Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203132313839.roa
File:                     3230302e33352e3135352e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          nvNSPjDpPOFogqeS+6vmH8pWVESTCo8w7cdagbghDIU=
Subject key identifier:   F9:03:AB:90:45:C8:56:8F:AC:27:3D:C4:CF:EB:84:41:A1:04:A6:85
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       711A894390310C97DE83592F098627BD64A01422
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203132313839.roa
Signing time:             Tue 05 Mar 2024 18:03:58 +0000
ROA not before:           Tue 05 Mar 2024 17:58:58 +0000
ROA not after:            Tue 04 Mar 2025 18:03:58 +0000
asID:                     12189
IP address blocks:        200.35.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1a:89:43:90:31:0c:97:de:83:59:2f:09:86:27:bd:64:a0:14:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Mar  5 17:58:58 2024 GMT
            Not After : Mar  4 18:03:58 2025 GMT
        Subject: CN=F903AB9045C8568FAC273DC4CFEB8441A104A685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:c0:63:22:3b:2e:78:90:57:9c:11:ee:59:
                    f2:75:f4:e3:1c:bb:23:74:d5:bb:eb:7e:93:a5:89:
                    47:61:4d:1b:bc:f7:06:b3:84:cd:6c:ba:d4:d8:06:
                    02:0a:9a:9d:42:bd:1f:7a:e2:94:5b:e7:ad:cd:00:
                    ee:b6:45:de:87:24:ff:af:68:5d:b6:90:a4:1e:45:
                    9d:4b:26:3b:89:e4:92:e1:bb:87:ad:2b:a8:6f:fa:
                    10:59:77:b9:a0:cb:12:8b:4c:9d:c4:55:81:7f:38:
                    5d:ba:20:44:bb:e3:de:9c:7a:a0:f9:e6:ec:d8:bc:
                    54:1d:9e:03:f6:44:55:41:d3:cb:75:97:93:4c:a2:
                    67:2c:15:1a:e8:b9:59:4e:62:3d:8e:66:f8:87:80:
                    9e:9b:d7:47:51:15:a7:c0:f6:a3:7f:24:0d:14:75:
                    ee:50:af:0f:30:6a:2b:1e:35:b2:a7:94:b3:ec:e1:
                    e9:28:44:af:4d:46:e9:3a:89:5f:5a:01:4b:6c:97:
                    ac:2a:90:7c:94:d0:78:ab:17:f7:8b:ef:3c:c8:c3:
                    53:e6:08:ef:b7:b8:82:76:b0:50:af:60:9f:a1:8c:
                    e9:79:89:0d:88:21:5a:fe:0d:c7:c1:06:b5:26:eb:
                    e4:52:09:5f:9c:d6:17:ee:7f:49:bb:b8:b1:0c:b5:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:03:AB:90:45:C8:56:8F:AC:27:3D:C4:CF:EB:84:41:A1:04:A6:85
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:03:ac:84:ab:e2:1b:05:30:f7:57:37:75:8a:93:38:6e:70:
         91:67:83:30:5b:64:fa:7a:9c:d1:df:3e:88:08:9c:dc:45:23:
         37:6a:74:90:74:04:76:31:b1:b8:60:11:ae:ec:29:dc:87:89:
         ea:8a:5e:f0:03:6c:1d:04:e1:86:ca:a9:32:34:06:9b:bf:54:
         90:2a:67:94:41:d0:db:5f:bb:76:e5:df:84:ad:8d:79:cd:c0:
         9f:40:e3:00:70:12:a5:f1:af:1d:16:c6:ce:a3:66:a3:b4:aa:
         02:84:c4:73:7c:99:53:22:c1:75:cf:2f:04:e4:99:5a:8f:fd:
         a9:5f:90:b5:fa:af:89:f7:3c:82:12:35:27:34:38:a7:0e:33:
         2b:45:76:fc:71:7e:23:a5:72:f2:ab:ed:15:45:90:1b:35:16:
         f5:80:03:12:4e:e3:7a:9d:09:6b:92:c7:97:5b:5d:e6:79:6b:
         ea:c0:d0:59:13:e6:9f:fb:e9:ff:0b:27:50:87:76:62:03:4b:
         f4:45:c4:a0:ef:13:30:9e:fa:2a:94:ed:61:47:47:ee:2d:65:
         81:8f:03:df:5e:da:d7:8c:f1:a1:27:c0:0b:d4:cb:44:11:f7:
         99:e7:c3:94:83:43:5d:ea:f0:93:60:d3:a0:df:37:a6:0d:e1:
         9c:f8:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:30 2024 by rpki-client on console-fra.rpki-client.org