Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135332e302f32342d3234203d3e203135333131.roa
File:                     3230302e35342e3135332e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier:          lqrG9wC0EMgezAWT47CfABR8d4d9g1AdbCtv04zYDIo=
Subject key identifier:   C3:E9:F8:E2:30:75:D7:32:A4:2B:92:D8:3A:E5:0B:53:CC:98:8A:22
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       5E74CB74246AA25CEA265607FE470E7FD8DF91C2
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135332e302f32342d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 18:32:03 +0000
ROA not before:           Tue 04 Feb 2025 18:27:03 +0000
ROA not after:            Tue 03 Feb 2026 18:32:03 +0000
asID:                     15311
IP address blocks:        200.54.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:74:cb:74:24:6a:a2:5c:ea:26:56:07:fe:47:0e:7f:d8:df:91:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:03 2025 GMT
            Not After : Feb  3 18:32:03 2026 GMT
        Subject: CN=C3E9F8E23075D732A42B92D83AE50B53CC988A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:59:18:91:a5:69:e0:5d:91:93:20:5f:fb:7f:
                    74:18:7a:60:29:1c:82:26:3d:52:1a:e8:2d:4e:b9:
                    34:29:47:d3:1f:39:eb:f3:36:b4:7e:51:4d:4c:9d:
                    12:d6:c4:59:7f:2c:c1:2a:03:ef:b2:45:df:be:7c:
                    3a:f8:be:68:c9:a7:16:6e:fb:ed:0e:27:5c:f8:49:
                    ad:bf:e2:7c:ec:27:83:ed:8a:ff:bb:14:25:0e:bb:
                    25:74:85:53:11:ca:c8:4b:42:13:97:0a:c5:c4:ab:
                    70:e2:b1:9e:ed:5f:43:8a:53:65:31:2e:2a:dc:99:
                    ba:7e:19:bc:3d:77:9a:23:ab:c3:1e:cb:64:a4:80:
                    9f:5b:ea:2c:cf:9d:79:28:b3:21:40:ad:a7:03:d2:
                    ea:da:d6:af:70:a4:df:55:9a:bf:99:fc:11:c1:9a:
                    a7:20:e5:e0:fc:f8:08:db:9d:ad:d4:a4:33:08:4d:
                    54:5f:eb:ba:c2:6b:13:94:a2:c7:19:a9:55:23:fc:
                    23:8e:6b:a9:56:8a:18:3a:ba:ea:3a:cc:2e:98:ce:
                    8e:01:51:8f:89:a1:56:f8:c4:d3:ca:56:7b:52:00:
                    43:07:9c:b9:76:76:5d:a7:7d:b3:a2:a6:59:36:6d:
                    b4:00:90:db:14:cc:c3:b4:d2:e2:6f:b4:0d:da:ab:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:F8:E2:30:75:D7:32:A4:2B:92:D8:3A:E5:0B:53:CC:98:8A:22
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135332e302f32342d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:b7:e4:ce:97:f6:49:1d:2f:6e:57:6d:0d:00:a6:6d:36:
         7c:71:ec:b1:f4:c0:8c:20:98:57:65:96:a4:97:a7:69:b0:c5:
         63:1e:55:38:1a:f0:8b:f0:5a:f9:42:a8:9e:ed:71:85:4a:88:
         c4:6d:fc:0c:be:a2:58:05:61:4d:e0:92:d8:b4:d6:51:db:a3:
         c1:be:cf:19:84:74:06:ee:21:37:ee:33:ae:00:ac:da:b6:b6:
         59:d2:c5:57:38:f4:9d:3f:06:63:07:67:ec:b1:8c:d3:de:01:
         cf:53:8a:a9:9d:a5:0c:2e:ad:21:1c:dc:bb:87:ef:22:e5:45:
         b0:45:38:6b:8b:e3:15:d1:6c:ee:d4:13:d0:a7:bd:aa:88:59:
         a5:1e:b5:41:fe:4a:a0:88:5f:66:e5:7c:ca:c6:2c:2e:5d:f8:
         7b:e0:9f:c9:c1:5a:29:81:e1:d3:05:23:0f:d1:bb:52:15:2a:
         83:d2:18:0f:d1:ed:70:e4:eb:ae:04:75:ca:23:c9:9a:06:2c:
         bf:2a:2d:e0:54:ca:b3:40:b7:9e:9e:ce:81:be:2a:e3:56:20:
         53:90:ff:d2:be:7b:ed:55:f1:8f:53:2a:68:a6:d3:30:81:bf:
         c6:fc:7d:34:1f:20:87:ab:72:ee:ff:e2:06:7e:97:24:39:87:
         8f:08:eb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:26:02 2025 by rpki-client