Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3138342e302f32322d3234203d3e203236363137.roa
File:                     3230302e33352e3138342e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          rO0OjdgV24ORb+p0UUgzJbQ/e4606F3AdcIHqGFiJbA=
Subject key identifier:   2F:F2:38:DF:6A:1A:CB:DA:CE:27:70:E3:0C:D1:72:63:52:21:92:C8
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       1B050BEF091BC284F1A22EA2309099E2E0E54A9A
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3138342e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 17:41:10 +0000
ROA not before:           Tue 05 Mar 2024 17:36:10 +0000
ROA not after:            Tue 04 Mar 2025 17:41:10 +0000
asID:                     26617
IP address blocks:        200.35.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:05:0b:ef:09:1b:c2:84:f1:a2:2e:a2:30:90:99:e2:e0:e5:4a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:36:10 2024 GMT
            Not After : Mar  4 17:41:10 2025 GMT
        Subject: CN=2FF238DF6A1ACBDACE2770E30CD17263522192C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:70:38:37:7c:5e:eb:ca:c1:42:ab:58:5f:65:
                    5e:97:eb:2e:aa:e9:46:bb:1c:9f:c2:97:eb:a9:d7:
                    ff:76:ba:44:5c:9a:88:83:eb:9f:94:bd:a7:42:62:
                    38:0f:35:cf:61:10:30:9f:65:c3:3e:4c:9e:3f:e0:
                    d6:58:2d:3a:a7:fb:ba:c5:a1:d9:d1:f7:08:e2:c3:
                    00:0b:f9:87:39:00:4d:2c:9c:e2:7b:1e:06:8a:db:
                    54:6e:c0:8b:04:81:8b:02:12:77:55:3a:d4:a4:ca:
                    f3:68:ef:c9:04:31:bf:78:45:2a:b7:53:da:90:ed:
                    47:82:a5:06:da:36:d2:db:f3:4a:84:dc:58:ac:1f:
                    79:d0:c2:cf:65:d7:96:3a:ee:c7:06:21:b7:85:26:
                    a9:06:94:68:b0:09:af:7b:84:8a:be:c6:ee:e5:a9:
                    d2:b4:6f:13:40:b2:78:c4:de:23:ff:43:03:ae:3c:
                    73:57:10:55:3b:5d:f6:da:c7:ab:8c:bf:59:b1:ac:
                    d5:9a:a4:e1:a9:50:bd:77:6b:db:7e:2c:5d:4b:2d:
                    d5:08:27:be:f4:08:38:9b:c0:f2:28:25:f1:73:79:
                    b3:e9:6f:9c:32:01:83:e7:6a:80:49:c9:54:f6:b6:
                    97:91:38:43:24:e4:95:47:00:64:91:42:93:1a:6c:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F2:38:DF:6A:1A:CB:DA:CE:27:70:E3:0C:D1:72:63:52:21:92:C8
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3138342e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:f8:72:a2:2e:0b:e7:f3:cc:09:15:f7:84:cc:c4:24:da:
         1d:a7:2f:70:53:fc:41:aa:11:8e:56:cd:5f:d8:b8:f3:ef:bf:
         aa:3d:18:94:64:69:15:ee:c6:f6:de:ba:ba:0c:18:bb:fa:26:
         8a:48:1f:30:d5:2a:3f:b9:83:fb:d8:ce:c6:d0:06:8c:4d:fc:
         87:42:89:47:9e:3d:f3:82:03:7b:38:94:21:74:8b:c4:9c:7e:
         97:e7:23:1f:b2:f0:7a:3a:94:90:03:37:ab:b4:1a:32:cf:83:
         ff:f2:11:98:4b:04:7c:2b:8a:2a:17:ff:d5:a8:4d:cd:78:e7:
         7d:89:d4:4a:a2:e3:80:a5:ec:a2:c4:73:0b:09:a0:a9:f7:a0:
         0b:96:2f:1a:f4:b5:5d:5a:b8:cc:85:cf:d4:c6:f3:c5:1b:40:
         bc:c9:32:19:48:17:49:78:de:b3:c9:84:e1:d2:e1:8d:15:6e:
         47:bf:61:b9:50:15:25:96:90:f8:59:8d:7c:9c:f7:55:3a:4f:
         85:c0:57:85:98:31:35:32:9d:eb:2a:1a:65:7b:ca:a3:d5:18:
         a6:5e:6b:ca:70:51:5b:0b:01:00:b8:de:a4:c1:c0:77:3d:17:
         35:a8:e8:55:3e:ea:18:47:25:7a:f2:81:23:b4:11:3f:83:15:
         5d:c0:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org