Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134362e302f32342d3234203d3e203135333131.roa
File:                     3230302e35342e3134362e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier:          1ks1+M7AquPeOglG6l0I4w0T22LU3e8aMeQQr9YTkdE=
Subject key identifier:   AA:D8:4B:FD:33:5D:0A:8A:BE:05:A4:F5:C0:C6:05:9C:AF:4D:40:69
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       2459B6054D07B4474264548FA87EC63D80AB0CE7
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134362e302f32342d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 18:32:03 +0000
ROA not before:           Tue 04 Feb 2025 18:27:03 +0000
ROA not after:            Tue 03 Feb 2026 18:32:03 +0000
asID:                     15311
IP address blocks:        200.54.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 15:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:59:b6:05:4d:07:b4:47:42:64:54:8f:a8:7e:c6:3d:80:ab:0c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:03 2025 GMT
            Not After : Feb  3 18:32:03 2026 GMT
        Subject: CN=AAD84BFD335D0A8ABE05A4F5C0C6059CAF4D4069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:36:c4:5c:f9:c3:43:f2:1d:f1:4f:a9:08:
                    b2:34:8d:10:13:4e:c3:0e:2c:8d:63:21:b7:44:45:
                    8e:eb:0d:65:50:09:06:2b:00:6e:07:a0:8e:b5:29:
                    f5:2b:45:97:88:8e:35:66:70:db:35:de:c3:1d:4b:
                    ce:2f:8d:b5:a9:c1:27:cc:ab:9d:da:f4:8d:57:d9:
                    c2:04:49:4f:4c:d4:fb:15:6c:67:4f:8b:49:d9:70:
                    47:04:6a:4b:a6:21:9c:fb:ec:44:0a:ab:9d:19:ce:
                    18:1e:2b:6d:c3:22:f7:9a:3d:75:5b:c3:24:41:b7:
                    d1:19:e1:b4:ed:57:2a:a3:c1:9e:25:6a:43:16:f9:
                    fd:de:68:8f:a1:f8:a3:92:b7:24:f8:bf:a7:7d:3c:
                    5d:e1:79:7e:8e:a5:f4:79:17:ff:37:b3:37:e8:9f:
                    fb:3d:03:a9:47:6a:c4:d3:47:81:a6:67:db:84:2b:
                    4b:58:13:c7:70:41:19:ce:f0:55:25:27:22:01:1b:
                    10:2a:7e:87:9c:33:ac:f3:aa:a4:9e:8c:03:c6:8e:
                    18:6d:96:3a:95:2e:04:eb:f4:d5:61:93:da:5d:6b:
                    c7:29:d7:4b:27:c8:bf:48:61:42:ed:a0:06:d5:2c:
                    ed:5a:30:d6:ed:80:fc:5f:e3:91:89:4e:91:70:a0:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D8:4B:FD:33:5D:0A:8A:BE:05:A4:F5:C0:C6:05:9C:AF:4D:40:69
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134362e302f32342d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:06:03:bd:ef:be:7e:ae:8e:56:32:bf:2a:49:92:35:51:82:
         f5:eb:7e:3c:fc:ba:4b:3a:dc:23:ab:e5:44:91:07:59:13:e3:
