Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138312e302f32342d3234203d3e203135333131.roa
File:                     3230302e35342e3138312e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier:          PX1jB7LfoTRxmaORh7a1WbJdWn9bDyJidkBc799Ijlg=
Subject key identifier:   46:79:E4:DC:42:42:A1:E9:0F:CE:7B:AC:A9:DE:60:65:13:22:FB:CD
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       594735BFB3F4EB9E0A1FEAB809DE7242B2A693F4
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138312e302f32342d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 17:51:49 +0000
ROA not before:           Tue 05 Mar 2024 17:46:49 +0000
ROA not after:            Tue 04 Mar 2025 17:51:49 +0000
asID:                     15311
IP address blocks:        200.54.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:47:35:bf:b3:f4:eb:9e:0a:1f:ea:b8:09:de:72:42:b2:a6:93:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:49 2024 GMT
            Not After : Mar  4 17:51:49 2025 GMT
        Subject: CN=4679E4DC4242A1E90FCE7BACA9DE60651322FBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:90:6a:7c:ab:1f:3b:55:9c:ff:75:98:fb:
                    55:7f:af:47:f7:15:57:4e:8d:86:fc:b2:c1:9e:6b:
                    c4:8b:2f:17:60:05:6a:ae:c8:37:5a:f3:d6:4c:90:
                    2c:3b:05:9b:93:56:74:c3:3f:a5:77:67:06:f1:e9:
                    14:17:a8:e7:5e:4c:86:35:e6:63:d5:de:9b:e3:54:
                    2e:8b:ec:b9:94:ab:b0:69:95:99:41:08:51:ca:f4:
                    c6:61:3e:c2:ef:dd:ca:fc:fe:af:d5:8f:20:8b:88:
                    46:a0:93:a4:db:8d:13:9f:1b:fe:24:bb:40:a4:2d:
                    3d:73:ae:bc:98:dd:01:6f:25:70:37:47:eb:10:c1:
                    40:bd:c6:ee:c6:45:2f:f0:c1:4d:aa:bd:13:bd:c5:
                    15:cd:5d:e5:20:fb:6a:8a:46:95:76:9c:f7:e7:92:
                    fb:db:ec:42:24:d5:43:16:96:10:7f:85:e3:ba:54:
                    b9:59:1d:f2:cd:7e:ef:c9:b5:15:cd:60:c6:19:b5:
                    e2:5f:71:4b:f8:b7:47:d3:8a:e0:f9:d9:d7:69:11:
                    5f:db:d4:9f:6b:15:13:b9:02:de:a7:fd:9f:b4:61:
                    57:20:18:2c:68:b1:f4:0f:8c:30:f7:06:2b:9f:13:
                    ca:1c:fb:c0:9a:1d:04:c8:d1:b4:c4:3f:86:3d:4c:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:79:E4:DC:42:42:A1:E9:0F:CE:7B:AC:A9:DE:60:65:13:22:FB:CD
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138312e302f32342d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:64:45:f8:ec:8d:9e:47:ae:ce:40:aa:f2:ff:b8:b5:de:58:
         bf:4c:e0:cb:2c:ce:ce:0e:93:9f:b2:99:78:4c:45:91:eb:cf:
         56:b4:5b:b9:6d:60:13:92:b6:97:46:ce:4e:49:98:e2:2c:29:
         93:98:7d:40:c5:60:7b:29:68:2e:12:a8:41:37:a1:5e:7d:fb:
         8e:a6:90:a2:48:54:88:b4:79:20:31:23:6d:8a:bc:44:fd:3e:
         c1:f4:83:c1:44:28:ae:25:f8:45:82:d1:67:72:2a:9d:ac:fe:
         51:49:da:cb:f0:a2:09:2d:2e:3d:b3:c1:7d:dc:8a:45:f3:02:
         02:1f:1d:3c:37:dc:22:cd:05:fd:47:31:e0:2a:13:b6:c2:d3:
         e2:3d:d2:a9:74:fe:29:88:b9:0b:56:eb:4a:47:e1:25:3d:15:
         7f:9d:4b:59:e6:06:10:e3:40:65:2a:91:d3:c2:02:e7:a3:a7:
         e1:c4:12:22:b1:a5:12:ed:fe:a8:bb:9e:46:cc:01:2f:0a:35:
         93:7b:08:b2:25:b3:54:29:df:ff:ec:5a:21:ff:b9:7d:3a:5a:
         cd:33:7d:32:11:d9:91:b3:4c:c6:2f:e4:b7:23:bc:b1:77:d1:
         12:d8:3d:59:25:87:09:53:88:8b:d1:48:c1:88:5c:4a:15:43:
         85:a6:a8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org