:d2:cd:a1:
                    e8:42:e1:89:13:0d:cd:ca:f9:e1:0f:db:46:02:b3:
                    3d:a4:28:ee:56:c7:83:95:67:81:25:7a:0b:99:44:
                    01:8b:e6:22:a7:d7:15:a9:71:b9:94:5e:25:ef:6b:
                    10:de:cd:28:8a:bd:11:90:2b:de:c7:ef:19:81:b1:
                    f7:32:dc:96:37:7d:7e:87:3b:f9:c1:09:12:be:05:
                    90:ee:1f:d1:73:a7:9b:0f:54:bc:32:c3:5b:41:df:
                    af:86:c1:ef:0c:23:bc:e6:77:79:ca:ae:98:19:74:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:12:4E:77:4C:A6:91:C4:9A:57:7F:BA:ED:AD:65:D3:7A:F5:3C:F1
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:26:63:8c:3c:81:cc:99:bb:fa:45:14:9a:45:f4:ee:af:87:
         94:c6:c2:7f:96:78:3b:5e:c5:ec:a0:d1:f4:ed:e2:d2:d1:57:
         4e:4c:fd:d1:b2:18:87:09:cb:95:c3:24:ed:b8:db:dd:45:be:
         e8:c0:11:07:b9:71:bb:93:f8:a1:d1:ca:f0:4b:b0:fa:58:f3:
         75:e6:63:de:af:bb:db:3e:b8:d7:ae:15:41:91:37:1d:dd:19:
         82:f5:cc:02:6f:23:3d:b9:d3:6c:3c:1e:2f:2d:cf:e3:fe:09:
         d4:35:93:f0:b5:83:e1:1b:f0:87:d2:79:5d:19:0a:81:8d:d9:
         0d:ec:2b:a3:10:5a:ec:91:83:bc:8b:68:27:ae:20:79:ee:7c:
         51:82:ba:3b:ab:6d:85:37:30:fe:c2:37:0c:99:99:b6:6d:fa:
         a1:8f:be:9c:1f:19:04:77:20:7d:56:1f:05:4f:4a:82:24:c2:
         a8:1f:e5:b4:a9:5e:d4:75:ad:d2:00:bd:63:b1:1b:80:b1:a2:
         6b:a3:25:d5:a6:ad:a3:32:5e:79:68:a5:1a:19:09:d8:4c:63:
         19:ac:ce:dc:81:36:5b:ab:ed:f2:a6:1d:de:b9:a0:3f:05:d0:
         5b:57:18:0b:d4:75:e1:4f:bf:39:4c:5e:45:76:8f:3a:e8:04:
         b9:9d:7d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:52 2025 by rpki-client