Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139342e302f32342d3234203d3e203135333131.roa
File:                     3230302e35342e3139342e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier:          8z1UHQ6ScBHlyuWVB+BQtQ63HN13b5r7vbLH9aVx5WU=
Subject key identifier:   01:CD:A9:4D:05:70:B3:ED:8F:35:9E:B2:8F:D0:D1:86:7B:28:9D:A0
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       36EA18D89491ABE949981B97EFA75DE0F46558A2
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139342e302f32342d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 17:51:44 +0000
ROA not before:           Tue 05 Mar 2024 17:46:44 +0000
ROA not after:            Tue 04 Mar 2025 17:51:44 +0000
asID:                     15311
IP address blocks:        200.54.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ea:18:d8:94:91:ab:e9:49:98:1b:97:ef:a7:5d:e0:f4:65:58:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Mar  5 17:46:44 2024 GMT
            Not After : Mar  4 17:51:44 2025 GMT
        Subject: CN=01CDA94D0570B3ED8F359EB28FD0D1867B289DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:4d:72:cb:76:c2:74:3f:42:ab:23:90:28:
                    b8:fe:d2:96:ff:25:83:3e:03:73:26:51:cf:7c:ea:
                    55:ae:57:3b:26:05:7a:59:20:46:ee:b8:81:b1:cd:
                    16:04:e9:eb:ec:c8:2d:6d:d0:87:12:f6:90:84:96:
                    3b:c7:29:0a:92:c3:9d:8c:58:cb:06:a1:43:7d:62:
                    b4:52:01:3e:b1:d1:0c:06:99:38:d6:1b:33:26:90:
                    bf:56:01:ad:c8:a5:db:17:3f:5b:cf:16:42:f4:d4:
                    73:ea:fd:f7:a1:e4:1f:e9:6b:6f:84:8d:f1:ba:5b:
                    46:87:1a:42:37:bf:b1:98:ad:30:15:a8:a3:50:0e:
                    73:67:52:d2:91:13:63:dd:99:f7:8c:81:30:12:9b:
                    b3:f8:35:b7:95:74:f9:3e:e3:61:19:11:2c:55:00:
                    e5:fb:ae:05:35:2c:3c:7d:10:6f:ae:0e:f4:22:1e:
                    3b:0a:9c:2c:6e:76:d0:76:b9:44:9d:48:77:26:52:
                    fc:d7:fa:cf:53:50:6c:af:d1:f4:b8:19:95:9a:3b:
                    b1:ae:e1:2f:bb:81:29:9a:00:a1:0e:fe:37:9b:59:
                    4c:49:94:74:5b:44:45:74:01:68:43:36:59:5e:93:
                    7b:2c:a8:ce:25:d3:96:84:09:97:3a:4c:ce:74:30:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CD:A9:4D:05:70:B3:ED:8F:35:9E:B2:8F:D0:D1:86:7B:28:9D:A0
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139342e302f32342d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:26:5c:b9:f8:ec:a7:3f:ea:8e:52:5c:48:e1:43:98:2d:d7:
         43:e9:1a:0e:30:bb:d4:dc:ab:9b:02:88:dc:69:d3:ba:3b:5c:
