Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138382e302f32342d3234203d3e203135333131.roa
File:                     3230302e35342e3138382e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier:          kx56EAvm/4KOhD/wmI/SXGiaQhn0GBR6ALLhkG3aRCI=
Subject key identifier:   1D:9E:35:F6:40:CE:A4:27:98:73:63:92:A6:95:92:03:A0:12:67:72
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       38288DAA6645B112126FE01BD0B03DC2836AE8D7
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138382e302f32342d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 17:51:47 +0000
ROA not before:           Tue 05 Mar 2024 17:46:47 +0000
ROA not after:            Tue 04 Mar 2025 17:51:47 +0000
asID:                     15311
IP address blocks:        200.54.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:28:8d:aa:66:45:b1:12:12:6f:e0:1b:d0:b0:3d:c2:83:6a:e8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:47 2024 GMT
            Not After : Mar  4 17:51:47 2025 GMT
        Subject: CN=1D9E35F640CEA42798736392A6959203A0126772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:74:d4:8b:77:88:19:1f:fa:46:35:bd:fe:22:
                    16:fe:a5:ea:15:f2:47:11:84:33:4e:cd:50:80:3d:
                    f2:41:e6:44:8f:a6:da:7c:69:f4:ce:f8:91:ee:a2:
                    45:34:5e:34:43:a8:e1:e0:f2:0b:03:df:53:5f:67:
                    7b:43:8a:ea:80:d4:f2:01:c6:e4:c0:8d:2d:a8:c9:
                    6d:08:26:1e:71:25:f4:23:fc:8a:b0:3b:3b:3c:cf:
                    00:94:ee:90:c2:59:2c:2b:e1:8f:c5:4f:06:e0:88:
                    ed:0b:58:66:13:c4:8b:5f:d1:8d:79:33:33:9a:9a:
                    4c:62:e2:8b:90:5e:54:71:fb:1e:cd:de:c1:25:3f:
                    4b:af:e6:5a:6c:29:ea:a7:dd:bd:3c:fc:e8:9c:29:
                    78:b6:00:e3:36:14:b9:58:24:25:48:4c:db:9f:d3:
                    f5:28:6a:85:71:fe:10:66:bb:7d:22:4c:d3:78:75:
                    7d:35:20:6f:c2:35:97:3f:21:15:f3:b8:71:f0:19:
                    4f:e0:10:6c:76:af:ad:4a:a6:5f:4d:ab:cc:b2:d9:
                    fd:fe:0b:6d:4a:72:59:ce:03:b4:b5:53:b2:be:ed:
                    e4:ab:16:44:fb:54:d1:a9:2f:c4:e6:60:a6:b3:d3:
                    dd:f9:51:e2:43:05:58:7e:54:94:45:46:ee:d4:50:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9E:35:F6:40:CE:A4:27:98:73:63:92:A6:95:92:03:A0:12:67:72
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138382e302f32342d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:4f:9d:ba:9d:69:8f:cb:16:c6:af:b7:5a:10:91:48:7d:4f:
         1d:16:b4:ea:72:72:fa:df:12:ad:ac:13:35:0c:65:6a:db:4f:
