Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343534.roa
File:                     3230302e33352e3135342e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          Ig5QiziCJU0Xa/YFjZYClYevPFaJArZG63yrQ3zaymo=
Subject key identifier:   84:87:25:7C:FB:AE:06:73:93:D4:82:F3:C4:5E:38:99:D9:85:6C:5A
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       315C6EF3575E360D10596BE834352223BB0523DA
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343534.roa
Signing time:             Tue 05 Mar 2024 18:04:01 +0000
ROA not before:           Tue 05 Mar 2024 17:59:01 +0000
ROA not after:            Tue 04 Mar 2025 18:04:01 +0000
asID:                     20454
IP address blocks:        200.35.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5c:6e:f3:57:5e:36:0d:10:59:6b:e8:34:35:22:23:bb:05:23:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Mar  5 17:59:01 2024 GMT
            Not After : Mar  4 18:04:01 2025 GMT
        Subject: CN=8487257CFBAE067393D482F3C45E3899D9856C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:f7:27:c0:b7:63:73:95:40:ec:38:67:7a:
                    d2:43:0f:be:30:b7:40:0a:71:1e:56:a1:0e:af:75:
                    fa:01:04:57:59:52:a0:fe:52:47:14:38:77:da:66:
                    a3:0a:8e:5c:53:c7:46:76:8b:16:9f:62:16:86:9f:
                    14:d5:fc:a5:90:61:86:bd:d5:80:2a:68:86:83:9c:
                    d6:5f:f2:aa:3f:91:e7:e4:ac:d4:02:f8:a5:e3:d9:
                    58:85:3d:6d:56:99:e6:5e:f4:f3:3c:b2:8d:af:53:
                    5f:5d:b7:63:bd:c3:42:02:a1:ae:b0:fb:c9:e6:74:
                    ad:3f:e4:e9:c3:1c:8d:8a:97:a1:6e:d9:c9:37:50:
                    6e:12:da:d8:7a:bd:f9:0b:fa:3d:76:32:02:72:73:
                    43:ac:35:a5:48:7f:07:5d:e5:15:9d:fb:c8:b8:55:
                    8d:14:55:6c:e4:3d:6b:20:35:35:63:db:d1:04:2f:
                    51:cb:38:8a:e5:d6:fc:4c:db:52:48:f7:d1:68:b2:
                    b3:51:a8:6e:40:0b:6e:74:6c:47:0d:00:bd:90:eb:
                    61:54:3c:89:40:6b:bb:e5:da:56:6e:fe:ef:92:67:
                    8e:83:d2:91:a6:40:d9:5d:d4:bb:08:43:51:39:29:
                    eb:69:65:66:fb:d0:2e:2b:93:9d:4e:d8:a1:a0:e1:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:87:25:7C:FB:AE:06:73:93:D4:82:F3:C4:5E:38:99:D9:85:6C:5A
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:18:1b:4c:de:b5:dd:39:00:a7:79:6c:b6:c1:af:ac:48:df:
         3e:c2:da:e9:df:18:fb:86:a7:43:b4:52:88:9a:3d:04:a1:08:
         19:b1:b5:d0:b4:99:d1:f0:45:4e:a5:58:55:e7:d3:86:4a:26:
         ba:9d:1f:d8:2e:80:67:5e:f7:89:64:97:2d:1c:09:eb:02:a0:
         f8:7b:5a:85:bc:5c:02:b2:98:14:0a:bd:07:8d:de:0e:63:ea:
         bf:3c:47:8c:ae:74:32:ab:27:5e:04:a9:fc:81:76:81:a7:d6:
         d7:6e:a7:e0:5f:1e:8e:9d:07:83:8d:7d:79:c6:bf:86:7f:75:
         56:dc:f3:c3:b8:37:7c:4c:92:44:00:e0:c7:00:94:e8:f6:16:
         4e:f5:43:d5:41:6f:ff:35:62:a1:5e:74:1e:e1:dd:e6:5c:a0:
         c6:50:8d:90:95:8a:bf:19:b5:08:23:7e:ab:c3:20:e6:4d:2a:
         ce:23:01:b1:ab:34:18:ce:1b:ce:2c:c3:de:ff:f3:25:68:4a:
         b7:89:ab:2e:55:ab:0c:39:30:ce:a4:47:5a:7b:1e:b9:d9:f8:
         a9:b8:61:91:8c:16:31:02:e4:fe:91:55:e0:1a:da:51:2b:da:
         ce:e2:41:df:62:66:1e:52:85:e6:15:03:0b:2c:dc:51:d8:f7:
         12:58:d7:23
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMVxu81deNg0QWWvoNDUiI7sFI9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNDAzMDUxNzU5MDFaFw0yNTAzMDQxODA0MDFaMDMxMTAvBgNV
BAMTKDg0ODcyNTdDRkJBRTA2NzM5M0Q0ODJGM0M0NUUzODk5RDk4NTZDNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyPcnwLdjc5VA7DhnetJDD74w
t0AKcR5WoQ6vdfoBBFdZUqD+UkcUOHfaZqMKjlxTx0Z2ixafYhaGnxTV/KWQYYa9
1YAqaIaDnNZf8qo/kefkrNQC+KXj2ViFPW1WmeZe9PM8so2vU19dt2O9w0ICoa6w
+8nmdK0/5OnDHI2Kl6Fu2ck3UG4S2th6vfkL+j12MgJyc0OsNaVIfwdd5RWd+8i4
VY0UVWzkPWsgNTVj29EEL1HLOIrl1vxM21JI99FosrNRqG5AC250bEcNAL2Q62FU
PIlAa7vl2lZu/u+SZ46D0pGmQNld1LsIQ1E5KetpZWb70C4rk51O2KGg4fjFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhIclfPuuBnOT1ILzxF44mdmFbFowHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMyMzAzMDJlMzMzNTJlMzEzNTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgjmjAN
BgkqhkiG9w0BAQsFAAOCAQEAOxgbTN613TkAp3lstsGvrEjfPsLa6d8Y+4anQ7RS
iJo9BKEIGbG10LSZ0fBFTqVYVefThkomup0f2C6AZ173iWSXLRwJ6wKg+Htahbxc
ArKYFAq9B43eDmPqvzxHjK50MqsnXgSp/IF2gafW126n4F8ejp0Hg419eca/hn91
Vtzzw7g3fEySRADgxwCU6PYWTvVD1UFv/zVioV50HuHd5lygxlCNkJWKvxm1CCN+
q8Mg5k0qziMBsas0GM4bzizD3v/zJWhKt4mrLlWrDDkwzqRHWnseudn4qbhhkYwW
MQLk/pFV4BraUSvazuJB32JmHlKF5hUDCyzcUdj3EljXIw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org