Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa
File:                     3230302e35342e3132382e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          5F7FZc5qlFGq3ga2kFmr6Dyuck3788Pg7OImgckaJsg=
Subject key identifier:   37:DB:DC:79:C9:FD:2A:6E:AD:52:89:67:FC:A9:B6:14:9D:5C:73:46
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       3BB74FD44FE689CE3F4297F938968D9B74E17813
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:51:48 +0000
ROA not before:           Tue 05 Mar 2024 17:46:48 +0000
ROA not after:            Tue 04 Mar 2025 17:51:48 +0000
asID:                     16629
IP address blocks:        200.54.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b7:4f:d4:4f:e6:89:ce:3f:42:97:f9:38:96:8d:9b:74:e1:78:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:48 2024 GMT
            Not After : Mar  4 17:51:48 2025 GMT
        Subject: CN=37DBDC79C9FD2A6EAD528967FCA9B6149D5C7346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:dd:98:23:9b:84:d8:d3:67:09:82:68:53:
                    9a:73:f6:40:a5:a3:cb:8d:00:6e:b6:1d:ac:0b:0d:
                    e6:40:58:15:37:bf:48:e6:5c:16:19:14:8b:29:dc:
                    0a:78:ae:0f:2f:ce:c3:a2:cf:df:63:54:60:eb:3e:
                    94:d5:fb:71:f2:6f:1e:13:a9:c5:11:82:77:51:56:
                    1c:04:0c:fc:22:99:ca:14:c0:2e:f6:47:b9:a3:55:
                    b9:ca:b1:4d:19:ce:93:fc:e8:a4:ba:a0:ba:04:f1:
                    8f:79:2c:b3:23:ac:1a:bd:ec:d2:91:56:22:d3:93:
                    12:f9:9b:d3:fd:ac:6f:b9:0a:8c:36:a6:90:f8:59:
                    7d:a1:2a:44:8f:14:1f:24:8a:56:21:4e:ee:2d:a1:
                    6c:89:75:b3:d5:f4:f8:84:1a:33:9a:b5:ec:4d:9d:
                    e7:52:96:e0:d4:cf:35:62:c5:83:9a:c5:d4:df:cb:
                    b8:d0:e1:28:9e:58:41:89:12:42:b8:67:4d:82:90:
                    c3:03:a7:50:cb:de:63:4f:c5:19:b9:3e:d5:8e:78:
                    e5:11:21:d1:cc:4e:d0:c1:df:9b:c5:f9:e4:f4:52:
                    a5:db:27:83:82:15:2e:ac:f0:76:75:e4:38:ed:a9:
                    9c:b1:5b:9c:d4:55:70:1b:f8:79:ed:2a:d6:86:71:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DB:DC:79:C9:FD:2A:6E:AD:52:89:67:FC:A9:B6:14:9D:5C:73:46
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:01:36:02:a5:30:ee:a7:34:b3:ae:a6:3a:58:f4:5c:95:f8:
         68:7e:3d:d3:00:2d:c1:cf:13:a0:8d:32:4d:8a:a6:36:99:73:
         51:86:4f:50:ba:65:a8:3d:f9:2c:9f:52:79:0b:38:20:22:cc:
         17:28:97:e2:79:dc:15:fd:f9:8e:2f:9c:56:15:8d:d3:c5:17:
         c7:e7:bc:4a:90:38:7c:f2:a6:14:4d:0c:e2:e9:4a:30:e7:7a:
         f4:07:e9:71:97:0b:75:75:7b:fe:cb:1f:b7:41:ee:a3:23:2d:
         18:3c:ed:b4:71:e4:1f:db:a0:69:6b:7b:d5:39:d6:96:67:36:
         4a:39:bd:11:da:35:89:54:a4:95:ca:cc:88:e9:13:72:d1:48:
         e8:dc:a0:05:08:59:76:05:07:30:d4:65:b9:16:3e:c9:29:fb:
         cf:70:f0:b3:1f:a1:8d:87:2d:8c:7c:0f:57:d5:e9:3f:a0:37:
         5f:46:71:60:da:b7:bb:4b:ef:93:6a:7e:b8:31:cd:b0:1f:2c:
         60:53:82:32:db:67:ce:c8:07:31:be:8f:45:c1:f9:59:6e:9a:
         4c:d4:85:5e:19:f6:48:9c:65:10:91:c8:c1:d3:1b:67:3a:92:
         a2:9d:39:0d:d3:69:1c:6b:27:49:55:88:ef:7f:b1:f3:da:f2:
         08:f4:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:47 2024 by rpki-client on console-ams.rpki-client.org