Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36322e302f32342d3234203d3e20323731383934.roa
File:                     3230302e31342e36322e302f32342d3234203d3e20323731383934.roa (raw, json)
Hash identifier:          +uBzTORbQf53oDCI78NsvBd//pCTklRu2qH9JmQll10=
Subject key identifier:   75:35:6F:A4:37:C6:20:8D:33:A7:92:7E:E2:B8:59:EF:67:9B:2A:E0
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       7BAA60EAF245801BBB3BF36CA539D37D2BEF96FC
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36322e302f32342d3234203d3e20323731383934.roa
Signing time:             Tue 04 Feb 2025 20:06:39 +0000
ROA not before:           Tue 04 Feb 2025 20:01:39 +0000
ROA not after:            Tue 03 Feb 2026 20:06:39 +0000
asID:                     271894
IP address blocks:        200.14.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 03:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:aa:60:ea:f2:45:80:1b:bb:3b:f3:6c:a5:39:d3:7d:2b:ef:96:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Feb  4 20:01:39 2025 GMT
            Not After : Feb  3 20:06:39 2026 GMT
        Subject: CN=75356FA437C6208D33A7927EE2B859EF679B2AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:9b:6e:ea:a2:68:a5:40:ce:63:83:3d:aa:
                    48:a9:86:3f:b9:f7:ae:20:ea:bb:86:4a:26:70:84:
                    05:47:6e:9a:82:17:25:76:7e:c3:16:55:12:ca:fc:
                    1a:6f:03:39:54:fe:40:5b:ad:eb:71:e4:78:d4:3b:
                    1f:3b:9b:a4:8e:ee:77:14:2f:ba:22:cc:cd:31:7c:
                    ad:3d:95:ad:8e:f8:58:53:17:56:15:ef:04:0b:c0:
                    2a:56:84:87:87:72:bc:de:59:df:52:3f:9e:04:62:
                    be:91:fa:22:8b:66:a5:f3:d7:fd:8f:db:c4:ec:3c:
                    31:ab:e8:25:89:ad:5e:86:af:8d:12:9e:bf:5f:d8:
                    0c:92:b4:f4:fa:b9:fc:9c:3d:2e:7a:f4:2d:70:48:
                    60:e3:5a:a7:88:ea:c2:65:57:dc:17:e0:9c:01:a5:
                    59:cd:96:00:8a:f8:aa:98:50:4c:fa:d2:f2:ca:ee:
                    58:f9:a3:33:35:4c:8d:c4:e7:ab:95:30:42:71:5f:
                    c3:12:6c:38:07:89:34:f5:c9:b2:53:11:96:c0:7b:
                    ed:4e:6c:80:e3:50:34:84:85:c5:82:99:c8:df:47:
                    ab:b0:b6:0e:a7:2e:c4:08:03:f3:cd:3c:ad:bb:7a:
                    c7:97:01:5a:88:8c:a9:3a:7b:41:2b:2f:79:db:a3:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:35:6F:A4:37:C6:20:8D:33:A7:92:7E:E2:B8:59:EF:67:9B:2A:E0
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36322e302f32342d3234203d3e20323731383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:6f:68:53:bd:54:8f:6a:ef:7a:ad:26:c2:66:9f:6d:ee:d7:
         7a:11:fd:10:db:94:a1:d7:5d:c1:fa:62:d5:5b:2c:e4:87:10:
         f4:d0:7b:21:b5:c9:ec:eb:a5:39:d9:d4:e9:40:24:6f:77:0f:
         02:d6:a2:c8:7b:5e:2a:54:bd:a9:36:9b:82:ae:d8:b0:be:27:
         e1:e5:fb:ea:27:9a:e5:55:cf:42:9c:c8:92:b8:4d:c1:77:53:
         ab:37:0a:cf:90:36:ab:5a:02:8f:97:49:83:19:bf:f2:db:8c:
         b6:f6:d9:d6:2a:6a:e5:01:16:6f:0b:7b:77:c3:88:72:61:5f:
         24:bf:33:e6:a7:2a:c7:dd:78:73:a2:54:36:cf:4a:53:72:42:
         7b:a1:7c:ab:b5:38:63:fe:b8:31:5b:70:73:fa:35:7f:60:9d:
         b2:f5:9a:a8:10:64:88:e5:a4:b6:a3:80:84:b5:37:d9:74:9e:
         e4:c1:4d:3e:e7:22:e6:c9:9c:3b:be:61:51:1a:2e:ec:27:b7:
         4a:06:8d:7c:a0:45:f4:a2:24:1c:97:8a:48:0b:e5:87:c1:3a:
         3c:0b:b9:fe:7d:21:3f:be:25:8b:66:43:1e:7b:ff:42:2f:48:
         49:86:c2:54:ec:2b:d7:4e:16:69:6f:5e:1d:df:6e:43:ec:0a:
         b2:06:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:41:40 2025 by rpki-client