         66:6b:37:87:82:06:d8:26:2c:57:d5:08:ea:43:f5:be:de:ee:
         d7:06:05:46:57:14:cc:16:84:88:3f:4f:66:ab:71:fc:5c:6b:
         95:a9:62:7b:56:14:a2:5c:7b:15:2e:de:62:ea:8e:52:12:37:
         83:22:bd:be:74:54:b1:99:55:f8:91:0d:23:58:1c:7b:e2:85:
         40:0c:0a:a1:cc:4e:75:03:2f:a4:28:aa:f2:38:90:67:3b:61:
         e8:d6:9c:f6:bc:7d:85:5f:6c:38:86:7e:bd:2c:cf:01:b4:22:
         1d:e6:a9:ea:74:ee:92:a0:5c:7e:c7:e9:60:fc:20:f0:25:fd:
         25:0c:8c:2f:14:4b:81:91:84:32:29:8c:1e:90:20:13:40:7d:
         cc:1f:76:22:87:32:77:8a:b6:49:49:7f:04:49:5a:f9:e6:ea:
         fa:d2:43:eb:1e:c1:44:95:ad:d5:26:c3:1b:ca:ba:bb:15:54:
         d4:02:86:ef:6b:43:98:bf:ab:b4:9e:06:76:c2:d2:bb:ca:0a:
         1b:88:b4:eb:f8:1d:73:f4:d1:22:44:92:f0:2c:95:d9:ad:bc:
         02:b8:ba:e5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNuoY2JSRq+lJmBuX76dd4PRlWKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwODJDNTdDREJENjhEODJBODREOTk2N0M0OTU4NTU0
N0U2RTgwRjAeFw0yNDAzMDUxNzQ2NDRaFw0yNTAzMDQxNzUxNDRaMDMxMTAvBgNV
BAMTKDAxQ0RBOTREMDU3MEIzRUQ4RjM1OUVCMjhGRDBEMTg2N0IyODlEQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj9E1yy3bCdD9CqyOQKLj+0pb/
JYM+A3MmUc986lWuVzsmBXpZIEbuuIGxzRYE6evsyC1t0IcS9pCEljvHKQqSw52M
WMsGoUN9YrRSAT6x0QwGmTjWGzMmkL9WAa3IpdsXP1vPFkL01HPq/feh5B/pa2+E
jfG6W0aHGkI3v7GYrTAVqKNQDnNnUtKRE2PdmfeMgTASm7P4NbeVdPk+42EZESxV
AOX7rgU1LDx9EG+uDvQiHjsKnCxudtB2uUSdSHcmUvzX+s9TUGyv0fS4GZWaO7Gu
4S+7gSmaAKEO/jebWUxJlHRbREV0AWhDNllek3ssqM4l05aECZc6TM50MPy/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUAc2pTQVws+2PNZ6yj9DRhnsonaAwHwYDVR0j
BBgwFoAUXwgsV829aNgqhNmWfElYVUfm6A8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjIxOEYzQ0JBMjFDMzg4MTMxRTBDQUY2MzAzQTBCMTA4
RTcyQUU1M0M1NzNGM0YzNTE0MkRCMTYxMDAxNjhCLzAvNUYwODJDNTdDREJENjhE
ODJBODREOTk2N0M0OTU4NTU0N0U2RTgwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjA4MkM1N0NEQkQ2OEQ4MkE4
NEQ5OTY3QzQ5NTg1NTQ3RTZFODBGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEIyMThGM0NCQTIxQzM4ODEzMUUwQ0FGNjMwM0EwQjEwOEU3MkFFNTND
NTczRjNGMzUxNDJEQjE2MTAwMTY4Qi8wLzMyMzAzMDJlMzUzNDJlMzEzOTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg2wjAN
BgkqhkiG9w0BAQsFAAOCAQEAMyZcufjspz/qjlJcSOFDmC3XQ+kaDjC71NyrmwKI
3GnTujtcZms3h4IG2CYsV9UI6kP1vt7u1wYFRlcUzBaEiD9PZqtx/Fxrlalie1YU
olx7FS7eYuqOUhI3gyK9vnRUsZlV+JENI1gce+KFQAwKocxOdQMvpCiq8jiQZzth
6Nac9rx9hV9sOIZ+vSzPAbQiHeap6nTukqBcfsfpYPwg8CX9JQyMLxRLgZGEMimM
HpAgE0B9zB92Iocyd4q2SUl/BEla+ebq+tJD6x7BRJWt1SbDG8q6uxVU1AKG72tD
mL+rtJ4GdsLSu8oKG4i06/gdc/TRIkSS8CyV2a28Ari65Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org