Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36302e302f32342d3234203d3e20323639393633.roa
File:                     3230302e31342e36302e302f32342d3234203d3e20323639393633.roa (raw, json)
Hash identifier:          McTQN/gzt40lO4XLEn/bnLDx+L42Yp/wvNHlFn+nfiA=
Subject key identifier:   A5:9B:34:AC:35:BD:26:D2:5C:43:C5:65:C7:55:43:6B:77:07:88:7A
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       4E5E5E4663D1BDAB908444F43BC542B0DC279F40
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36302e302f32342d3234203d3e20323639393633.roa
Signing time:             Tue 04 Feb 2025 20:06:38 +0000
ROA not before:           Tue 04 Feb 2025 20:01:38 +0000
ROA not after:            Tue 03 Feb 2026 20:06:38 +0000
asID:                     269963
IP address blocks:        200.14.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 03:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5e:5e:46:63:d1:bd:ab:90:84:44:f4:3b:c5:42:b0:dc:27:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Feb  4 20:01:38 2025 GMT
            Not After : Feb  3 20:06:38 2026 GMT
        Subject: CN=A59B34AC35BD26D25C43C565C755436B7707887A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:13:23:9f:19:31:ae:07:fa:28:3f:34:a9:a3:
                    75:70:6e:9d:f0:c9:ae:4e:2d:4b:a9:7f:f6:e1:7f:
                    09:be:20:7d:b5:bf:90:7f:16:b6:ce:9b:ee:4d:67:
                    5e:bf:83:5e:25:ab:93:34:48:69:74:46:c7:6a:68:
                    d0:d5:ea:9e:99:81:e3:b2:70:4a:ed:e1:d3:52:73:
                    c4:65:f7:47:9a:32:ef:ed:34:4a:92:f3:7f:4f:b6:
                    73:87:1f:b4:20:56:ba:a8:3a:93:9c:33:50:c3:8c:
                    12:bf:fa:13:a0:2e:a3:7f:09:b7:0d:2e:0f:44:bb:
                    fc:a9:0a:19:2d:db:74:a0:ab:7f:1d:bc:9a:90:35:
                    51:a1:0f:e5:e0:ba:ea:56:a8:56:fd:02:9f:62:c1:
                    5c:ed:51:d3:58:c5:0c:b9:29:aa:70:81:3c:af:2a:
                    ab:a2:ea:98:38:15:c1:e8:7f:47:c8:0b:a0:78:b9:
                    f0:3e:a9:ec:98:cf:ca:02:02:05:89:cd:ec:af:5c:
                    e5:8c:37:33:68:bd:f0:9e:4b:32:21:c8:7b:a4:41:
                    3d:84:f2:10:df:8a:1d:cf:96:77:5d:c8:7b:bf:21:
                    fb:a5:2c:a6:ba:a0:ca:af:28:f8:fd:75:96:28:94:
                    0a:25:6b:c9:74:c1:b0:ab:22:6a:d9:57:80:95:ba:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9B:34:AC:35:BD:26:D2:5C:43:C5:65:C7:55:43:6B:77:07:88:7A
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36302e302f32342d3234203d3e20323639393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:94:4b:aa:e2:3a:7d:8a:f3:1a:b1:7e:24:53:9b:14:5f:8f:
         2e:f4:d4:15:c2:4b:68:55:3d:8c:38:e1:76:5a:56:56:f3:45:
         a7:5d:64:ee:73:d1:21:b4:1b:e0:ae:21:c4:79:69:08:af:56:
         e8:87:03:e9:b8:ae:52:fc:50:a7:29:be:e6:9e:39:7d:36:d4:
         92:1e:54:34:41:ed:a8:9e:98:49:f7:01:2b:5a:d1:50:69:8d:
         7e:ac:20:cf:d0:b5:9b:0a:33:99:d6:36:e2:21:81:9a:35:9c:
         40:ab:c8:75:ca:8b:6b:e2:74:70:35:4e:af:74:8b:58:70:4e:
         d7:cb:86:5c:47:44:f2:03:59:91:a0:e6:b8:0d:f8:e0:58:a2:
         64:2b:94:5d:96:62:a4:ca:58:a5:6a:50:92:09:41:c6:2a:ad:
         a3:4c:ec:2f:ef:25:8b:0a:e4:01:55:a8:95:27:5d:0c:cd:31:
         be:b0:3d:a1:3f:eb:42:e4:76:d4:cf:28:00:17:98:52:d6:39:
         e0:b1:43:93:a1:3c:ca:84:e9:16:21:a1:b7:e3:b8:67:78:4f:
         59:48:ce:ef:b5:3c:01:6a:c1:85:fb:a0:17:fe:12:e5:07:b2:
         3d:bf:72:40:a9:a8:a0:c2:b3:e1:4f:c4:64:24:62:32:40:c0:
         81:37:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:42:05 2025 by rpki-client