Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3138342e302f32312d3234203d3e203139333733.roa
File:                     3230302e35372e3138342e302f32312d3234203d3e203139333733.roa (raw, json)
Hash identifier:          47xD4GFNXHlEQY447OJuVyP0zQe0P1Y/akCzMUzFN3c=
Subject key identifier:   DF:E1:5C:FF:8E:C0:3A:F8:4E:B3:2E:FD:51:53:FE:16:4E:0F:39:DF
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       763900B16E99273FA8A1C5FFCE4BA05829A62275
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3138342e302f32312d3234203d3e203139333733.roa
Signing time:             Sun 16 Feb 2025 06:50:00 +0000
ROA not before:           Sun 16 Feb 2025 06:45:00 +0000
ROA not after:            Sun 15 Feb 2026 06:50:00 +0000
asID:                     19373
IP address blocks:        200.57.184.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:39:00:b1:6e:99:27:3f:a8:a1:c5:ff:ce:4b:a0:58:29:a6:22:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Feb 16 06:45:00 2025 GMT
            Not After : Feb 15 06:50:00 2026 GMT
        Subject: CN=DFE15CFF8EC03AF84EB32EFD5153FE164E0F39DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:b3:e6:14:cf:a0:bb:e4:ae:49:80:f3:04:
                    ba:d0:82:ad:06:aa:89:d9:c6:05:42:ba:6e:af:af:
                    9f:cc:6f:3f:fd:da:00:2e:f4:b0:e0:ab:bc:15:92:
                    22:b8:d6:b9:80:4f:44:2b:59:9c:37:f5:a8:83:3b:
                    d8:d3:ee:5a:86:a4:b1:71:62:91:58:72:f8:9e:12:
                    ac:b4:f0:b6:3a:a0:31:f7:80:11:48:bc:23:8a:5b:
                    4e:eb:6c:49:09:80:4c:47:dd:bd:56:e6:e0:fc:b8:
                    d9:9a:a0:8f:bf:63:81:e5:8e:56:18:27:f0:7c:2b:
                    26:2f:60:55:54:cc:b3:e0:e1:7b:59:2a:83:e9:5f:
                    a1:2d:7d:3a:17:32:52:c6:e1:c1:33:2c:47:3f:c1:
                    b0:75:91:64:29:e7:8e:c5:9d:1b:9f:f5:d1:2c:b1:
                    9b:41:02:56:0a:c3:07:f6:5e:b8:dc:4f:03:07:8d:
                    c6:38:f3:0a:e3:aa:e1:d4:c5:70:40:0d:6f:35:b9:
                    cd:93:6a:22:ad:4b:49:34:1e:75:a0:79:32:6b:2a:
                    2c:9f:38:64:85:6a:4d:39:3e:5a:b8:16:8a:e7:f3:
                    58:6d:e3:b9:56:a9:7e:4e:b7:78:ea:8a:70:91:e3:
                    ed:33:09:7a:ab:16:bb:37:f0:cc:d3:09:62:e5:fc:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E1:5C:FF:8E:C0:3A:F8:4E:B3:2E:FD:51:53:FE:16:4E:0F:39:DF
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3138342e302f32312d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:c1:57:73:79:c8:d3:c5:de:47:b1:69:30:81:c0:b5:93:
         f1:85:31:bb:f2:c4:89:76:22:3e:3a:c5:7b:ed:7e:1f:0d:91:
         0c:b6:de:18:e6:9b:56:8a:0f:22:16:2c:9f:8d:df:38:60:ad:
         70:d4:9c:e7:41:e9:70:ba:b4:19:9f:1a:d5:0d:7f:db:b7:53:
         3a:04:25:5a:b5:ad:5a:a6:58:60:49:d5:9c:3f:a8:f2:86:51:
         9e:82:f9:e2:8a:06:68:1c:be:bf:0c:cc:ad:76:9f:16:d8:1e:
         33:0e:6f:1a:18:5f:fb:79:18:16:04:b0:44:4f:b0:65:24:3f:
         39:7b:c1:22:1d:63:da:89:64:5b:94:ae:26:cb:89:5d:a4:d9:
         d1:bf:0e:64:1d:be:b0:96:04:ef:b1:c9:3b:12:6e:f2:1c:ab:
         49:a0:d9:62:cd:b1:29:79:8a:60:b6:0a:cb:d0:08:b5:7f:52:
         5c:2f:68:c3:60:32:c8:17:d3:e2:3e:4e:b7:e8:a5:00:4d:73:
         df:6a:2c:0b:f4:e5:bd:53:cd:57:2b:00:42:75:7f:21:f4:01:
         02:59:67:e1:80:dd:ca:95:b9:c4:e7:56:52:24:e8:58:96:06:
         34:10:5a:6a:72:27:25:34:19:d0:26:71:c7:1f:ad:d9:92:18:
         a9:39:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:27 2025 by rpki-client on console.sobornost.net