Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36332e302f32342d3234203d3e20323731383935.roa
File:                     3230302e31342e36332e302f32342d3234203d3e20323731383935.roa (raw, json)
Hash identifier:          R/xlQioDY89XcDeeG5I0NudslmN4l6JszCL8g4ImE1w=
Subject key identifier:   C8:08:B4:3E:B4:D6:0B:94:4A:B8:26:77:CA:19:F5:B7:AC:D9:4F:E7
Certificate issuer:       /CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
Certificate serial:       026E6BBE6904AB5CA0028B7BF7B7C26815D7C678
Authority key identifier: 35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36332e302f32342d3234203d3e20323731383935.roa
Signing time:             Tue 04 Feb 2025 20:06:40 +0000
ROA not before:           Tue 04 Feb 2025 20:01:40 +0000
ROA not after:            Tue 03 Feb 2026 20:06:40 +0000
asID:                     271895
IP address blocks:        200.14.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 02:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6e:6b:be:69:04:ab:5c:a0:02:8b:7b:f7:b7:c2:68:15:d7:c6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C
        Validity
            Not Before: Feb  4 20:01:40 2025 GMT
            Not After : Feb  3 20:06:40 2026 GMT
        Subject: CN=C808B43EB4D60B944AB82677CA19F5B7ACD94FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:e4:36:73:e4:94:75:c5:c2:86:98:d0:dc:
                    60:8f:cc:06:83:2d:33:6e:b7:34:96:f6:5a:12:f3:
                    2d:78:b8:d9:48:54:c9:11:05:11:a3:e3:88:aa:df:
                    70:b2:89:17:07:87:2d:0f:12:9e:73:aa:ac:66:22:
                    98:4f:eb:21:05:b1:2c:98:c5:d5:4e:c7:93:02:f4:
                    12:91:56:78:b6:48:f1:35:fc:fa:fb:e9:dc:e4:a0:
                    40:4f:d6:a9:d1:f0:b0:25:41:ba:a6:e2:86:a2:e4:
                    71:37:c8:50:aa:14:0c:1f:76:52:10:a7:eb:0c:4e:
                    27:27:6d:e1:f0:09:f8:b4:59:a1:02:51:1e:47:91:
                    70:ba:d6:7a:59:79:1b:6a:e8:bf:07:be:62:90:70:
                    96:51:a5:08:3c:09:d6:9f:64:c5:74:b7:29:1f:8d:
                    c2:d3:43:5a:97:f0:88:ee:ae:0f:35:bc:d7:c4:2a:
                    d2:4a:bd:dd:31:74:d1:42:f7:31:a4:c3:3b:7c:bf:
                    76:e9:4d:ba:62:f1:39:19:d0:c5:08:ab:5d:92:c0:
                    af:15:d6:93:6c:4d:26:8f:46:84:d0:16:19:fa:24:
                    ba:c7:a7:69:33:22:a6:b5:c3:df:25:31:9c:94:c5:
                    47:8a:65:29:b9:4e:f5:e9:c3:ce:6f:1e:bb:83:e9:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:08:B4:3E:B4:D6:0B:94:4A:B8:26:77:CA:19:F5:B7:AC:D9:4F:E7
            X509v3 Authority Key Identifier:
                keyid:35:DD:CB:BB:81:68:CA:B4:0A:53:D8:B5:D3:F8:CD:F8:58:D3:A9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35DDCBBB8168CAB40A53D8B5D3F8CDF858D3A99C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30127BBDF1288CD0BA539012212C6F5AC05F1A32BDC9A82FAD01CF9435C1615C/0/3230302e31342e36332e302f32342d3234203d3e20323731383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:de:9e:4f:fd:b8:4b:21:73:5a:0c:79:15:72:e1:d4:da:9b:
         02:4d:bc:91:b9:9c:61:1d:b9:dc:93:0e:b8:bb:f4:56:fc:a5:
         a6:ba:9b:4b:4d:1e:88:59:6e:3b:6f:32:84:d5:b8:d1:b2:81:
         53:0a:52:56:1a:00:d8:6e:fc:c3:c2:72:c6:8b:2a:b9:9a:73:
         7b:5a:13:40:e8:17:ed:14:a0:7a:07:df:b6:c5:d3:ff:bb:1f:
         77:6f:64:b8:93:da:5b:fa:c7:2f:42:a9:4b:c7:a5:4a:bc:18:
         04:d4:b7:a8:e4:d8:78:8d:51:6f:a2:d4:0f:51:fe:ab:32:b0:
         5a:e5:b1:77:4a:4b:3f:d9:4f:6b:de:d2:71:18:5c:c9:ee:ff:
         34:21:3b:42:a2:c9:c3:88:da:92:6c:63:6f:7e:54:87:7c:1a:
         50:e4:1a:6d:c9:0c:4b:e5:e3:73:73:1e:c2:e4:a0:c5:82:0d:
         69:fe:2a:bf:53:11:8b:76:d0:3c:47:65:26:50:6b:0a:c6:bd:
         6a:c6:d8:a4:96:45:e4:0e:42:24:11:38:17:05:85:81:6e:df:
         50:36:a8:b3:74:cd:aa:0b:84:6e:96:5f:57:c2:15:d3:d4:46:
         69:93:9e:d2:b2:c5:4c:76:3b:6b:1e:36:46:37:b6:71:c3:62:
         c7:b8:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:48:13 2025 by rpki-client