Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3230302e3232392e3134342e302f32322d3234203d3e203532343638.roa
File:                     3230302e3232392e3134342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          tCxqHSrbOWqFf5ubEA8tDyDUrDsIrEwwCtBzzSBwMWA=
Subject key identifier:   9E:E0:BB:CA:C3:03:73:BF:4E:6A:19:CA:CC:45:8B:83:08:03:B1:45
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       3D536F03FB45F67A85657D7E2096DAB23960AF79
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3230302e3232392e3134342e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:51:21 +0000
ROA not before:           Tue 05 Mar 2024 17:46:21 +0000
ROA not after:            Tue 04 Mar 2025 17:51:21 +0000
asID:                     52468
IP address blocks:        200.229.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:53:6f:03:fb:45:f6:7a:85:65:7d:7e:20:96:da:b2:39:60:af:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Mar  5 17:46:21 2024 GMT
            Not After : Mar  4 17:51:21 2025 GMT
        Subject: CN=9EE0BBCAC30373BF4E6A19CACC458B830803B145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:81:f2:55:24:dd:9a:dc:36:03:82:9d:45:
                    63:5f:a6:be:7b:ff:76:43:dd:95:51:e4:ef:a9:7d:
                    61:08:b4:58:b5:7c:d4:5b:3a:9b:28:71:9c:34:3b:
                    74:8f:ea:5f:fc:72:3a:35:64:78:47:ba:da:59:73:
                    bf:0e:63:d5:9e:b8:da:bd:a2:6b:6a:a8:f6:72:79:
                    bf:5d:11:5f:73:bc:20:2f:b4:3c:d2:7b:68:b7:c3:
                    4b:f0:bd:f8:7b:f9:10:81:9d:14:a0:2e:e0:64:8b:
                    28:d8:43:db:10:bd:9a:57:f1:57:08:56:7e:28:c8:
                    aa:4e:f4:41:97:ce:6f:d2:e8:82:c4:2b:da:b6:74:
                    71:4d:2b:9c:01:95:36:84:92:54:44:dc:9a:db:77:
                    a7:9f:22:62:43:86:c4:95:ab:b7:3f:1d:e3:a6:3a:
                    0c:9c:b3:0c:b5:cc:a1:78:a5:15:23:80:18:a7:c5:
                    65:06:bf:a7:55:13:92:84:a4:d6:14:f2:ff:98:cd:
                    75:81:37:64:f5:52:72:e6:10:eb:b4:e8:a7:c1:57:
                    5e:73:7f:75:f1:48:a3:1d:52:51:05:3b:53:80:81:
                    3f:49:42:6b:ff:d1:b0:dc:5b:43:41:2a:ec:95:b9:
                    87:8f:1f:5b:4f:e7:de:14:45:c7:a1:97:86:36:78:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E0:BB:CA:C3:03:73:BF:4E:6A:19:CA:CC:45:8B:83:08:03:B1:45
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3230302e3232392e3134342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:9a:e7:02:96:66:f9:e8:1b:5a:a9:aa:0b:2f:73:0f:63:15:
         d8:86:ee:79:5b:49:7e:12:52:cb:a6:01:25:92:1d:92:f8:9c:
         d8:88:0d:67:e0:0f:b5:97:be:28:e2:da:f6:8e:47:1d:55:2f:
         2d:cb:65:cd:44:95:bf:00:a0:ee:6b:da:98:de:d0:b9:de:a4:
         b1:91:c0:6b:86:01:11:37:5a:16:67:15:c5:da:10:bc:0d:34:
         64:d0:7c:e2:74:22:03:81:4d:74:7c:d3:09:9c:e0:db:32:89:
         b2:08:bc:e8:04:a3:c2:6a:e7:c3:fc:73:d0:92:48:32:72:98:
         8b:f2:eb:ae:6d:bf:af:bf:3d:76:d1:2e:a2:58:44:73:3d:f3:
         1c:e8:63:fb:3a:f4:b3:ee:cf:14:02:d0:ff:2b:af:23:93:22:
         e1:0d:db:5c:5e:6b:d5:af:f4:f8:d6:7c:c5:c9:30:39:d6:6b:
         69:fa:1d:f0:7a:25:06:06:f9:46:c4:e6:6f:48:2d:12:ee:76:
         04:e3:ca:6d:14:cd:a4:51:c1:bb:49:a5:6c:73:09:5d:a7:6b:
         b3:cb:46:23:25:96:81:d7:e8:a3:62:33:de:6f:41:45:4d:35:
         4a:62:79:b3:b9:b4:92:61:7f:33:89:f5:4f:9a:e4:cf:9a:79:
         26:ea:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:47 2024 by rpki-client on console-ams.rpki-client.org