Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138322e302f32332d3234203d3e203135333131.roa
File:                     3230302e35342e3138322e302f32332d3234203d3e203135333131.roa (raw, json)
Hash identifier:          zeHeE8o7C7M+OHFoXFG4XcNf2Qeq/bu3N1f3dxQ58AA=
Subject key identifier:   90:2C:CC:AA:CC:68:1D:73:1D:AD:1A:19:76:FC:E8:D2:24:AF:C2:D6
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       0B3AD25578BD82FC1BD5616E811D2DBEB9D724AC
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138322e302f32332d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 18:31:57 +0000
ROA not before:           Tue 04 Feb 2025 18:26:57 +0000
ROA not after:            Tue 03 Feb 2026 18:31:57 +0000
asID:                     15311
IP address blocks:        200.54.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 15:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3a:d2:55:78:bd:82:fc:1b:d5:61:6e:81:1d:2d:be:b9:d7:24:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:26:57 2025 GMT
            Not After : Feb  3 18:31:57 2026 GMT
        Subject: CN=902CCCAACC681D731DAD1A1976FCE8D224AFC2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:ae:34:c3:88:34:d0:86:8c:b0:a8:27:61:
                    cb:1d:e4:d0:b6:29:be:f6:82:e8:12:fe:fa:c0:4e:
                    c9:4a:08:02:a3:eb:14:4d:80:3b:ae:11:61:ae:ee:
                    d9:27:c6:59:cc:19:8b:a1:02:ce:b4:99:f5:31:aa:
                    95:80:3e:d8:ac:90:1a:03:f4:1a:4f:e7:0b:67:13:
                    b1:e4:20:38:10:b5:8d:e1:92:0d:40:e5:75:5a:e2:
                    2c:e1:c6:bb:f1:9c:c3:c5:e9:47:b5:b0:59:66:c6:
                    ba:6f:cc:eb:cf:14:4a:bb:5e:72:2f:bf:15:47:f6:
                    b5:cc:11:e3:87:e3:fd:9d:a1:31:a5:50:8a:25:34:
                    e6:2a:d7:c7:a2:34:c5:d0:c7:b1:d4:53:ba:86:28:
                    0c:95:07:ef:b8:59:b8:a1:21:26:44:0a:49:01:c5:
                    12:81:ef:d8:f7:02:05:43:5c:9d:c4:dc:ed:91:6f:
                    d0:fc:0b:bc:3a:96:21:48:3f:69:cd:71:38:7e:f2:
                    6e:3d:ab:15:e6:03:3b:99:bc:ce:5f:f2:46:9f:82:
                    f1:e3:6e:31:67:3e:db:50:ee:39:f4:06:ab:51:2e:
                    a4:92:b5:fc:bc:7d:55:4c:ca:a0:42:69:0b:5a:62:
                    36:5c:88:10:44:be:ad:54:cc:63:72:9a:27:21:32:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2C:CC:AA:CC:68:1D:73:1D:AD:1A:19:76:FC:E8:D2:24:AF:C2:D6
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138322e302f32332d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:d4:69:18:48:c8:e5:cc:95:4d:00:d6:b7:39:fc:9d:f2:38:
         a5:d3:92:cb:17:3f:71:96:01:5b:4f:42:38:7d:f1:a6:6d:16:
         8d:6c:71:6a:3a:38:24:34:33:3b:da:2f:3e:a3:a6:6e:d1:c2:
         b2:fa:f5:5f:18:cf:eb:3f:c0:22:b4:29:b5:58:36:9b:af:8b:
         ff:9c:c9:b7:6b:ec:14:d9:b4:95:5e:03:dc:e2:83:71:13:24:
         81:dd:6b:97:51:6a:e1:55:84:1c:1d:f6:94:9b:f1:40:c8:5b:
         cb:7b:03:fd:51:9c:7c:d8:c6:9a:61:72:ec:f3:44:3b:35:b9:
         03:5f:aa:c7:eb:75:67:98:20:1b:25:c2:b7:ab:b9:a6:87:91:
         1f:86:6a:2f:49:e4:83:07:03:15:8a:84:a4:ec:e4:4d:82:84:
         0a:a9:cf:db:88:6c:f9:15:78:6d:08:42:ba:d5:64:40:41:a3:
         d6:84:18:9e:fc:d6:df:e5:e0:09:d4:32:ea:d4:c2:4a:37:8c:
         11:6e:18:46:de:88:66:b1:50:3f:de:c5:71:ab:a8:92:7b:fd:
         c6:3f:5c:2c:0c:e9:7b:12:88:ca:75:73:17:15:ab:f8:2b:05:
         94:c4:6b:66:ac:24:b3:2c:dd:ba:1b:63:8b:f1:36:87:c9:3d:
         75:76:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:29:48 2025 by rpki-client