Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/3230302e33352e3134382e302f32322d3234203d3e20323730303432.roa
File:                     3230302e33352e3134382e302f32322d3234203d3e20323730303432.roa (raw, json)
Hash identifier:          cGrABufLYtpvD1DXznJQ7lgOMXvRKlQJEfyG8p27jMI=
Subject key identifier:   5D:86:90:D2:19:1B:29:AC:E5:64:D0:33:51:F8:66:B8:E7:34:24:58
Certificate issuer:       /CN=694A9B567DC84442DF416235D33074B005F7A672
Certificate serial:       49141882984CAA84298A896338954531E825134D
Authority key identifier: 69:4A:9B:56:7D:C8:44:42:DF:41:62:35:D3:30:74:B0:05:F7:A6:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/3230302e33352e3134382e302f32322d3234203d3e20323730303432.roa
Signing time:             Tue 04 Feb 2025 18:54:48 +0000
ROA not before:           Tue 04 Feb 2025 18:49:48 +0000
ROA not after:            Tue 03 Feb 2026 18:54:48 +0000
asID:                     270042
IP address blocks:        200.35.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:14:18:82:98:4c:aa:84:29:8a:89:63:38:95:45:31:e8:25:13:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694A9B567DC84442DF416235D33074B005F7A672
        Validity
            Not Before: Feb  4 18:49:48 2025 GMT
            Not After : Feb  3 18:54:48 2026 GMT
        Subject: CN=5D8690D2191B29ACE564D03351F866B8E7342458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:34:ce:fe:48:2d:fc:9c:81:13:ee:fe:e7:
                    15:63:d8:d0:19:ed:4e:6c:87:1e:41:79:0b:6f:0f:
                    78:c6:5b:80:3a:6f:fe:19:32:4b:0a:75:ab:e1:6a:
                    95:fe:82:2e:db:50:ee:ed:1e:d7:21:b0:4f:59:4c:
                    4c:88:67:2e:13:e1:a4:4a:54:ee:72:b2:41:2b:bc:
                    96:70:1c:ba:ac:da:ab:3d:bd:3e:c7:ef:89:d1:bc:
                    2b:92:f8:25:92:c2:9e:85:45:90:df:3e:db:87:72:
                    03:60:9a:15:79:88:28:26:9d:6e:f6:0d:60:55:fc:
                    00:e5:f6:80:99:dc:49:75:07:ff:e0:8b:9d:26:20:
                    83:37:54:27:5a:ba:1b:b8:55:b6:28:99:76:59:87:
                    3f:4a:c0:61:61:9a:4f:c2:a8:9d:d4:cb:27:ab:76:
                    75:06:c7:fe:d7:df:72:71:91:0d:3b:df:7d:0a:43:
                    3e:f2:2a:90:02:90:10:ce:93:b6:95:e1:80:8f:38:
                    6b:3c:6a:52:6c:0a:db:e2:4c:4b:00:7b:1b:d5:66:
                    dd:bb:d7:20:b5:6c:ab:94:5e:e5:12:20:0a:6b:be:
                    12:e6:6f:0a:c9:3b:29:bc:ff:a8:db:df:5a:e2:00:
                    93:8e:28:84:fb:45:ae:d2:33:e6:07:53:31:c0:37:
                    d0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:86:90:D2:19:1B:29:AC:E5:64:D0:33:51:F8:66:B8:E7:34:24:58
            X509v3 Authority Key Identifier:
                keyid:69:4A:9B:56:7D:C8:44:42:DF:41:62:35:D3:30:74:B0:05:F7:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/694A9B567DC84442DF416235D33074B005F7A672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/694A9B567DC84442DF416235D33074B005F7A672.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52FD51C442BCB9A9CFC448B452C26EB5776D070EB0513122757C8DA94FCDC4A0/0/3230302e33352e3134382e302f32322d3234203d3e20323730303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:d6:1e:3e:36:60:bf:75:64:0d:52:b4:77:72:bd:2f:36:5f:
         88:ac:bf:00:82:7c:71:29:f3:c3:2d:a1:7a:7e:bd:6b:34:84:
         38:3e:9e:53:6d:6d:a7:73:4f:c1:96:e6:1e:47:ed:d5:08:5f:
         24:d5:47:6b:e0:5d:89:82:06:f0:e8:9a:5b:58:8b:51:80:c0:
         a4:e8:c5:b2:30:d5:de:92:8a:4e:8c:d8:05:84:f5:2f:bf:18:
         32:ba:ea:f4:48:0c:e0:5f:73:0a:eb:c8:1a:8f:41:5f:e4:1f:
         ad:2e:5a:c2:d6:b1:b3:71:2c:4a:ee:97:16:3a:af:9a:1d:07:
         e7:e6:9a:47:a2:a8:20:66:bf:99:57:29:4d:57:4b:02:0d:90:
         2e:fb:9f:4c:68:2b:2d:ef:23:34:44:31:49:de:68:97:44:4c:
         29:4c:fd:4f:f7:de:e4:38:1b:fd:5a:43:f2:06:9b:fb:f2:c2:
         6a:95:82:a3:87:cb:55:e7:c0:c5:f4:3a:75:f2:b3:84:61:56:
         7a:16:18:c5:a1:3f:5c:d6:a3:ad:40:92:a8:cc:67:dd:f4:6c:
         88:cd:c9:e1:96:c7:45:1f:7d:30:f9:2b:85:31:a8:aa:68:4d:
         91:49:a5:dd:36:f3:bd:6a:1c:da:f6:d0:ca:ed:5b:10:b2:76:
         a3:84:bf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:07 2025 by rpki-client