         f3:03:dd:96:fb:53:10:26:b7:4b:69:1e:5b:fc:1c:31:50:36:
         58:63:6b:8c:98:08:5c:83:74:e2:b7:e4:66:17:c3:ce:55:34:
         e5:d1:fd:ca:32:71:3f:62:e8:55:a2:d6:6a:b4:3e:39:ef:c4:
         e1:75:f9:a1:e5:2a:ce:be:a5:22:b8:f0:94:0b:dd:09:d2:5b:
         60:97:1d:77:e0:41:36:d2:ca:ab:a4:89:32:7d:07:d7:db:d3:
         35:e0:4f:a3:71:ae:2c:e5:3b:e2:0b:41:a2:4a:e9:67:65:6f:
         96:87:43:e1:7e:0c:68:f5:13:f8:6b:07:65:33:5e:2b:61:07:
         2e:b2:88:b6:6b:51:f0:3a:87:18:04:4e:7b:fb:88:28:75:10:
         6f:8f:03:90:34:f5:5c:7f:5d:00:fc:c8:3d:3a:f3:5d:f5:20:
         dd:ed:68:1c:f5:72:93:d0:60:5e:91:80:8e:9e:13:c3:48:b6:
         db:9f:75:1b:9c:41:5d:a2:9d:5e:a3:ab:fc:21:02:6a:36:5e:
         98:35:f4:01:17:6b:8e:3c:2a:d7:b0:f6:4f:6e:d4:ea:91:35:
         1f:85:d8:43
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOCiNqmZFsRISb+Ab0LA9woNq6NcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwODJDNTdDREJENjhEODJBODREOTk2N0M0OTU4NTU0
N0U2RTgwRjAeFw0yNDAzMDUxNzQ2NDdaFw0yNTAzMDQxNzUxNDdaMDMxMTAvBgNV
BAMTKDFEOUUzNUY2NDBDRUE0Mjc5ODczNjM5MkE2OTU5MjAzQTAxMjY3NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7dNSLd4gZH/pGNb3+Ihb+peoV
8kcRhDNOzVCAPfJB5kSPptp8afTO+JHuokU0XjRDqOHg8gsD31NfZ3tDiuqA1PIB
xuTAjS2oyW0IJh5xJfQj/IqwOzs8zwCU7pDCWSwr4Y/FTwbgiO0LWGYTxItf0Y15
MzOamkxi4ouQXlRx+x7N3sElP0uv5lpsKeqn3b08/OicKXi2AOM2FLlYJCVITNuf
0/UoaoVx/hBmu30iTNN4dX01IG/CNZc/IRXzuHHwGU/gEGx2r61Kpl9Nq8yy2f3+
C21KclnOA7S1U7K+7eSrFkT7VNGpL8TmYKaz0935UeJDBVh+VJRFRu7UUI8rAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHZ419kDOpCeYc2OSppWSA6ASZ3IwHwYDVR0j
BBgwFoAUXwgsV829aNgqhNmWfElYVUfm6A8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjIxOEYzQ0JBMjFDMzg4MTMxRTBDQUY2MzAzQTBCMTA4
RTcyQUU1M0M1NzNGM0YzNTE0MkRCMTYxMDAxNjhCLzAvNUYwODJDNTdDREJENjhE
ODJBODREOTk2N0M0OTU4NTU0N0U2RTgwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjA4MkM1N0NEQkQ2OEQ4MkE4
NEQ5OTY3QzQ5NTg1NTQ3RTZFODBGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEIyMThGM0NCQTIxQzM4ODEzMUUwQ0FGNjMwM0EwQjEwOEU3MkFFNTND
NTczRjNGMzUxNDJEQjE2MTAwMTY4Qi8wLzMyMzAzMDJlMzUzNDJlMzEzODM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg2vDAN
BgkqhkiG9w0BAQsFAAOCAQEAB0+dup1pj8sWxq+3WhCRSH1PHRa06nJy+t8SrawT
NQxlattP8wPdlvtTECa3S2keW/wcMVA2WGNrjJgIXIN04rfkZhfDzlU05dH9yjJx
P2LoVaLWarQ+Oe/E4XX5oeUqzr6lIrjwlAvdCdJbYJcdd+BBNtLKq6SJMn0H19vT
NeBPo3GuLOU74gtBokrpZ2VvlodD4X4MaPUT+GsHZTNeK2EHLrKItmtR8DqHGARO
e/uIKHUQb48DkDT1XH9dAPzIPTrzXfUg3e1oHPVyk9BgXpGAjp4Tw0i22591G5xB
XaKdXqOr/CECajZemDX0ARdrjjwq17D2T27U6pE1H4XYQw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org