Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134372e302f32342d3234203d3e2037343138.roa
File:                     3230302e35342e3134372e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          7lUT1qw2B0oPAmthN6FcL3EHkjUbDT566+dSGyRHQUk=
Subject key identifier:   85:11:F6:38:34:63:E0:44:20:2C:F6:1C:73:9B:C8:20:E8:7C:ED:48
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       3F1F9D344BB8BE1F5F4EE921BD26D05380F7A812
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134372e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:51:48 +0000
ROA not before:           Tue 05 Mar 2024 17:46:48 +0000
ROA not after:            Tue 04 Mar 2025 17:51:48 +0000
asID:                     7418
IP address blocks:        200.54.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1f:9d:34:4b:b8:be:1f:5f:4e:e9:21:bd:26:d0:53:80:f7:a8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:48 2024 GMT
            Not After : Mar  4 17:51:48 2025 GMT
        Subject: CN=8511F6383463E044202CF61C739BC820E87CED48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:8b:ed:89:9e:cd:01:a8:bc:62:1d:e4:ea:
                    79:06:4e:e5:7a:52:fa:11:ac:38:c3:e5:ef:cf:81:
                    9d:70:32:39:17:96:19:e0:88:6a:9f:c0:28:c7:54:
                    cc:e1:4a:d0:ac:05:8a:3f:b0:ff:93:9a:a3:d3:bb:
                    44:8f:ea:30:46:db:0c:06:26:ad:22:af:2b:08:ba:
                    e7:34:78:8e:41:9d:18:9d:e1:48:68:62:d2:d0:59:
                    7e:78:d7:03:65:8f:ad:75:2d:ca:7a:23:3c:bd:7d:
                    93:5e:cf:e7:d4:65:8b:a3:95:5e:ca:36:f4:b5:46:
                    de:c8:12:f8:0e:5b:5d:90:0e:8a:7f:c1:98:54:fe:
                    70:5b:97:16:3b:db:e0:58:12:e8:f2:8d:09:b3:40:
                    eb:26:c1:3f:dc:85:2c:29:b7:32:21:5c:a2:0e:d2:
                    46:23:27:34:8f:8a:b3:0a:1a:ec:e2:b7:14:ca:1e:
                    6e:28:04:51:1d:ad:5f:cb:eb:40:bc:92:f6:03:ef:
                    3c:8d:3e:27:e4:e0:25:3a:11:c0:8d:70:dc:a5:c4:
                    08:6d:d2:dc:91:60:91:43:11:35:5e:e3:02:f4:91:
                    ee:86:d9:23:12:99:da:7b:fa:8a:9c:b5:ba:38:ff:
                    4e:98:1a:ed:cc:ab:a2:96:f5:6a:fc:27:51:04:ff:
                    a9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:11:F6:38:34:63:E0:44:20:2C:F6:1C:73:9B:C8:20:E8:7C:ED:48
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3134372e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c8:55:5e:7c:ee:05:ca:56:50:c8:fa:7d:df:71:ee:b6:22:
         a8:fb:ec:88:1f:24:15:e9:8c:8d:b3:83:b1:d7:0e:95:df:62:
         b8:85:a5:0e:8b:24:d6:42:52:f0:16:5e:64:e0:b9:c3:69:18:
         e2:4f:b6:13:6e:c1:f1:2b:c5:4c:4b:9a:8d:02:99:63:c2:d5:
         d1:c6:94:38:1d:25:a2:db:af:0e:55:2e:55:b8:ef:90:2d:30:
         95:b9:66:28:a1:91:60:3b:49:68:6e:07:a3:6c:a3:e8:b7:05:
         0e:cd:2f:5a:29:1d:f7:24:cc:bb:3f:b9:51:76:0b:51:08:5e:
         f5:f3:0c:14:a8:2e:4a:37:41:3f:d6:56:18:06:22:d1:dd:ef:
         65:28:d8:5b:de:7d:9b:c9:de:f1:16:81:56:ef:f6:42:09:25:
         58:40:2c:d2:1a:a0:3b:64:ed:ee:38:1d:49:4b:87:d8:6b:5d:
         d4:61:4e:4e:d0:e4:1f:3c:3f:98:50:ff:2f:4b:a5:74:45:e7:
         1b:c5:9e:1a:25:92:4d:ae:83:ba:1f:38:2d:c0:aa:54:73:ae:
         74:ec:8b:9f:84:09:3a:58:ab:df:8a:03:26:e0:cf:54:c3:46:
         d0:9d:6e:c2:2c:42:24:7e:65:37:36:40:7d:8b:af:13:c8:08:
         bc:0a:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:47 2024 by rpki-client on console-ams.rpki-client.org