Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203132313839.roa
File:                     3230302e33352e3135342e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          WATsGje0gBmYGljCpu5T/0hSNz6+KPcKMrQ/CA0uqNo=
Subject key identifier:   91:28:49:B9:BD:22:CA:A3:38:99:4B:74:F4:6E:3F:55:5B:EF:27:BE
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       54D4198E59D5E139A37E7D1F7B4D5AA9099E86AB
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203132313839.roa
Signing time:             Tue 04 Feb 2025 18:33:15 +0000
ROA not before:           Tue 04 Feb 2025 18:28:15 +0000
ROA not after:            Tue 03 Feb 2026 18:33:15 +0000
asID:                     12189
IP address blocks:        200.35.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d4:19:8e:59:d5:e1:39:a3:7e:7d:1f:7b:4d:5a:a9:09:9e:86:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Feb  4 18:28:15 2025 GMT
            Not After : Feb  3 18:33:15 2026 GMT
        Subject: CN=912849B9BD22CAA338994B74F46E3F555BEF27BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:3a:7a:5e:4c:56:0c:6c:eb:cf:4d:f0:e6:
                    8f:5a:15:67:cf:6e:37:ce:f8:c0:43:a6:b0:3f:5b:
                    e9:0f:a6:5d:ee:37:f3:28:9e:e5:b8:a9:4e:7b:11:
                    3a:cd:c6:e2:13:e6:74:f1:2e:63:f4:28:cb:86:61:
                    7b:53:7b:ba:a4:05:00:26:9b:44:e7:25:73:e0:ab:
                    9e:0a:42:36:a8:6b:11:c5:ae:6a:9a:33:fd:af:aa:
                    af:e3:19:7c:03:9e:94:18:24:98:31:3a:3d:d6:68:
                    14:8c:ce:4e:cf:40:3f:66:a3:bc:f2:4c:bd:ff:77:
                    20:12:ce:e1:f0:ed:3b:db:de:c9:b5:84:41:2a:7a:
                    c6:9f:22:ce:51:4d:ea:26:0e:d3:a5:21:f2:c5:fb:
                    03:2e:e8:24:af:76:e5:75:08:8b:09:90:3e:a6:fb:
                    fe:35:32:6a:0a:e7:f1:02:80:19:88:1b:1f:85:21:
                    cc:46:df:11:c4:73:8e:2b:66:6f:69:92:05:e6:e2:
                    3e:99:57:21:1d:3b:c8:cb:32:42:ba:ef:c8:21:67:
                    74:26:1c:76:8c:cc:fb:67:4f:79:e8:5e:eb:d2:86:
                    2e:2a:a3:b5:ac:8a:59:be:66:32:c3:9d:70:47:5f:
                    8d:6f:a4:fe:f6:0d:5f:df:f5:40:ce:29:c4:1f:5e:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:28:49:B9:BD:22:CA:A3:38:99:4B:74:F4:6E:3F:55:5B:EF:27:BE
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:ad:08:07:03:b1:01:16:8f:c8:13:e5:ae:2a:9c:a7:e7:
         4e:de:ca:a7:84:e4:8c:ff:00:e1:a7:c0:2e:f9:e4:3b:8a:85:
         ca:db:8e:a8:d2:23:5f:be:71:1f:de:ad:27:a1:30:2d:70:51:
         14:67:8f:56:af:ee:a2:a3:40:90:1d:1b:cf:f8:fc:c2:51:79:
         21:de:1d:ff:7c:10:09:b2:b4:50:a4:10:ad:7b:4e:54:b8:cd:
         74:6d:15:f9:5d:53:28:b6:7d:0c:4d:fd:03:2d:44:73:fb:ea:
         3f:fd:d9:81:16:96:fb:c6:e7:28:49:0f:94:c6:64:4e:82:18:
         d4:c5:b0:0c:0c:8a:f4:fb:c3:cd:b7:ed:fa:c2:61:00:87:47:
         af:a3:3f:20:4e:1f:72:17:dd:ae:96:73:09:c7:53:91:af:25:
         3e:a5:19:02:68:f9:87:c3:e2:57:58:09:94:16:7e:2a:96:7e:
         44:16:f6:33:d7:15:bc:59:5a:bf:47:83:ba:39:cf:a0:1e:67:
         4b:b6:a5:a8:33:82:d6:b4:cc:8a:9c:41:30:e4:04:ee:8c:11:
         45:34:e1:fa:f0:d3:77:f7:1e:b3:68:72:20:41:66:9d:e7:49:
         80:7b:dc:d1:ff:37:d9:65:06:e7:d6:95:82:b0:0a:24:9e:2e:
         b0:b4:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:59 2025 by rpki-client