Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135342e302f32332d3234203d3e203135333131.roa
File:                     3230302e35342e3135342e302f32332d3234203d3e203135333131.roa (raw, json)
Hash identifier:          p1Dm/dCJFPw5x5D3T75CNjGzUVtvhWxZX7OrFcb8h2Y=
Subject key identifier:   55:CD:2A:94:00:E2:F0:40:68:51:D4:B5:4C:EE:BC:A0:84:D7:7B:5A
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       645483E97D7E724075F6D3E70E9E9026867013C4
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135342e302f32332d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 17:51:53 +0000
ROA not before:           Tue 05 Mar 2024 17:46:53 +0000
ROA not after:            Tue 04 Mar 2025 17:51:53 +0000
asID:                     15311
IP address blocks:        200.54.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:54:83:e9:7d:7e:72:40:75:f6:d3:e7:0e:9e:90:26:86:70:13:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:53 2024 GMT
            Not After : Mar  4 17:51:53 2025 GMT
        Subject: CN=55CD2A9400E2F0406851D4B54CEEBCA084D77B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:c5:85:a8:3f:68:6c:d7:1e:4e:67:96:17:
                    8f:5c:ff:95:5b:68:ad:25:6f:0e:50:4f:0c:a4:e7:
                    ab:2b:ec:6a:10:29:f6:f3:f7:66:00:8b:75:fe:df:
                    3c:3d:c8:b3:dd:20:2e:33:61:c8:96:f2:3e:2d:7f:
                    94:1a:08:96:06:fc:15:8a:94:83:c9:0e:eb:4b:ce:
                    f9:ba:68:fe:20:6c:e0:05:bb:8a:8f:5d:60:80:a6:
                    d3:ae:40:f5:f2:66:82:4b:c5:ef:08:cf:ab:11:a4:
                    8a:b2:92:52:ce:7e:27:6e:c0:20:38:14:5f:82:31:
                    1d:9e:36:74:00:8b:72:d3:78:62:87:14:42:eb:3e:
                    df:41:8e:95:d2:0c:d3:01:5b:c9:80:04:2a:06:1f:
                    bf:ec:19:4f:60:b1:2e:03:5c:e1:c6:ec:eb:55:e3:
                    eb:30:ad:3b:7d:c3:79:7c:44:37:2d:28:86:5e:f6:
                    f7:cc:31:74:0c:74:d7:81:63:0c:19:88:d0:25:0b:
                    00:a6:11:cc:1d:f9:3e:f5:25:50:b3:38:fa:11:9b:
                    8d:f5:80:e8:19:f8:f3:d9:30:0f:2e:8a:36:6c:ee:
                    71:60:f4:9a:70:5a:81:77:b6:08:bb:db:3b:f5:25:
                    37:d5:17:c2:01:85:be:14:50:e9:a8:dc:a9:6b:96:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CD:2A:94:00:E2:F0:40:68:51:D4:B5:4C:EE:BC:A0:84:D7:7B:5A
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135342e302f32332d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:66:91:f0:a8:39:a6:e3:88:68:1d:a9:33:79:ce:06:93:e2:
         5f:d3:21:7e:74:b6:e6:86:eb:aa:e2:a0:7e:f9:dc:62:23:17:
         db:75:da:0b:aa:ef:7f:e6:81:e9:61:9b:f0:44:4c:1c:18:33:
         00:9b:fe:30:8c:46:8e:7c:7e:87:ae:72:2c:67:64:53:09:84:
         d7:c4:0a:e8:ba:b4:e4:c7:6a:37:f0:6b:ed:c6:59:c9:e6:4a:
         c4:1b:b7:c5:b3:f4:a2:92:4f:e6:12:57:66:e2:49:c8:55:c2:
         df:c6:ea:24:aa:70:af:74:6e:b9:dd:55:3c:17:ff:63:19:0b:
         83:9b:ab:79:52:c4:bd:fb:4a:e7:6c:11:5f:1d:b7:4e:cd:25:
         92:a1:63:77:f5:2e:f4:a7:ee:26:8d:9a:85:3b:ec:dd:59:62:
         b4:3d:98:fb:ed:9b:21:fb:5e:49:61:ec:d0:78:ee:96:b1:57:
         cb:b2:9a:94:89:6c:9e:3e:55:73:81:31:77:a4:c8:e1:75:77:
         87:d6:f1:68:1d:fc:78:cc:84:34:68:82:8d:fc:0b:80:d8:a9:
         50:e1:1f:8a:62:cc:7f:04:52:8d:5c:cd:d4:f6:9a:70:82:34:
         a3:e2:2e:92:1a:2b:ab:f6:9b:22:ea:bb:96:ab:b9:ed:98:10:
         8a:07:84:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org