Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203132313839.roa
File:                     3230302e33352e3135352e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          6nDEn9bC4ZH+nhJzn2iLbtzXQ4NRSn+JvanLKFnnCPk=
Subject key identifier:   68:A5:49:BE:96:F4:B9:90:D0:04:0C:1D:FC:63:46:29:48:61:BF:AC
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       2981C8F6BFA125BC77CCA7C5C5C7F04903AC7252
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203132313839.roa
Signing time:             Wed 02 Apr 2025 18:50:01 +0000
ROA not before:           Wed 02 Apr 2025 18:45:01 +0000
ROA not after:            Wed 01 Apr 2026 18:50:01 +0000
asID:                     12189
IP address blocks:        200.35.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 21:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:81:c8:f6:bf:a1:25:bc:77:cc:a7:c5:c5:c7:f0:49:03:ac:72:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:01 2025 GMT
            Not After : Apr  1 18:50:01 2026 GMT
        Subject: CN=68A549BE96F4B990D0040C1DFC6346294861BFAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:5c:21:8d:63:c2:bb:fd:25:c7:33:c1:85:
                    c8:03:49:58:28:d3:bf:c5:89:0c:b8:1b:e4:58:f3:
                    e6:49:fb:6a:d5:ea:ed:73:b4:ec:95:db:65:58:c0:
                    ab:0a:6c:f0:64:7e:41:45:b4:08:b2:1a:e6:22:e1:
                    f0:ff:30:93:e0:e9:24:30:7c:84:91:93:c3:96:88:
                    a1:30:a0:58:36:47:b5:69:95:b2:2c:ab:1b:dc:0b:
                    d4:aa:28:9d:b1:f5:88:ae:8b:6e:54:f0:14:6a:53:
                    20:06:9c:9b:f0:14:f9:f7:80:84:29:ec:7d:14:b0:
                    29:49:e5:ef:1f:2b:c5:e1:51:43:98:bf:d2:02:c0:
                    b9:d9:6b:cc:be:47:21:46:e5:49:12:c5:79:fc:09:
                    4a:ec:20:f5:e3:f0:9c:58:20:57:82:9d:01:95:e0:
                    32:78:cb:96:b7:05:2c:11:a4:4d:e7:22:bf:9a:ee:
                    0b:c4:34:81:65:fb:50:c2:c4:70:6f:0f:8b:ac:38:
                    4a:df:cb:4d:09:db:7a:33:5f:b0:53:30:43:79:9a:
                    eb:21:a2:78:dc:5d:2b:17:a0:eb:04:4f:8e:b4:d2:
                    22:37:5d:00:d0:b9:f1:04:df:07:bc:25:26:b3:d2:
                    27:4a:89:8b:6e:f7:50:21:46:34:ca:7c:42:15:c4:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A5:49:BE:96:F4:B9:90:D0:04:0C:1D:FC:63:46:29:48:61:BF:AC
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:89:a6:2b:38:60:07:8a:0c:d2:12:1b:63:0d:7e:3a:47:89:
         10:21:a6:65:c9:7b:07:46:03:6b:af:6f:36:fc:94:da:8c:07:
         26:cb:41:da:ff:59:8a:fc:7e:6f:20:5f:f6:b3:62:bc:c4:97:
         0e:a2:62:40:c8:ba:14:15:4b:20:3a:eb:38:98:7d:66:39:bc:
         71:01:fa:03:0c:90:29:97:3b:1f:a5:f2:07:d7:7b:29:50:43:
         42:20:27:bf:af:f9:ef:44:8e:96:b6:12:78:89:43:3a:dd:b7:
         a7:74:dd:28:d4:b7:05:6c:21:da:9b:cf:4a:41:40:45:a5:f3:
         f7:0c:eb:81:92:72:e9:94:89:08:36:d5:1d:69:01:ab:10:90:
         d8:0f:9d:1d:69:79:38:39:36:54:d5:6f:c3:b5:81:37:35:92:
         d1:1b:24:e0:ea:a7:2b:20:d4:10:54:29:48:d2:6a:51:47:45:
         e9:9e:e4:bb:4d:b7:04:ab:ab:0e:e5:85:05:1d:73:6b:9d:7f:
         e3:92:96:e8:dc:53:39:f9:7e:50:3e:83:1f:0a:f3:24:18:0c:
         c6:e7:c0:e7:13:84:20:a1:73:6f:ae:b5:24:36:b9:72:3e:05:
         03:3f:41:65:df:fe:44:45:8d:73:7c:59:af:93:17:61:e8:4d:
         24:b8:33:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:35:48 2025 by rpki-client