Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203132313839.roa
File:                     3230302e33352e3135342e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          BV1xL7uhqYVlWuwjEPf3FOiSvpiATXwn0fTY++XNZRQ=
Subject key identifier:   AB:1E:FC:11:56:8F:7C:04:CB:04:54:E9:59:95:86:42:03:45:63:C4
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       685C913EA14649CD29A6A3A209A4C89F9CD7D00A
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203132313839.roa
Signing time:             Wed 02 Apr 2025 18:50:05 +0000
ROA not before:           Wed 02 Apr 2025 18:45:05 +0000
ROA not after:            Wed 01 Apr 2026 18:50:05 +0000
asID:                     12189
IP address blocks:        200.35.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 21:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5c:91:3e:a1:46:49:cd:29:a6:a3:a2:09:a4:c8:9f:9c:d7:d0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:05 2025 GMT
            Not After : Apr  1 18:50:05 2026 GMT
        Subject: CN=AB1EFC11568F7C04CB0454E959958642034563C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:7d:ca:88:1b:66:e0:23:c1:71:f1:10:70:
                    85:b5:b4:9e:9e:a9:e3:b7:3d:39:52:33:bb:5b:dc:
                    41:9c:a3:d9:16:7c:c9:be:c8:6e:dd:02:87:f7:bd:
                    af:49:03:e7:06:3e:84:d8:b0:c8:b7:6b:63:9e:90:
                    17:a0:3b:45:16:96:7b:aa:8b:c5:3f:31:82:a7:f3:
                    e3:56:47:45:a8:68:39:03:3e:ed:fe:51:41:43:01:
                    64:a5:3d:db:22:e4:1e:e3:22:4c:50:21:8a:4c:6d:
                    22:86:00:06:9a:b1:fd:95:42:0d:51:6e:38:96:26:
                    3e:1b:c3:9b:a8:b5:ed:37:d9:6c:a2:52:36:aa:a4:
                    17:9d:77:58:72:61:d1:b0:56:cb:5c:e5:c3:ab:ab:
                    f4:2a:67:2b:a8:82:b0:a3:22:5a:24:6c:00:b0:76:
                    19:a0:96:4e:79:b2:ed:c9:f8:86:55:24:36:47:2d:
                    c6:f2:9a:11:15:aa:8b:38:0a:87:a5:52:56:e9:2f:
                    05:64:06:f9:a3:30:41:e1:77:4e:34:27:66:5f:a9:
                    2b:2c:58:5a:57:53:6b:98:c6:e8:73:1b:c7:2a:db:
                    8f:e3:0b:50:f9:e9:4f:43:59:b2:3a:aa:cc:b3:49:
                    58:94:64:ba:e3:e4:2b:8d:58:3d:d7:b4:47:93:39:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1E:FC:11:56:8F:7C:04:CB:04:54:E9:59:95:86:42:03:45:63:C4
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:2b:4d:68:29:04:81:45:a1:9d:e8:5d:0b:35:2c:5f:aa:b3:
         be:fc:cc:f5:b0:ac:07:e1:d2:5d:06:76:7f:1a:e8:39:07:3d:
         e5:42:d9:75:09:9d:55:ff:45:0f:1e:f2:57:63:1c:0f:3e:ea:
         71:89:2d:56:6e:c3:ff:89:c9:61:3c:22:73:af:c4:b9:1a:46:
         a8:bd:21:a8:f4:95:98:c6:52:a8:09:82:93:55:a5:4a:15:8b:
         b5:0d:e8:56:20:5b:cc:f4:3e:16:91:e5:d4:7c:e3:e4:8c:15:
         7a:95:b0:1f:c3:02:fa:95:ca:73:2c:14:b7:4f:24:46:d8:fb:
         5e:5f:7f:77:17:fc:6a:8c:03:34:bd:9a:3c:0f:9d:af:6c:88:
         bb:62:0e:9e:11:30:6a:c9:df:71:58:81:97:3c:c7:68:8c:52:
         a8:46:cf:f1:20:26:c9:d5:df:de:bc:08:4f:ff:f3:e1:c7:db:
         43:43:8f:c5:88:ac:54:49:0e:f5:c5:07:93:5b:6b:6d:4f:62:
         a3:9d:e6:e2:7d:c6:63:0b:b2:8e:ae:35:c6:8b:7d:5c:78:58:
         ce:bf:0f:10:b0:18:3a:59:7c:bc:0c:ee:62:da:80:d8:a6:38:
         56:93:0f:5f:d4:06:35:b2:3c:86:8e:db:ff:7a:6f:6c:a1:37:
         f5:c2:37:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:35:49 2025 by rpki-client