Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135362e302f32322d3234203d3e203135333131.roa
File:                     3230302e35342e3135362e302f32322d3234203d3e203135333131.roa (raw, json)
Hash identifier:          PHsQng3wwP39FfulUIsrWxGCiJEC0qKvHbznMnViEcI=
Subject key identifier:   D7:57:1F:5F:B7:09:78:75:03:EF:8C:4D:0A:7A:DA:B8:51:A2:81:3F
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       795BAA47394E8DC0AD93058E12BC8FF9D0B6ADE3
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135362e302f32322d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 18:32:06 +0000
ROA not before:           Tue 04 Feb 2025 18:27:06 +0000
ROA not after:            Tue 03 Feb 2026 18:32:06 +0000
asID:                     15311
IP address blocks:        200.54.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5b:aa:47:39:4e:8d:c0:ad:93:05:8e:12:bc:8f:f9:d0:b6:ad:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:06 2025 GMT
            Not After : Feb  3 18:32:06 2026 GMT
        Subject: CN=D7571F5FB709787503EF8C4D0A7ADAB851A2813F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:9f:d4:a5:76:0e:1b:16:b1:56:e5:15:d6:
                    c0:36:c5:fe:96:7c:84:5d:6a:1b:65:0d:c3:34:08:
                    e3:da:e9:d5:04:eb:ea:78:d4:1a:90:9b:93:b6:21:
                    a0:e1:3c:07:67:c8:cd:e8:48:0d:0b:77:55:87:de:
                    fa:56:29:89:4b:4e:0b:50:38:03:72:55:0b:4f:67:
                    7d:f4:3d:79:8b:50:86:73:23:04:0c:e4:f7:72:18:
                    06:28:76:e2:f1:e7:31:61:96:3b:6a:71:0f:66:d7:
                    96:7c:7b:b0:b1:75:81:e7:e7:a7:f0:1b:47:79:7b:
                    b0:36:16:d0:09:8a:54:7c:ad:d0:17:22:5d:4c:91:
                    a4:29:61:9a:1b:e7:ba:86:08:b9:a0:cb:0e:24:09:
                    cc:d9:e5:38:ad:e7:11:1d:87:c7:21:c4:74:83:96:
                    32:ff:2f:46:0d:a2:e8:e6:a8:0e:94:79:03:64:2e:
                    af:c5:df:9c:b6:33:21:66:50:72:87:ad:3a:9b:44:
                    6b:c3:7c:94:7b:3e:97:18:7f:7b:29:2f:a4:3a:dc:
                    1b:a6:81:fe:11:dc:17:72:04:bb:ed:5f:aa:12:a7:
                    57:3d:dc:df:9e:50:2d:4d:40:25:d8:91:1f:1e:b7:
                    68:ef:a6:93:e0:90:93:d6:92:7a:64:e7:79:46:f2:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:57:1F:5F:B7:09:78:75:03:EF:8C:4D:0A:7A:DA:B8:51:A2:81:3F
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135362e302f32322d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:34:d3:94:72:72:61:f6:d5:b3:05:cc:65:a5:c2:78:f3:
         f4:65:ea:17:b7:4a:ff:6e:32:07:4f:e8:76:ca:2a:d3:df:7b:
         a8:1d:e6:e5:23:ec:f3:3f:d5:46:aa:54:5c:74:cd:ad:c9:e7:
         f3:d7:ac:75:f1:33:be:30:18:a2:3e:62:1d:20:ee:f0:b2:c8:
         b1:59:1e:75:7f:31:3c:86:82:3c:16:20:70:e7:ec:f3:1a:9d:
         18:8c:66:70:83:61:87:36:b9:6f:2c:e0:0f:14:a7:9a:14:fe:
         70:8a:57:4d:8e:11:4b:cf:61:06:a5:00:1b:cf:2a:4b:cb:29:
         96:8a:d4:17:85:06:41:b4:82:37:32:0a:53:e3:bf:7f:70:eb:
         44:66:97:af:8f:38:78:93:d3:fa:77:86:24:8b:b3:93:60:ee:
         f9:5e:5a:4b:74:43:a1:3a:7a:95:c7:94:4e:74:d2:8c:49:d8:
         68:04:a6:99:18:c3:99:57:a8:ee:7e:e1:4c:b2:32:3e:fe:3e:
         95:51:15:a6:18:2d:4c:d9:72:0c:73:08:ad:c2:fe:6d:d1:c7:
         c9:dd:19:c9:fa:68:02:3c:ea:6f:e9:54:b4:d7:08:31:87:d2:
         ec:26:26:5e:20:7e:35:36:07:ac:1d:3c:95:4b:b2:1c:ed:49:
         92:73:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:26:08 2025 by rpki-client