Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3137362e302f32322d3234203d3e203135333131.roa
File:                     3230302e35342e3137362e302f32322d3234203d3e203135333131.roa (raw, json)
Hash identifier:          nu46y7f+qJoGbDUVsONv37lCp2L70obfBHC8UG2r6JU=
Subject key identifier:   40:04:43:64:A7:83:C2:41:32:01:41:C1:DC:A1:69:B2:2E:18:24:92
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       0A6481D484A8C2C63D4A44D32179E19AE28E9F9F
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3137362e302f32322d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 18:32:04 +0000
ROA not before:           Tue 04 Feb 2025 18:27:04 +0000
ROA not after:            Tue 03 Feb 2026 18:32:04 +0000
asID:                     15311
IP address blocks:        200.54.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:64:81:d4:84:a8:c2:c6:3d:4a:44:d3:21:79:e1:9a:e2:8e:9f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:04 2025 GMT
            Not After : Feb  3 18:32:04 2026 GMT
        Subject: CN=40044364A783C241320141C1DCA169B22E182492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ab:e0:f5:a2:29:05:a0:75:93:8f:8a:63:94:
                    55:85:43:f9:d0:4c:98:ee:97:44:a8:e6:92:8e:67:
                    1e:df:e8:52:04:27:6c:59:72:bb:e0:ce:20:da:7f:
                    ff:87:1e:ac:4c:30:56:b5:93:e6:a2:03:24:db:88:
                    d3:51:94:a6:f1:31:e5:15:1d:2c:5c:e2:ee:6f:5e:
                    47:ea:36:44:21:80:4f:3f:7f:cc:bb:50:ce:2f:f1:
                    55:0c:3d:91:e9:51:19:72:05:9c:f7:f8:53:5f:cd:
                    2b:98:3a:be:55:f1:58:94:2e:b2:34:29:90:00:9e:
                    32:b0:aa:53:a3:27:5b:fd:c5:32:25:79:d6:45:6f:
                    cb:94:f4:28:3f:66:c8:54:18:c0:a6:98:41:17:1d:
                    67:49:5b:24:67:63:b7:1d:4d:25:58:f0:6b:0d:31:
                    bb:99:3f:8d:4f:22:bd:48:74:fd:4c:1b:97:a8:f0:
                    72:6e:58:70:17:43:e9:89:8d:ad:7d:c8:b5:51:86:
                    f5:b0:c3:76:dd:ab:64:27:13:11:31:62:4b:6d:98:
                    bd:b8:50:f5:60:96:b9:cf:91:33:0c:97:07:ae:be:
                    ad:7e:37:dc:27:15:58:fb:c7:e8:98:24:fa:2f:23:
                    2d:71:8c:24:8b:36:29:61:53:c0:ec:b4:60:74:00:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:04:43:64:A7:83:C2:41:32:01:41:C1:DC:A1:69:B2:2E:18:24:92
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3137362e302f32322d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:f3:45:8d:69:c3:7a:9a:16:1c:f2:33:58:17:2f:bb:7c:e3:
         34:e6:af:69:61:d5:58:d2:3d:71:94:c6:de:95:ef:84:17:8a:
         3e:13:d2:ac:ff:e2:6d:e8:46:c1:57:69:1a:85:1f:d0:9f:fb:
         5b:65:56:b5:ce:e0:9a:a9:33:c6:d7:c8:da:01:18:fb:2f:a4:
         d1:04:e6:85:f9:82:6a:60:b5:68:6d:d4:2d:38:9d:ad:62:c4:
         f3:64:e2:85:63:e8:ff:58:d9:5e:f3:12:0a:be:d4:e9:19:72:
         36:9e:e0:8c:71:92:88:ed:9f:07:2c:27:35:2e:40:a0:6d:16:
         9d:e2:d8:6b:b9:4c:08:51:27:73:4c:8c:d7:88:d0:4b:ad:67:
         86:e5:a6:1b:d2:57:93:df:c7:9a:9b:5e:92:7f:9f:77:e3:68:
         ac:f3:2d:f4:f8:66:06:e8:22:9b:bd:e8:d0:76:cc:9c:a7:e3:
         5a:1a:26:04:57:9d:70:59:d1:5d:38:34:de:40:f6:f1:e1:c6:
         85:9f:d6:de:fa:6e:fa:33:f5:38:12:1a:26:87:fa:eb:6d:f6:
         03:da:4a:cf:3a:28:cb:a6:c5:54:9b:20:bf:11:69:03:a6:64:
         b9:84:4c:55:76:1b:90:11:4d:5c:81:13:68:f7:01:2c:62:a2:
         b0:58:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:26:14 2025 by rpki-client