Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/3230302e33352e302e302f31392d3235203d3e203232373236.roa
File:                     3230302e33352e302e302f31392d3235203d3e203232373236.roa (raw, json)
Hash identifier:          IqZmH7xl8NtDddLpjksU2gn17fiILcnypWTg7MJI6MI=
Subject key identifier:   BB:B5:8D:F5:DB:DB:1F:5F:C2:77:B1:63:2F:D5:D2:3F:F6:97:59:67
Certificate issuer:       /CN=EDF8234B3EFE3A62754B8F7A55758C85D3746EAF
Certificate serial:       541ABFE39D76E2280642B3E77428D0039F51E736
Authority key identifier: ED:F8:23:4B:3E:FE:3A:62:75:4B:8F:7A:55:75:8C:85:D3:74:6E:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/3230302e33352e302e302f31392d3235203d3e203232373236.roa
Signing time:             Tue 05 Mar 2024 17:58:38 +0000
ROA not before:           Tue 05 Mar 2024 17:53:38 +0000
ROA not after:            Tue 04 Mar 2025 17:58:38 +0000
asID:                     22726
IP address blocks:        200.35.0.0/19 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1a:bf:e3:9d:76:e2:28:06:42:b3:e7:74:28:d0:03:9f:51:e7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDF8234B3EFE3A62754B8F7A55758C85D3746EAF
        Validity
            Not Before: Mar  5 17:53:38 2024 GMT
            Not After : Mar  4 17:58:38 2025 GMT
        Subject: CN=BBB58DF5DBDB1F5FC277B1632FD5D23FF6975967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:36:f6:c4:06:b4:10:fb:4c:c7:43:96:d4:
                    f0:3f:82:ab:b0:0d:8c:3a:b3:22:25:5d:02:84:b4:
                    2f:a0:61:b0:ea:0e:d7:6f:79:bb:c3:a1:9f:ea:40:
                    37:a8:8b:75:f9:23:52:7f:77:2f:00:09:1e:b7:e4:
                    e0:b1:de:01:27:26:56:09:9b:67:d0:2a:ad:c6:c1:
                    21:49:7b:99:ae:4c:de:96:22:2c:bd:9a:ef:7c:84:
                    e6:22:dd:b5:ea:c9:18:59:b0:a5:77:9b:d1:66:c8:
                    52:a0:50:39:be:6a:49:dd:e5:59:6d:2d:fa:a5:85:
                    34:01:3a:c4:a9:fe:d5:ba:ba:99:91:d7:a0:71:2d:
                    8d:2a:92:03:d1:3c:b4:6a:ba:b1:46:4b:87:2e:b8:
                    fb:c2:74:40:aa:02:cc:75:be:29:43:b8:c2:9e:25:
                    c9:a4:ae:31:2e:56:82:d3:5b:6d:d6:a7:3a:76:dc:
                    5d:7c:74:7c:23:cb:4b:14:33:b6:5d:3e:ec:34:f0:
                    3b:36:5c:f9:d3:bb:18:da:a3:09:d2:48:69:95:aa:
                    2d:32:ec:bf:ab:02:a6:73:64:4f:24:e5:f8:1d:18:
                    d8:17:44:be:2e:59:df:d7:8f:ac:97:e4:e9:1d:66:
                    33:87:ea:70:a0:76:e8:43:fb:cf:f5:b3:98:b7:93:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B5:8D:F5:DB:DB:1F:5F:C2:77:B1:63:2F:D5:D2:3F:F6:97:59:67
            X509v3 Authority Key Identifier:
                keyid:ED:F8:23:4B:3E:FE:3A:62:75:4B:8F:7A:55:75:8C:85:D3:74:6E:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/3230302e33352e302e302f31392d3235203d3e203232373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:50:e5:24:3b:6d:ce:8d:aa:01:f8:86:b6:8b:32:e8:73:
         b6:a0:b4:ac:ca:06:71:2b:57:a0:32:3f:3d:b8:44:77:2a:aa:
         c7:c5:8b:34:70:34:63:a6:1c:37:ff:f0:1d:92:23:b5:18:35:
         a1:e4:29:7e:a0:04:ad:06:23:af:3a:4f:16:c5:35:8c:a7:44:
         bf:49:ea:f5:de:88:4c:68:e2:05:3c:0a:80:90:99:2b:0b:09:
         bf:3a:7d:93:94:77:d8:8f:44:f9:0c:a9:a5:cd:98:c6:34:a1:
         7d:3e:d7:41:58:ef:7e:54:db:54:a4:f5:f2:b3:ed:b3:c5:a6:
         fc:3f:f0:d4:7b:ce:ea:c8:9e:12:d6:27:4b:1a:fa:49:3c:0b:
         27:cc:7b:02:79:89:15:c9:19:5c:e6:9f:76:1a:5e:57:19:31:
         c9:71:34:48:e9:cd:d1:f1:0f:92:e7:8f:8a:d4:a5:d0:16:23:
         ea:04:3c:46:30:42:36:d2:69:53:4c:93:b0:b3:e5:cb:ff:cc:
         61:66:c8:e7:7e:65:fb:83:7c:d4:1f:6c:6b:11:99:8b:ed:25:
         64:ed:59:26:b0:7a:96:74:b8:9f:6e:2e:82:36:e9:4e:73:64:
         57:ac:56:b4:de:5a:78:50:6c:c4:cc:74:8b:cb:e6:bd:da:90:
         5b:95:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org