Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36322e302f32342d3234203d3e20323731383934.roa
File:                     3230302e31342e36322e302f32342d3234203d3e20323731383934.roa (raw, json)
Hash identifier:          HuKT5TCWZRMyZ2PxCjlORyxcsa243t30pDGU74puf6g=
Subject key identifier:   50:35:EC:1D:2D:1C:1B:6E:18:7C:35:13:9D:D3:39:A8:6B:1A:0F:46
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       2839DFE0BCCE0CAFAFDE3A872BE01E08BE6461C7
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36322e302f32342d3234203d3e20323731383934.roa
Signing time:             Tue 05 Mar 2024 18:22:26 +0000
ROA not before:           Tue 05 Mar 2024 18:17:26 +0000
ROA not after:            Tue 04 Mar 2025 18:22:26 +0000
asID:                     271894
IP address blocks:        200.14.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:39:df:e0:bc:ce:0c:af:af:de:3a:87:2b:e0:1e:08:be:64:61:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Mar  5 18:17:26 2024 GMT
            Not After : Mar  4 18:22:26 2025 GMT
        Subject: CN=5035EC1D2D1C1B6E187C35139DD339A86B1A0F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:10:13:c4:21:77:9d:9a:ed:3a:74:85:9e:
                    e0:fa:46:b7:1a:95:9d:04:03:23:32:1d:5c:04:37:
                    eb:d4:1a:93:ff:be:6b:62:fa:ec:c0:40:49:7b:b5:
                    53:b8:e2:e4:09:6a:b2:f6:17:1e:b6:cd:09:99:05:
                    7e:99:62:b9:d6:85:84:09:a5:f7:7e:f4:b0:26:83:
                    c7:94:1e:d8:46:4e:89:ec:44:95:90:e4:8f:a5:a0:
                    83:50:a4:df:3c:1d:23:ce:77:2e:e9:f8:6e:4a:a0:
                    94:87:c8:38:d7:2a:ba:9d:81:6b:d6:04:f3:be:a0:
                    02:ce:20:c4:0b:05:81:9a:cf:f0:a3:e9:64:d4:a9:
                    24:3e:a1:85:b0:23:ca:bc:7a:1f:f7:c0:22:51:1d:
                    6e:c7:67:0a:d7:7a:30:56:42:7d:15:27:46:17:8a:
                    7b:24:ca:b3:96:b4:45:d9:cd:e9:ba:8d:f7:2e:09:
                    a9:6c:a1:fc:62:33:9e:00:b3:5c:e2:68:36:61:cc:
                    10:35:ae:27:f0:82:03:fc:ae:7d:9d:a9:12:dd:0e:
                    64:ca:cc:e0:ca:87:97:c5:44:a9:37:5f:85:15:ac:
                    0c:72:a0:33:6a:bc:91:07:c1:ee:83:2c:47:0a:a2:
                    01:ad:fb:27:c1:78:86:df:0e:82:0f:7a:84:2e:25:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:35:EC:1D:2D:1C:1B:6E:18:7C:35:13:9D:D3:39:A8:6B:1A:0F:46
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36322e302f32342d3234203d3e20323731383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f7:a0:c1:d9:a2:e8:cf:33:d1:77:1b:46:1c:6c:6d:f0:48:
         dd:23:ba:09:8f:93:ad:1a:26:6e:c2:9e:3f:6f:e8:2e:c1:50:
         08:9b:75:a8:aa:bd:6f:c1:44:62:e5:75:2c:3c:f5:76:03:bd:
         8f:fd:d3:8e:64:0c:5b:b7:9e:4f:9b:6c:c7:13:b1:fa:d5:4f:
         42:7f:86:6b:4d:92:9a:97:75:60:44:cc:a2:3e:9e:37:27:54:
         e5:b5:6c:da:f4:06:74:ae:70:9c:99:25:59:07:4e:15:ff:32:
         77:e9:e0:f5:99:f7:a5:ea:50:a4:4d:47:26:9f:a4:b4:07:7a:
         c5:ae:30:90:bd:f8:72:4c:5e:d9:f3:b9:2d:5d:c5:5a:a4:b9:
         fe:e7:80:2c:a8:07:b8:02:59:bb:9e:be:8d:f1:a1:0f:56:90:
         40:4f:24:b1:80:c4:76:b7:52:a3:fa:9e:7f:8a:31:6f:22:3a:
         35:ea:f9:18:8e:bd:f4:95:72:35:08:c3:28:1c:22:61:7a:a7:
         22:42:09:19:d9:a8:c2:f0:7a:4c:56:6d:6f:57:d4:a1:b0:1c:
         ba:c9:f9:39:eb:b4:93:00:29:14:60:b0:26:fc:8d:21:70:77:
         5a:8e:ef:31:d5:a0:e9:bf:61:07:ca:98:b9:b3:d6:74:d2:63:
         7b:f2:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:29:24 2024 by rpki-client on console-ams.rpki-client.org