Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3135322e3230382f32382d3238203d3e203139333733.roa
File:                     3230302e35372e3135322e3230382f32382d3238203d3e203139333733.roa (raw, json)
Hash identifier:          9b/pYdQzh5FQbDRLAz3R2ws4EeFT2ZaVgPnnQQz/pdY=
Subject key identifier:   04:E3:FE:F5:7B:E6:AF:08:02:47:C4:82:F7:72:D4:D1:11:17:3A:2A
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       35010CBB51A3EDDC856222C64B5B99C3EB36BEE2
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3135322e3230382f32382d3238203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:40:02 +0000
ROA not before:           Sun 16 Feb 2025 06:35:02 +0000
ROA not after:            Sun 15 Feb 2026 06:40:02 +0000
asID:                     19373
IP address blocks:        200.57.152.208/28 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:01:0c:bb:51:a3:ed:dc:85:62:22:c6:4b:5b:99:c3:eb:36:be:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:35:02 2025 GMT
            Not After : Feb 15 06:40:02 2026 GMT
        Subject: CN=04E3FEF57BE6AF080247C482F772D4D111173A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:54:5a:ff:62:4c:dd:d4:df:db:e6:37:84:
                    45:ef:b1:83:a4:58:3a:6f:a0:70:a3:73:ed:77:01:
                    64:88:e0:88:4b:5b:7b:f3:e9:87:45:f9:26:6f:a2:
                    15:49:4f:89:e3:1b:cd:54:b6:0e:e1:82:f6:87:ab:
                    db:87:51:48:9d:52:a2:69:9d:b9:d6:a2:68:2f:10:
                    d6:f8:00:97:25:4d:34:2c:d2:80:3a:a7:5f:18:95:
                    d9:a5:c8:12:b6:61:16:69:2c:a3:28:8e:4a:b3:e0:
                    f7:cb:6d:58:06:23:35:af:aa:4c:0b:5d:9d:fe:84:
                    21:a6:bf:b7:b5:53:c8:ed:ff:a6:cf:f9:96:1a:79:
                    31:78:32:cb:e3:4f:a1:bd:ac:a9:18:99:1b:7b:2f:
                    ac:97:87:44:1e:a0:6e:bc:c7:b4:c8:12:21:1d:f2:
                    c7:57:35:5a:29:92:41:5c:5d:a8:d7:6d:db:2a:44:
                    d4:a7:68:e2:24:52:4a:b0:3a:c0:a0:95:c9:32:a1:
                    4e:78:3f:46:18:65:53:97:9a:35:c2:fb:8e:0c:ad:
                    bc:dd:02:f0:32:d4:e4:34:10:2d:a5:b1:d0:f2:ce:
                    ff:19:73:0a:00:7d:54:b2:6c:a3:f9:63:ba:b8:66:
                    2a:3b:a4:b4:87:8f:e1:ab:0f:1d:3b:0a:9f:38:2c:
                    5f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E3:FE:F5:7B:E6:AF:08:02:47:C4:82:F7:72:D4:D1:11:17:3A:2A
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3135322e3230382f32382d3238203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.152.208/28

    Signature Algorithm: sha256WithRSAEncryption
         95:c2:c7:e0:b5:43:b8:68:d5:bc:4d:34:d7:ec:06:cd:83:56:
         27:32:ce:c3:da:a5:d8:67:61:67:ee:87:22:79:fa:63:29:fa:
         9f:c7:df:e8:a2:8d:8c:fb:48:c1:fb:7b:13:9b:fe:48:9d:75:
         47:f2:33:82:17:24:83:c2:86:20:b1:84:f2:f4:49:55:74:0f:
         c9:ba:05:71:78:ea:04:c4:82:1b:fe:41:53:15:12:60:1d:c4:
         bd:d8:e7:8f:1e:85:45:e7:4a:e3:7d:48:24:d1:4c:9c:f7:c3:
         2d:6d:06:44:1e:af:2a:2c:ed:d9:d8:02:a1:3b:16:ae:c8:bd:
         64:ce:d8:70:94:c0:51:cf:7d:b0:f3:2c:c8:f4:1c:4e:29:20:
         c2:29:86:ee:3e:42:f0:cf:8e:31:ab:1c:53:ba:a5:2d:25:b2:
         07:f4:8c:41:61:10:0d:6d:c3:d5:f7:02:29:b7:08:e4:6a:04:
         c9:3b:3e:23:99:d7:66:92:2f:6e:74:93:4a:80:43:f2:6b:03:
         11:95:ac:35:ce:37:61:c3:5b:d6:a5:1e:23:c2:49:b4:61:65:
         05:38:4a:52:91:6c:1b:dc:69:b7:00:53:73:f8:2c:51:4a:b7:
         e2:bc:9a:0e:b6:ef:03:81:50:30:6a:bd:b6:48:ee:53:6a:9e:
         92:5d:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:13:59 2025 by rpki-client