Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134372e302f32342d3234203d3e203136363239.roa
File:                     3230302e35342e3134372e302f32342d3234203d3e203136363239.roa (raw, json)
Hash identifier:          UmmbhMLqj7Px+q1m4jE6Y5yZUb5IOjcbK07XQwGGv04=
Subject key identifier:   42:96:E2:BF:00:D3:E0:E5:5C:E6:A9:04:6B:C9:A6:F5:BE:F1:E7:77
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       0FAA0566DDEB5E7E0491F887F0285DE415654513
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134372e302f32342d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:32:03 +0000
ROA not before:           Tue 04 Feb 2025 18:27:03 +0000
ROA not after:            Tue 03 Feb 2026 18:32:03 +0000
asID:                     16629
IP address blocks:        200.54.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:aa:05:66:dd:eb:5e:7e:04:91:f8:87:f0:28:5d:e4:15:65:45:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:03 2025 GMT
            Not After : Feb  3 18:32:03 2026 GMT
        Subject: CN=4296E2BF00D3E0E55CE6A9046BC9A6F5BEF1E777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:58:9d:6a:a3:b1:0d:59:50:a9:b2:0a:df:
                    78:e8:1a:01:55:f7:27:e8:8c:b9:49:e9:b8:20:d5:
                    83:e7:07:93:e7:8d:99:83:a0:44:08:11:f4:81:ab:
                    ca:5e:03:7c:98:cb:8b:d5:07:a0:ed:9d:ed:a5:d9:
                    66:ef:83:b7:31:86:67:d0:7a:a5:7c:3c:30:f0:2f:
                    ba:63:99:63:01:6a:8b:06:d9:c4:01:0f:a4:d0:1a:
                    87:d5:c9:12:8e:1d:81:24:de:6d:11:4b:b8:fa:86:
                    62:a9:0e:9d:89:23:54:47:89:58:23:64:67:9b:d1:
                    95:b2:83:88:74:ca:fb:fa:a6:de:0f:26:16:fc:14:
                    e1:91:0d:02:c3:68:96:ea:64:bb:f6:1c:58:74:92:
                    fe:3d:66:dd:12:fd:1c:ea:e8:7e:5c:10:d4:aa:d7:
                    3b:85:56:80:35:5d:97:40:72:57:cf:7b:d8:ef:46:
                    63:4f:36:32:09:0a:04:4e:bd:27:3f:7f:9d:15:e2:
                    67:84:a0:7f:c2:c3:c2:d6:c3:e6:2f:9c:61:26:8e:
                    34:ed:8b:4e:cf:84:72:2e:f8:5f:74:9a:07:14:2b:
                    cc:82:02:ea:7d:21:df:55:cd:65:0e:5d:56:f5:03:
                    31:a6:b1:03:93:76:0b:0f:ae:50:e3:b9:7f:ab:71:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:96:E2:BF:00:D3:E0:E5:5C:E6:A9:04:6B:C9:A6:F5:BE:F1:E7:77
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134372e302f32342d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:fa:71:7b:f1:c8:3c:05:47:dc:32:5d:44:db:3e:6c:27:75:
         e9:e1:30:b4:3e:e3:ae:8a:9d:18:00:96:c7:3b:6f:b4:d0:6c:
         29:1f:8e:b4:bd:93:cf:c6:35:4d:a9:18:99:eb:6c:bc:b7:f2:
         8e:b2:8f:ad:e7:19:8a:65:6d:9c:d6:41:77:48:b7:82:d2:81:
         a4:3d:b0:7a:b4:cc:09:ad:4c:d8:a4:62:c5:8a:3e:07:ae:1d:
         8c:12:0b:29:d6:c4:0f:55:e5:81:ba:58:d4:bd:ca:15:30:f0:
         00:fc:3d:3e:d7:f8:f6:40:b3:e1:cb:5f:84:33:14:17:60:ad:
         44:d4:a2:5a:30:4a:b4:ac:bd:24:5e:51:51:4d:04:ac:79:1a:
         ac:01:92:69:90:a2:89:c3:4f:ca:e2:81:53:ae:7f:99:4e:ca:
         23:f9:f7:8a:ef:b3:cb:9f:63:83:c4:7e:5b:a5:43:fb:48:cf:
         2c:05:c1:78:0b:f2:53:c9:0e:9e:e7:16:cc:91:69:73:a3:53:
         5d:cd:95:cc:66:44:28:9f:7b:63:4e:15:a9:88:7a:a0:e8:4d:
         81:36:eb:02:87:db:1f:ea:ce:a2:1d:e4:c9:d1:11:67:e8:55:
         4a:21:c9:68:d0:7c:85:d5:a6:f5:ed:d6:f9:a9:ed:79:2b:b7:
         6b:e4:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:51 2025 by rpki-client