Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136382e302f32312d3234203d3e203139333733.roa
File:                     3230302e35372e3136382e302f32312d3234203d3e203139333733.roa (raw, json)
Hash identifier:          hQpjlobzNd3YMyv446aukiOe++btzxoety3S5LaaXyI=
Subject key identifier:   D0:DB:90:59:E8:F4:60:C9:8C:A8:8B:E0:C7:59:87:B1:FC:DD:AC:7C
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       2901D0404BE6ED2A38E494A922EB5BABEEAB2DD2
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136382e302f32312d3234203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:40:06 +0000
ROA not before:           Sun 16 Feb 2025 06:35:06 +0000
ROA not after:            Sun 15 Feb 2026 06:40:06 +0000
asID:                     19373
IP address blocks:        200.57.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:01:d0:40:4b:e6:ed:2a:38:e4:94:a9:22:eb:5b:ab:ee:ab:2d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:35:06 2025 GMT
            Not After : Feb 15 06:40:06 2026 GMT
        Subject: CN=D0DB9059E8F460C98CA88BE0C75987B1FCDDAC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:e3:9a:89:c6:a8:98:a9:d4:ae:b0:ea:65:
                    8b:e3:eb:91:e9:7d:f9:0a:1d:45:ab:f0:3c:fb:4d:
                    b7:5e:2f:08:4d:9e:83:18:86:58:11:a0:f2:1a:05:
                    29:7e:0d:fe:ca:30:65:c7:f0:c7:4c:10:80:be:de:
                    59:28:32:64:0b:cf:0b:c3:19:38:f4:fb:2b:75:4c:
                    96:bd:89:51:07:29:90:dc:ed:c8:97:d6:19:5e:fa:
                    fd:5f:84:66:f4:b3:9e:86:53:80:12:1f:8b:39:d1:
                    1d:a0:0a:47:42:33:5d:c4:dc:5d:51:bc:e7:77:8c:
                    09:d8:85:84:40:ed:8e:a9:3b:d3:fd:08:de:54:77:
                    33:ff:50:8c:4e:2d:7d:d6:e3:f5:d9:8d:b7:0b:87:
                    c1:01:c2:66:1c:4a:ca:52:c8:52:d4:eb:40:fb:6b:
                    80:01:9c:31:3b:b7:d2:10:da:5b:0f:6b:cc:b6:35:
                    01:43:85:11:21:76:74:16:db:b4:3c:2f:e4:d6:17:
                    8d:ee:40:ec:a2:68:2d:b6:32:fb:c4:b0:9f:31:97:
                    33:27:15:fe:03:5f:3e:33:8f:d6:1d:53:68:09:8a:
                    da:4d:81:4f:cf:74:b1:f6:32:4b:9c:a3:d3:a3:e4:
                    22:d1:b3:70:94:60:79:b6:3f:07:57:ad:5e:5d:f8:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:90:59:E8:F4:60:C9:8C:A8:8B:E0:C7:59:87:B1:FC:DD:AC:7C
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136382e302f32312d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:e5:16:bf:3e:47:25:d6:aa:d5:52:b5:7d:4e:f5:02:92:56:
         9e:cb:7f:94:55:c8:da:3d:8c:bd:89:9c:e5:bf:99:49:f2:bd:
         3d:54:f8:f5:39:12:4d:ea:0e:9d:8f:70:69:65:06:74:64:bc:
         0e:fa:3e:67:84:4f:43:59:dd:1c:65:87:37:6c:dc:38:13:3c:
         ec:de:73:74:63:a2:e0:03:5d:1c:64:bd:c7:d0:7a:b3:9b:8b:
         29:23:18:f0:3f:6c:31:fc:f4:ac:9e:17:ca:ec:75:93:b4:88:
         64:d5:d5:70:b9:5b:e1:6f:f2:f8:d5:cd:e4:bc:cd:87:48:59:
         d0:2d:8d:5b:a5:af:4d:6f:51:69:cf:9a:9a:6d:8c:6b:64:e2:
         fe:e5:28:3c:5d:83:27:c0:ff:b1:02:de:21:6c:8d:88:ef:56:
         1c:42:3f:70:c6:58:9a:00:08:b2:b4:6d:54:52:af:79:8b:91:
         19:11:19:68:f4:fa:8b:83:b8:51:e9:76:99:fc:60:76:9f:83:
         71:81:2a:bd:0e:fd:12:36:03:93:cb:6b:d2:48:d6:79:b4:67:
         37:22:d4:57:4c:f3:55:d9:fd:df:e1:e4:e0:d1:f0:22:80:15:
         cf:61:50:cd:0f:e3:c6:d5:28:11:7d:20:05:e6:ff:fa:d9:2a:
         8a:ff:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:23:17 2025 by rpki-client