Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3136302e302f32322d3234203d3e203236363137.roa
File:                     3230302e33352e3136302e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          nV1b78SYkMKO9oIYAvUbHrTJ/EihIVo/zvi1i//qetg=
Subject key identifier:   FC:37:F2:92:89:45:9B:49:CE:98:0D:20:45:1A:86:00:78:AC:24:0A
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       53F7E188CEEAE9A2040D917A6C7771E44901E891
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3136302e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:27 +0000
ROA not before:           Tue 04 Feb 2025 18:10:27 +0000
ROA not after:            Tue 03 Feb 2026 18:15:27 +0000
asID:                     26617
IP address blocks:        200.35.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f7:e1:88:ce:ea:e9:a2:04:0d:91:7a:6c:77:71:e4:49:01:e8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:27 2025 GMT
            Not After : Feb  3 18:15:27 2026 GMT
        Subject: CN=FC37F29289459B49CE980D20451A860078AC240A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ba:50:88:4a:58:c9:c5:a7:19:09:5a:a8:d4:
                    f5:ea:53:9c:33:7e:76:15:81:ae:81:37:f2:e2:d8:
                    19:79:f0:b7:ab:71:9d:4f:70:90:9d:62:0f:85:b0:
                    46:03:44:a4:eb:ab:7e:d1:92:07:37:45:60:f7:58:
                    78:e5:f7:5f:5c:02:ae:42:03:9f:60:c1:56:57:c2:
                    be:3b:48:d9:cf:8d:cd:b2:e4:df:17:68:16:66:6a:
                    98:3b:cc:8c:fb:4e:e4:72:b7:e0:e5:55:82:6f:04:
                    26:53:a9:c9:a7:69:84:23:66:11:31:38:4d:8b:2a:
                    96:d1:b2:9e:a9:53:4a:78:e6:11:b8:bf:13:ea:21:
                    a0:22:79:67:7b:02:c0:0f:ab:16:a0:fa:ff:8d:3d:
                    6d:00:65:e4:19:ce:3d:93:2f:93:28:fc:ca:0c:5a:
                    0c:b3:ca:1e:dd:a6:17:03:98:16:c2:51:1b:4c:24:
                    82:fa:bb:b2:17:32:5d:04:f2:b2:df:f8:2f:fd:78:
                    1d:a0:99:22:1a:7a:85:7c:74:14:a7:0c:6d:27:ac:
                    fc:62:0d:b6:32:06:01:60:c0:63:47:c5:7b:06:a9:
                    d6:6a:60:a8:76:34:ad:bd:21:61:14:78:10:1c:ba:
                    85:8c:af:c3:fb:6c:b1:1b:c7:95:65:a8:15:c6:1f:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:37:F2:92:89:45:9B:49:CE:98:0D:20:45:1A:86:00:78:AC:24:0A
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3136302e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:a5:c6:e5:3a:fc:95:6c:b8:71:b8:08:e0:6a:8f:bd:ba:5b:
         0e:d6:66:ce:75:34:04:f4:79:e9:d7:15:48:fb:2b:b5:76:0b:
         0f:b0:28:a7:6c:97:b5:fb:f2:0f:b4:a6:ff:d6:c3:50:fe:cc:
         78:9c:de:7b:f2:83:ec:9a:97:64:6a:4e:db:54:ad:8e:6f:de:
         9d:1e:20:af:41:65:54:56:b2:8a:07:7f:2e:ef:1b:cd:e6:ba:
         26:25:c9:94:6f:50:62:de:f7:ad:5d:7d:a3:b1:1d:cb:b6:c3:
         4a:21:3b:66:5a:c0:55:aa:0e:f8:f9:a2:b0:bc:41:60:47:72:
         e5:65:12:36:ae:64:4c:06:3f:e9:84:f1:65:22:b2:10:7b:4e:
         6e:c5:22:f4:e4:a5:ac:67:69:a8:29:fc:c9:58:ae:47:9e:20:
         77:65:f5:01:f8:55:85:95:8a:9f:a5:c1:1b:ed:53:89:dc:d7:
         c5:e0:9e:6a:56:6a:a9:76:5e:cb:5b:6c:83:e3:9a:6b:05:74:
         de:e3:0e:45:af:df:05:cf:4b:ff:9c:21:6d:41:da:46:44:c2:
         9e:05:35:5a:bf:50:2c:83:64:17:aa:03:ba:15:b3:f3:a6:12:
         39:25:4e:50:76:14:9b:a3:9c:1a:4e:05:4b:27:85:f3:65:25:
         db:35:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:47 2025 by rpki-client