Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3137322e302f32342d3234203d3e203139333733.roa
File:                     3230302e35372e3137322e302f32342d3234203d3e203139333733.roa (raw, json)
Hash identifier:          U5oQyr1HZSg0S+yoSCh96Pokso4856pEWnoyfAZQgNY=
Subject key identifier:   7D:50:E2:6E:5F:1C:9B:B4:D8:63:70:AF:70:1A:D2:A5:54:6B:46:C8
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       384EA471AFD741ADA29556A4DDECD83AABEF31C3
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3137322e302f32342d3234203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:40:01 +0000
ROA not before:           Sun 16 Feb 2025 06:35:01 +0000
ROA not after:            Sun 15 Feb 2026 06:40:01 +0000
asID:                     19373
IP address blocks:        200.57.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4e:a4:71:af:d7:41:ad:a2:95:56:a4:dd:ec:d8:3a:ab:ef:31:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:35:01 2025 GMT
            Not After : Feb 15 06:40:01 2026 GMT
        Subject: CN=7D50E26E5F1C9BB4D86370AF701AD2A5546B46C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:8f:29:4c:19:ba:cb:f2:a1:fb:ba:74:37:
                    31:6e:61:d2:7e:a3:9d:3e:26:d8:94:db:ac:0b:82:
                    aa:23:fa:0a:fa:49:b3:64:0b:13:8a:4b:be:00:a7:
                    91:11:1f:e4:5a:fe:98:e9:38:85:f2:0e:6b:48:12:
                    ec:38:da:ce:26:1c:ee:c3:a7:b6:cf:f2:98:f7:49:
                    37:db:09:f8:a5:e1:8a:2f:c9:e0:90:c3:63:ff:9e:
                    c8:09:7a:9b:65:0d:9d:0e:31:ed:63:c8:2d:72:6a:
                    2f:4d:a3:8b:d7:ed:35:f8:53:c6:61:c9:34:33:21:
                    44:4f:1e:b6:80:f8:78:4e:55:4f:00:68:6c:58:d3:
                    1a:b1:3a:ac:05:69:62:14:d9:b9:b7:40:7a:74:58:
                    e4:a1:b6:67:f2:92:3c:b5:b1:af:29:24:3e:d4:20:
                    15:f8:63:9e:01:e9:dc:ec:3b:f9:f1:e1:35:2f:20:
                    16:0d:25:0e:e4:72:7d:12:37:23:90:72:a5:f9:7f:
                    a9:5c:f6:1b:45:f7:38:50:90:16:ff:c6:ca:9c:64:
                    38:65:49:97:9e:75:98:8e:72:1f:97:d5:b1:64:cf:
                    00:6e:b1:e3:3f:2a:db:85:17:a5:7e:f0:3c:97:a2:
                    7e:f6:c6:4a:55:f4:9f:a1:1c:4a:c7:f1:9d:de:0e:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:50:E2:6E:5F:1C:9B:B4:D8:63:70:AF:70:1A:D2:A5:54:6B:46:C8
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3137322e302f32342d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:3a:18:91:8d:ac:76:e5:8b:7d:e7:0c:e3:4c:3f:23:d3:
         28:9e:bd:64:bd:e8:98:44:7d:5f:fc:43:bf:cf:f8:33:7e:13:
         d1:d0:76:45:e2:1d:d2:ee:f7:46:7a:d0:66:18:b3:1f:b7:fb:
         b6:1e:65:89:cd:7b:a0:82:cc:54:65:91:b9:c7:a3:d0:97:57:
         8d:ef:dc:a5:fa:fc:d9:e6:d5:6c:32:b9:05:de:ed:a4:54:0a:
         09:30:88:d4:4d:39:08:0a:98:cd:f6:ef:bb:56:05:43:b9:4d:
         3d:cd:31:a3:35:a1:99:74:2b:81:f2:ff:b2:b1:26:ea:af:28:
         6a:20:8f:d0:83:fd:8d:ad:94:c2:e4:d2:a9:c2:6a:68:7a:54:
         d8:3e:2b:49:a1:93:00:58:67:4c:89:c2:6b:e6:f5:ef:ec:b1:
         e2:d9:69:5d:6e:d3:75:fa:a8:8d:0b:2d:a3:3b:f5:fb:7f:30:
         66:a6:95:58:3e:44:ee:e7:b3:da:1d:9b:1e:f4:06:c0:16:31:
         1c:c6:15:1c:b4:6e:0c:36:d5:1f:3e:5e:24:fd:b0:c3:20:cb:
         5c:2e:8d:45:2d:41:c0:3b:c0:20:26:66:3b:bc:68:3c:9f:b4:
         0f:e1:05:c9:da:cf:53:2d:81:46:79:40:87:b1:14:d3:71:3b:
         a3:e3:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:14:11 2025 by rpki-client