Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e2037343138.roa
File:                     3230302e35342e3132382e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          ui+EWYmH/U01eUKZ6ILLIRfOAxYzhYCZerkdnV5D0Lc=
Subject key identifier:   8D:CB:C7:B1:A4:A6:AA:01:B2:84:77:F0:F3:56:5E:03:DE:38:BA:7E
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       2F865A60C79F6710B345B060F6031723A36A983B
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:32:00 +0000
ROA not before:           Tue 04 Feb 2025 18:27:00 +0000
ROA not after:            Tue 03 Feb 2026 18:32:00 +0000
asID:                     7418
IP address blocks:        200.54.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:86:5a:60:c7:9f:67:10:b3:45:b0:60:f6:03:17:23:a3:6a:98:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:00 2025 GMT
            Not After : Feb  3 18:32:00 2026 GMT
        Subject: CN=8DCBC7B1A4A6AA01B28477F0F3565E03DE38BA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:fe:4b:0f:ed:f6:64:5d:a9:06:b5:50:9c:
                    63:26:53:87:3b:2b:3a:f3:64:2d:5a:de:53:3f:1b:
                    a8:b2:61:d2:b4:4f:dd:56:a4:18:6d:e0:ec:98:a6:
                    4a:f1:31:56:2e:23:0b:fd:b5:8d:36:5e:cf:91:ba:
                    ca:f4:05:d0:51:7a:3b:0a:f0:52:79:f0:7f:65:e0:
                    cf:f0:f6:75:d5:47:6b:1e:2d:2c:ac:7a:47:97:e2:
                    7b:2a:57:21:8e:a0:50:5d:16:fb:5e:8d:0f:46:ba:
                    bc:de:e9:b9:59:6c:64:af:88:48:d5:4b:2d:79:25:
                    a6:ac:83:6c:22:99:95:0c:bf:0a:ca:a8:7d:ab:4d:
                    b8:88:92:a3:17:88:d4:1b:0e:c9:3b:87:b5:58:e3:
                    63:d8:1a:b9:c0:0b:9b:6c:75:23:8a:13:d7:09:44:
                    99:64:33:67:96:92:76:4b:42:bd:ec:11:fc:2b:b9:
                    f8:fc:19:dd:00:e1:dd:14:43:e2:dc:92:f5:40:f7:
                    d5:33:7c:48:19:7d:c1:a6:31:26:f1:af:92:d8:5f:
                    c3:68:bc:d1:be:5c:8c:29:a4:48:40:0e:85:6f:21:
                    70:7f:67:9b:8d:93:3a:42:27:e5:fa:5e:20:e4:dd:
                    38:e4:95:67:74:a5:b4:69:1c:0e:02:ed:64:23:48:
                    de:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CB:C7:B1:A4:A6:AA:01:B2:84:77:F0:F3:56:5E:03:DE:38:BA:7E
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:66:26:49:91:28:04:6f:e3:d8:3a:a9:98:ac:bd:8b:08:
         16:1d:27:a7:84:c4:6a:23:d9:3b:76:5e:d4:fd:64:3e:ee:07:
         9a:4a:20:84:dd:1e:70:77:e6:76:18:8c:57:14:e3:16:5b:47:
         5b:80:5e:83:1e:fd:8f:23:3f:19:9e:54:e6:17:ee:ba:b0:92:
         d9:96:b2:45:8c:59:26:55:37:f5:ba:84:ec:c4:1f:74:da:8e:
         c5:de:c5:97:a6:0d:46:8b:20:d1:99:b0:32:a4:21:a7:28:26:
         75:d5:63:4c:8e:84:00:3a:dc:9a:fe:bf:3d:f7:59:28:01:ba:
         0a:70:84:cd:86:fd:ae:7f:82:0c:0d:d6:3d:89:e5:8c:fc:7b:
         65:c5:6d:cb:d2:6a:b5:6d:b1:03:c2:d4:39:03:d0:08:92:a2:
         ab:af:f7:09:9e:bc:30:31:22:39:19:f7:fd:29:72:a1:2f:59:
         76:86:0e:bd:88:1c:fc:d7:76:aa:b9:2b:8b:0d:d0:e9:da:21:
         bc:9c:ba:49:c1:ae:c8:d3:5f:f0:92:31:3f:95:0a:c1:8b:47:
         60:2d:7a:cf:55:2e:df:4b:c2:0c:ee:4d:af:b2:26:fc:9d:16:
         05:3d:31:76:38:8f:07:45:ae:6c:06:df:08:e0:96:b0:3b:d7:
         c6:8d:46:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:32 2025 by rpki-client