         6f:76:fa:fd:e8:96:69:3b:9e:c0:cf:14:9c:3c:d2:89:22:ce:
         80:fa:0c:a5:68:a5:88:3f:fc:a8:03:45:7e:0b:3b:e4:fe:43:
         79:f5:5f:ba:ff:1d:1b:46:32:0d:03:6f:a0:00:2b:8a:7d:17:
         52:fb:75:02:62:91:54:71:1e:15:d1:e0:66:6d:d8:a8:a3:5b:
         88:d8:dc:9e:bb:59:22:c4:b5:0a:54:ba:ff:37:87:26:0f:b5:
         d5:4c:bd:da:59:a1:1b:86:ad:88:b0:4f:01:8c:0f:3f:1b:93:
         4f:40:63:36:f4:14:fd:67:ac:b1:b1:21:2d:fe:a8:0b:bc:d9:
         7e:25:17:1d:dc:57:13:13:0a:f1:51:e4:98:9a:4d:05:08:de:
         76:16:5e:fc:7d:f6:a7:e9:32:7c:fc:74:fb:9c:d8:d0:34:d9:
         3c:a8:9f:13:d8:cf:ff:74:bd:f0:b6:d6:33:69:d1:c3:b5:86:
         ec:6a:51:8d:dd:b9:c8:c0:40:30:e6:08:7f:39:fe:0e:b6:30:
         a4:38:b8:61:7a:d8:9f:9b:40:69:61:c2:4e:cb:b7:78:0a:08:
         0d:dc:b9:0f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJFm2BU0HtEdCZFSPqH7GPYCrDOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwODJDNTdDREJENjhEODJBODREOTk2N0M0OTU4NTU0
N0U2RTgwRjAeFw0yNTAyMDQxODI3MDNaFw0yNjAyMDMxODMyMDNaMDMxMTAvBgNV
BAMTKEFBRDg0QkZEMzM1RDBBOEFCRTA1QTRGNUMwQzYwNTlDQUY0RDQwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArjbEXPnDQ/Id8U+pCLI0jRAT
TsMOLI1jIbdERY7rDWVQCQYrAG4HoI61KfUrRZeIjjVmcNs13sMdS84vjbWpwSfM
q53a9I1X2cIESU9M1PsVbGdPi0nZcEcEakumIZz77EQKq50ZzhgeK23DIveaPXVb
wyRBt9EZ4bTtVyqjwZ4lakMW+f3eaI+h+KOStyT4v6d9PF3heX6OpfR5F/83szfo
n/s9A6lHasTTR4GmZ9uEK0tYE8dwQRnO8FUlJyIBGxAqfoecM6zzqqSejAPGjhht
ljqVLgTr9NVhk9pda8cp10snyL9IYULtoAbVLO1aMNbtgPxf45GJTpFwoJhFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqthL/TNdCoq+BaT1wMYFnK9NQGkwHwYDVR0j
BBgwFoAUXwgsV829aNgqhNmWfElYVUfm6A8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjIxOEYzQ0JBMjFDMzg4MTMxRTBDQUY2MzAzQTBCMTA4
RTcyQUU1M0M1NzNGM0YzNTE0MkRCMTYxMDAxNjhCLzAvNUYwODJDNTdDREJENjhE
ODJBODREOTk2N0M0OTU4NTU0N0U2RTgwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjA4MkM1N0NEQkQ2OEQ4MkE4
NEQ5OTY3QzQ5NTg1NTQ3RTZFODBGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEIyMThGM0NCQTIxQzM4ODEzMUUwQ0FGNjMwM0EwQjEwOEU3MkFFNTND
NTczRjNGMzUxNDJEQjE2MTAwMTY4Qi8wLzMyMzAzMDJlMzUzNDJlMzEzNDM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg2kjAN
BgkqhkiG9w0BAQsFAAOCAQEAZAYDve++fq6OVjK/KkmSNVGC9et+PPy6SzrcI6vl
RJEHWRPjb3b6/eiWaTuewM8UnDzSiSLOgPoMpWiliD/8qANFfgs75P5DefVfuv8d
G0YyDQNvoAArin0XUvt1AmKRVHEeFdHgZm3YqKNbiNjcnrtZIsS1ClS6/zeHJg+1
1Uy92lmhG4atiLBPAYwPPxuTT0BjNvQU/WessbEhLf6oC7zZfiUXHdxXExMK8VHk
mJpNBQjedhZe/H32p+kyfPx0+5zY0DTZPKifE9jP/3S98LbWM2nRw7WG7GpRjd25
yMBAMOYIfzn+DrYwpDi4YXrYn5tAaWHCTsu3eAoIDdy5Dw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:47:41 2025 by rpki-client