Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36312e302f32342d3234203d3e20323731383933.roa
File:                     3230302e31342e36312e302f32342d3234203d3e20323731383933.roa (raw, json)
Hash identifier:          +kc5MpZc5AvdpKM+76Dze9lkMF245NRzwQWpCA4Jt5w=
Subject key identifier:   02:6E:D6:CE:21:79:43:F6:BE:55:42:C0:92:AB:63:F7:34:16:D0:9E
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       21B137E722D54DD3D27B047165DCA38CC06D91A3
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36312e302f32342d3234203d3e20323731383933.roa
Signing time:             Tue 05 Mar 2024 18:22:25 +0000
ROA not before:           Tue 05 Mar 2024 18:17:25 +0000
ROA not after:            Tue 04 Mar 2025 18:22:25 +0000
asID:                     271893
IP address blocks:        200.14.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 02:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b1:37:e7:22:d5:4d:d3:d2:7b:04:71:65:dc:a3:8c:c0:6d:91:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Mar  5 18:17:25 2024 GMT
            Not After : Mar  4 18:22:25 2025 GMT
        Subject: CN=026ED6CE217943F6BE5542C092AB63F73416D09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3c:99:e6:e2:83:98:8e:d2:9b:31:94:5f:4d:
                    d3:14:87:c0:96:4e:f7:98:fb:3a:9c:85:76:b4:f1:
                    1a:16:9f:ca:d9:b3:66:fa:20:eb:bf:10:f8:c4:ee:
                    6e:05:00:bd:54:6d:4c:6b:2b:a4:49:cf:cc:3c:85:
                    e0:04:bf:f0:5c:39:1f:77:8a:37:77:5c:0a:80:0e:
                    b0:0e:ee:cf:40:a8:9f:65:dc:70:82:0f:c9:bb:59:
                    77:96:16:a6:a7:8d:db:3e:f5:b8:42:f0:73:9a:12:
                    e4:4e:72:d8:d2:11:d5:b2:62:28:19:26:77:3f:21:
                    21:94:e4:49:11:b9:6c:18:4f:2e:17:e4:f7:c4:3f:
                    4c:2a:0b:0f:cd:2d:9e:3d:b4:b0:21:fa:2a:eb:8c:
                    a2:80:68:13:8b:fc:89:1a:78:13:dc:b2:3e:e9:e7:
                    3b:1a:d0:d7:93:0c:db:ec:9c:26:f2:24:dd:15:91:
                    20:51:cc:4c:45:51:5c:05:95:10:c0:7e:4b:5f:f4:
                    52:c8:02:e1:7b:70:bf:17:17:3a:48:d4:2f:cc:58:
                    91:9b:ad:bf:05:c3:66:6e:86:b4:84:13:76:3e:c3:
                    d5:05:28:1c:c1:6e:1e:f1:24:51:3a:98:e8:b6:90:
                    16:6a:9b:08:93:5e:4d:95:33:f4:3c:a6:49:3d:d2:
                    65:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6E:D6:CE:21:79:43:F6:BE:55:42:C0:92:AB:63:F7:34:16:D0:9E
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36312e302f32342d3234203d3e20323731383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:66:1f:72:10:86:b9:57:2f:6a:45:d7:ef:46:e5:42:45:de:
         dc:bb:23:22:98:40:bf:36:cc:12:f3:be:59:1b:f6:cb:d6:de:
         32:fc:9d:74:a2:4c:cf:b6:91:2b:86:28:07:a1:74:4b:c2:f0:
         f7:13:21:2e:23:c6:38:86:89:66:fd:10:21:f7:52:1f:96:35:
         80:03:96:93:04:67:11:27:91:94:46:de:d7:cf:6b:d1:8d:2a:
         71:09:5d:a4:67:2f:e8:5c:e9:06:7b:7e:4a:26:27:16:df:fc:
         df:72:a4:c8:bf:b2:25:63:6e:e5:01:22:df:c1:83:09:fe:fa:
         16:b2:95:d3:51:ad:2e:7e:65:46:7e:4c:55:1b:ee:5d:4f:5c:
         62:d0:9a:00:bb:72:af:16:ec:4c:8d:dc:bf:f7:70:91:fc:7b:
         4e:0f:d8:1d:1a:23:df:bd:67:74:15:f4:2d:a4:4a:86:f1:f3:
         f1:82:d5:d2:30:7c:90:02:d5:dc:e4:d6:ed:16:d9:e8:9b:7e:
         9e:7a:2c:b7:9c:bd:47:8b:13:52:7a:80:c9:4b:ee:2f:6f:e8:
         6b:2a:59:72:57:fb:b1:de:2a:3a:48:a1:a6:17:93:5a:5d:56:
         c5:9e:2e:9c:7f:82:d2:3e:6b:39:77:cf:70:54:72:c4:fd:e5:
         a5:37:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:09:36 2024 by rpki-client on console-ams.rpki-client.org