Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203230343534.roa
File:                     3230302e33352e3135322e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          QvYCrSX/bKpVcZCplEnW1Pga4Ush+sNFK8SgOtJo464=
Subject key identifier:   E8:8F:41:4A:F4:0F:F3:D4:0B:35:6A:70:F5:2A:B7:29:2A:5C:25:63
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       37DD58C8194B5B0879A3B46FDC2BE0D80D4B14D3
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203230343534.roa
Signing time:             Tue 05 Mar 2024 18:04:01 +0000
ROA not before:           Tue 05 Mar 2024 17:59:01 +0000
ROA not after:            Tue 04 Mar 2025 18:04:01 +0000
asID:                     20454
IP address blocks:        200.35.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:dd:58:c8:19:4b:5b:08:79:a3:b4:6f:dc:2b:e0:d8:0d:4b:14:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Mar  5 17:59:01 2024 GMT
            Not After : Mar  4 18:04:01 2025 GMT
        Subject: CN=E88F414AF40FF3D40B356A70F52AB7292A5C2563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:86:01:cf:6d:c4:fc:40:21:38:81:f4:e5:c7:
                    55:69:e7:9a:f5:50:2c:1a:94:87:8b:42:3c:f9:b5:
                    9f:ef:aa:74:7e:2e:58:9f:0b:11:80:3f:38:8f:25:
                    e7:a5:a2:af:58:71:dc:78:45:4f:fe:ec:b8:8e:69:
                    a0:6e:ba:bd:72:cc:fe:0f:b7:b8:d4:72:6d:2d:16:
                    fa:f1:2d:d2:ae:96:6a:16:9b:68:90:cc:ae:63:ff:
                    f3:fd:0d:8e:25:df:70:59:97:57:76:91:c9:3f:82:
                    a6:0a:17:63:b1:bd:a1:f3:90:86:d5:d8:d0:49:84:
                    54:e4:95:54:a0:61:d8:d0:25:41:7b:e7:9c:0f:48:
                    dd:7e:f9:42:ac:1e:9a:b1:af:48:33:b6:8c:69:89:
                    4a:7e:e0:91:f8:a4:72:58:c5:c0:fe:99:d4:fb:f8:
                    17:17:a8:10:1e:42:05:d6:96:b5:0f:f5:02:0c:f5:
                    ac:c9:9a:1f:5b:4d:27:36:b5:c5:9e:df:2b:80:d5:
                    f6:35:b7:ba:0c:7a:2d:de:41:2f:e7:84:a3:45:5d:
                    23:da:42:7e:9a:fc:62:98:0d:29:be:dd:19:10:d8:
                    5c:8e:d5:d0:c1:4e:00:53:11:4e:cc:bd:46:45:1a:
                    a6:2d:e1:3a:23:e1:a1:5c:ca:50:37:ec:9a:f6:4c:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:41:4A:F4:0F:F3:D4:0B:35:6A:70:F5:2A:B7:29:2A:5C:25:63
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:99:2a:3f:be:68:fa:01:02:bb:a0:4f:f0:a5:81:bb:d7:50:
         23:f8:a3:20:f7:25:56:05:67:e6:cc:50:3d:89:3a:8d:56:1d:
         14:1e:b0:73:06:ca:03:66:ae:0a:6c:e0:86:42:a8:a8:ed:e7:
         bd:cc:2a:37:27:9e:9c:30:27:52:5d:39:e2:81:21:0f:a4:c7:
         95:c9:80:51:da:fa:dd:ee:34:77:b8:1f:b6:fb:8e:71:fe:76:
         46:18:41:32:26:ee:c5:f3:95:b7:ac:85:32:f1:1a:76:5c:7c:
         bd:92:4e:d5:40:07:6c:47:be:d2:b5:46:62:be:c7:3c:3c:26:
         59:61:e1:04:a6:5c:78:35:3d:ac:21:72:09:81:c1:26:9a:25:
         45:5f:a6:dc:02:03:1c:ce:b9:48:03:71:b8:bd:19:50:70:3c:
         8f:da:ea:74:6e:00:3f:07:93:20:43:73:a4:c2:3e:4d:83:a4:
         15:60:d5:a6:95:94:98:b4:f1:09:01:e3:45:55:d8:cd:2f:a7:
         ff:b7:45:84:aa:67:ce:71:4f:bf:03:fc:35:a0:b6:4f:41:7c:
         4b:93:ca:4f:fc:ae:db:62:e8:ce:52:41:24:3f:5d:f3:3f:f5:
         ff:bb:1a:ca:b3:ea:b7:75:bf:4e:d5:2d:7a:f3:68:c9:1d:22:
         7f:cd:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org