Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134342e302f32332d3234203d3e203135333131.roa
File:                     3230302e35342e3134342e302f32332d3234203d3e203135333131.roa (raw, json)
Hash identifier:          +LSKrsR/bvZZhFqVY5yIiijKRpXOURiLhB64rV2CQlo=
Subject key identifier:   0F:A4:57:DE:A6:87:2E:B2:28:4B:6E:95:55:1C:51:F9:8E:3A:F5:86
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       468D0C46E8536CDDEC91A44E0A6D02D5AAECA866
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134342e302f32332d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 18:32:02 +0000
ROA not before:           Tue 04 Feb 2025 18:27:02 +0000
ROA not after:            Tue 03 Feb 2026 18:32:02 +0000
asID:                     15311
IP address blocks:        200.54.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8d:0c:46:e8:53:6c:dd:ec:91:a4:4e:0a:6d:02:d5:aa:ec:a8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:02 2025 GMT
            Not After : Feb  3 18:32:02 2026 GMT
        Subject: CN=0FA457DEA6872EB2284B6E95551C51F98E3AF586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:dc:d7:62:78:8d:da:56:92:23:8e:70:32:
                    c6:dd:94:33:71:7e:e7:f2:78:fe:a1:b8:e8:d0:18:
                    ca:e7:2b:0b:a6:5b:f5:56:37:88:85:36:e6:b7:f4:
                    8c:8f:58:20:eb:d1:ce:6c:8a:6f:83:6e:cb:af:43:
                    f7:dc:40:cf:a3:45:19:d9:c4:bd:fb:5b:88:c4:79:
                    62:f2:1b:86:53:34:01:27:8f:ca:93:07:e7:37:37:
                    61:0f:a5:ca:26:ce:e7:bd:02:ed:c9:80:17:81:d8:
                    f2:83:79:0e:d8:a0:b9:73:7f:de:1e:07:9e:0a:21:
                    54:1f:9d:b1:25:e8:76:7e:19:fd:0e:2b:98:bb:06:
                    b9:8f:99:91:f3:07:97:7f:3a:75:8b:7f:9b:ee:30:
                    ba:b3:46:18:13:93:07:b0:dc:cf:24:c3:1a:db:e9:
                    45:9f:39:91:cf:62:f1:cc:d2:3f:02:34:74:ab:5d:
                    f3:96:bf:96:11:4d:fb:1a:ea:ba:fe:b7:d1:5e:ea:
                    25:fc:e4:fe:19:f4:33:83:d8:54:02:26:8a:0e:dc:
                    a7:f5:56:26:10:0d:a3:0f:f6:8c:40:37:d0:99:1a:
                    e1:d9:10:8f:6a:00:91:2a:9f:60:cb:cf:4c:f1:c3:
                    02:cd:fa:1c:74:a3:0d:29:c5:01:9d:c1:8a:49:bf:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A4:57:DE:A6:87:2E:B2:28:4B:6E:95:55:1C:51:F9:8E:3A:F5:86
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134342e302f32332d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:47:d6:71:33:80:09:06:f5:34:ff:89:4b:42:8c:a4:72:
         8e:7a:e1:89:61:13:02:17:95:82:21:6e:3a:a1:63:58:81:95:
         dd:17:29:82:30:cd:91:e2:af:83:fc:9d:31:ac:0a:a5:e8:f8:
         de:72:44:9d:d5:84:41:aa:a1:aa:87:f8:11:5d:c9:37:50:92:
         57:e4:14:55:2d:e7:0b:4c:4c:e6:22:ed:80:f4:8c:9c:1f:c8:
         da:77:33:ab:25:8b:58:49:fd:00:ee:f3:fc:d5:27:77:12:a6:
         3d:8b:89:d2:fd:0b:5f:98:35:73:59:66:9c:5f:36:e2:fc:c5:
         f4:65:4f:8b:7d:06:2c:ee:04:ed:8d:ad:30:d9:1d:7d:60:71:
         ac:bb:73:12:b1:e0:01:14:31:8b:bc:45:88:ff:13:18:30:b0:
         78:1e:6b:e5:b2:c8:e8:7c:e9:ab:03:c7:42:0c:ba:ff:37:12:
         a4:95:ab:b9:97:8d:83:0a:e2:f9:b7:3e:45:b3:09:17:95:90:
         57:25:50:fe:cf:fd:3b:84:44:8b:ff:23:01:93:d2:e1:af:54:
         b4:f8:36:f0:a4:98:b7:2b:c3:4b:d4:96:30:17:27:8b:23:dc:
         e2:35:bb:b7:6c:dc:09:3b:50:9a:d0:23:18:af:33:d5:ee:0d:
         fd:2e:aa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:26:03 2025 by rpki-client