Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203132313839.roa
File:                     3230302e33352e3135352e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          bNdY1VNmijuponiGqhufidENUuX6A7ZVliVl+O2Nl+Q=
Subject key identifier:   88:C9:D6:63:CE:09:6B:69:FB:A0:B4:86:16:D8:49:4A:02:6B:E8:0F
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       3CD07772BD5CB63EF47490A3D853EDAABC81C97F
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203132313839.roa
Signing time:             Tue 04 Feb 2025 18:33:16 +0000
ROA not before:           Tue 04 Feb 2025 18:28:16 +0000
ROA not after:            Tue 03 Feb 2026 18:33:16 +0000
asID:                     12189
IP address blocks:        200.35.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d0:77:72:bd:5c:b6:3e:f4:74:90:a3:d8:53:ed:aa:bc:81:c9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Feb  4 18:28:16 2025 GMT
            Not After : Feb  3 18:33:16 2026 GMT
        Subject: CN=88C9D663CE096B69FBA0B48616D8494A026BE80F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:d3:56:f2:83:3e:f0:fc:b0:00:87:5f:ab:
                    bb:a6:12:90:60:64:1b:23:1b:1c:1e:ff:74:1c:e9:
                    bc:5e:86:cb:e0:d6:de:cb:71:e2:5c:8a:74:e6:68:
                    1c:20:65:10:f0:0a:62:78:dc:82:dd:f7:89:7f:d5:
                    0b:5d:aa:1b:64:65:1a:f3:74:3f:19:42:c0:0b:3d:
                    4a:9d:41:22:33:87:c3:75:d5:c2:50:f5:6a:89:24:
                    a0:63:9e:18:c2:ea:d1:82:4b:2d:7e:f0:1c:ce:dd:
                    a5:c1:fc:ae:60:bd:4f:4c:ed:01:b6:94:11:b1:6c:
                    96:7e:b2:63:e5:a4:f8:55:18:bf:78:7c:65:cf:76:
                    83:a9:0b:02:92:74:e5:5e:17:f7:da:80:bb:4a:e1:
                    7f:c1:e6:65:57:a8:17:d0:c3:7d:0c:d9:5b:8b:ce:
                    81:2d:d9:52:5c:ff:43:6f:ef:f5:28:b3:63:5f:ec:
                    8c:37:11:df:34:a4:91:de:bd:64:ea:fe:ac:32:58:
                    62:f9:7a:05:51:39:15:97:33:2f:ea:65:fd:08:15:
                    21:53:26:f0:b4:62:f4:98:db:b8:58:32:d8:5d:2b:
                    73:c8:a6:22:ca:8f:5e:b6:30:63:3a:9f:d9:b4:f5:
                    fe:e0:73:e0:4c:1a:9f:5e:82:1b:21:70:53:97:05:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C9:D6:63:CE:09:6B:69:FB:A0:B4:86:16:D8:49:4A:02:6B:E8:0F
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:ee:e9:13:89:0d:50:f5:65:d2:08:41:78:e3:9e:82:08:04:
         bc:7b:d7:d9:b1:89:ee:9e:b1:36:a7:59:c6:a0:ee:21:0e:71:
         4e:42:6b:3d:04:5a:ae:22:7b:5c:92:34:ec:c0:36:65:22:33:
         c5:a8:47:1d:cf:19:f1:02:9b:b2:bd:f5:f5:1e:57:94:19:6a:
         b5:04:7b:4c:44:8f:ac:07:88:4d:d7:a0:f2:59:5a:be:9e:7a:
         50:f1:ff:6c:c3:cc:95:31:6f:ce:da:ee:67:e0:c2:ad:6f:55:
         c8:29:61:96:8c:43:90:47:7b:30:3a:da:fb:13:b6:54:cf:15:
         b9:b1:fd:d3:74:58:32:f1:26:02:94:f9:54:31:11:8c:08:65:
         d1:20:49:50:51:2a:0d:6d:2b:44:46:98:af:05:c4:b7:a5:51:
         97:3a:e5:f5:54:2c:4f:2e:ef:79:3a:ad:be:21:8a:c1:a7:2d:
         ff:16:4c:97:06:f6:16:2f:fa:94:c9:ac:e2:70:5d:2b:d8:1e:
         08:8f:31:24:bc:6b:b7:ff:2c:76:70:ab:6c:f9:0b:01:33:f6:
         16:4b:55:1a:47:8f:74:01:58:59:b5:17:5a:95:e1:49:49:f1:
         ce:cc:fe:79:b3:5f:05:52:68:50:c6:7c:10:26:7b:3d:3a:3b:
         7a:09:81:e7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPNB3cr1ctj70dJCj2FPtqryByX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNTAyMDQxODI4MTZaFw0yNjAyMDMxODMzMTZaMDMxMTAvBgNV
BAMTKDg4QzlENjYzQ0UwOTZCNjlGQkEwQjQ4NjE2RDg0OTRBMDI2QkU4MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglNNW8oM+8PywAIdfq7umEpBg
ZBsjGxwe/3Qc6bxehsvg1t7LceJcinTmaBwgZRDwCmJ43ILd94l/1QtdqhtkZRrz
dD8ZQsALPUqdQSIzh8N11cJQ9WqJJKBjnhjC6tGCSy1+8BzO3aXB/K5gvU9M7QG2
lBGxbJZ+smPlpPhVGL94fGXPdoOpCwKSdOVeF/fagLtK4X/B5mVXqBfQw30M2VuL
zoEt2VJc/0Nv7/Uos2Nf7Iw3Ed80pJHevWTq/qwyWGL5egVRORWXMy/qZf0IFSFT
JvC0YvSY27hYMthdK3PIpiLKj162MGM6n9m09f7gc+BMGp9eghshcFOXBcLdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUiMnWY84Ja2n7oLSGFthJSgJr6A8wHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMyMzAzMDJlMzMzNTJlMzEzNTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMjMxMzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgjmzAN
BgkqhkiG9w0BAQsFAAOCAQEAT+7pE4kNUPVl0ghBeOOegggEvHvX2bGJ7p6xNqdZ
xqDuIQ5xTkJrPQRariJ7XJI07MA2ZSIzxahHHc8Z8QKbsr319R5XlBlqtQR7TESP
rAeITdeg8llavp56UPH/bMPMlTFvztruZ+DCrW9VyClhloxDkEd7MDra+xO2VM8V
ubH903RYMvEmApT5VDERjAhl0SBJUFEqDW0rREaYrwXEt6VRlzrl9VQsTy7veTqt
viGKwact/xZMlwb2Fi/6lMms4nBdK9geCI8xJLxrt/8sdnCrbPkLATP2FktVGkeP
dAFYWbUXWpXhSUnxzsz+ebNfBVJoUMZ8ECZ7PTo7egmB5w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:15 2025 by rpki-client