Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3137362e302f32322d3234203d3e203236363137.roa
File:                     3230302e33352e3137362e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          FmDviISMX7KI1yeu6KVXzWXJxsZsrHCU/hW3gwzq35k=
Subject key identifier:   0B:EB:51:36:53:50:F3:D7:30:91:41:61:C5:1E:99:D1:64:4C:7A:D4
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       7CF1562B700519C0AB562B6B132822788C18B544
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3137362e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:26 +0000
ROA not before:           Tue 04 Feb 2025 18:10:26 +0000
ROA not after:            Tue 03 Feb 2026 18:15:26 +0000
asID:                     26617
IP address blocks:        200.35.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f1:56:2b:70:05:19:c0:ab:56:2b:6b:13:28:22:78:8c:18:b5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:26 2025 GMT
            Not After : Feb  3 18:15:26 2026 GMT
        Subject: CN=0BEB51365350F3D730914161C51E99D1644C7AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:54:bb:93:14:09:e7:be:48:68:bf:29:52:
                    40:d2:b3:35:6e:e7:13:68:dd:85:82:b6:54:cd:42:
                    83:b5:51:66:d1:18:22:e4:6f:4c:19:22:15:4f:f7:
                    53:5e:a6:56:7e:c9:6e:87:92:88:6b:96:b8:ca:e5:
                    48:7f:19:1d:26:e3:a7:13:a4:ea:c0:73:3b:fb:19:
                    2c:39:12:12:92:8c:4a:48:b1:df:a6:bf:90:35:f3:
                    1b:5a:f6:5d:67:f8:4e:4f:bf:68:cf:75:8a:fd:38:
                    ed:fa:de:f8:96:d3:ea:cd:fa:cf:80:fb:24:49:0d:
                    09:49:9a:0e:31:71:e0:6a:f5:92:9f:ed:e9:87:aa:
                    20:dc:f5:f1:fb:19:24:04:bf:c3:b7:90:f0:bc:ab:
                    1e:8b:1b:ba:8e:d5:73:82:0a:79:d5:07:6c:df:10:
                    3d:18:f4:c5:5a:bf:33:73:94:e2:2d:5e:f3:25:bc:
                    47:cd:75:26:c3:ed:3f:4c:75:09:d8:48:da:ae:b8:
                    2d:0f:72:bb:40:06:9e:7a:8f:a7:31:9d:d7:be:79:
                    b5:9b:bb:52:a0:bf:1e:39:8c:3d:c6:00:0c:f2:d0:
                    1d:15:07:ef:5c:4e:8d:ee:07:8a:a1:64:0b:4e:57:
                    4e:b8:0e:e0:6d:0e:b0:3d:39:8a:9f:03:62:5d:67:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EB:51:36:53:50:F3:D7:30:91:41:61:C5:1E:99:D1:64:4C:7A:D4
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3137362e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:51:96:bd:24:36:c4:4e:91:e7:99:d5:13:e6:97:13:e2:02:
         56:fa:c8:41:ed:05:75:2e:ed:2f:a4:42:07:cd:60:bf:d1:1f:
         ac:45:d4:38:41:33:a9:1d:b1:38:a8:2a:bb:67:53:e3:db:fe:
         68:c8:e9:de:be:ef:49:35:ce:2c:df:5d:b9:8b:52:12:b9:8e:
         0e:49:d5:ad:e0:14:11:b9:8f:40:5c:79:58:e7:f6:df:3c:7a:
         80:fc:f5:ec:87:3c:b4:d8:fe:26:1a:aa:33:9e:75:5e:79:c9:
         7d:8f:d7:9c:87:39:3e:2c:da:6f:6f:c9:46:23:46:67:7c:c4:
         70:ef:f7:c6:aa:be:90:8d:7f:0e:4f:71:16:65:b1:cc:3d:fe:
         67:5d:85:74:51:1f:fa:2d:12:2e:1b:09:f7:bf:33:fa:85:45:
         fb:e3:4c:5f:a4:6a:5f:1e:bc:f6:bc:22:6e:ba:a4:74:26:d4:
         bc:47:00:77:49:0f:00:fc:ac:70:20:b4:83:95:41:76:19:62:
         15:9d:1f:21:9e:28:9a:e2:2b:3e:cf:c4:ca:ae:93:52:93:c5:
         17:4d:3f:b4:0d:1f:6a:ff:af:1f:53:38:32:0c:2c:78:70:67:
         29:c1:1a:e0:8b:d4:d0:c2:2d:a7:6b:d6:f7:74:5b:27:1a:1c:
         ac:eb:dc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:14 2025 by rpki-client