Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e203134323539.roa
File:                     3230302e33352e3135362e302f32322d3234203d3e203134323539.roa (raw, json)
Hash identifier:          Jzau9XmmPbgkPM0CnjukLk5W9FSFyfvrn5UxGpblNVY=
Subject key identifier:   0B:4A:78:39:4D:84:DC:F7:74:73:9C:7A:BA:00:B7:BA:DE:3C:F7:73
Certificate issuer:       /CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
Certificate serial:       11C6787385749FE12A004F54443771BA3FA88670
Authority key identifier: 93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e203134323539.roa
Signing time:             Tue 04 Feb 2025 18:01:21 +0000
ROA not before:           Tue 04 Feb 2025 17:56:21 +0000
ROA not after:            Tue 03 Feb 2026 18:01:21 +0000
asID:                     14259
IP address blocks:        200.35.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c6:78:73:85:74:9f:e1:2a:00:4f:54:44:37:71:ba:3f:a8:86:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
        Validity
            Not Before: Feb  4 17:56:21 2025 GMT
            Not After : Feb  3 18:01:21 2026 GMT
        Subject: CN=0B4A78394D84DCF774739C7ABA00B7BADE3CF773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:5f:99:8e:2f:fd:21:0c:ec:ad:e0:eb:c0:
                    42:e2:b5:4d:32:62:f0:1e:a0:5c:7b:27:3e:c1:1e:
                    1a:49:57:6a:7f:22:d6:61:d5:55:74:7b:6e:e7:25:
                    ac:26:4e:fa:17:f2:eb:bb:72:14:90:7b:31:b2:af:
                    cf:3f:73:dc:79:cf:f1:e4:84:be:f0:80:e2:ec:5d:
                    48:87:30:39:51:c9:a8:b6:06:91:02:c5:5f:03:23:
                    a1:23:f3:3f:13:51:10:62:cf:5a:3c:2f:04:f2:ab:
                    45:9b:86:b1:9e:f2:cb:b8:d1:46:a3:82:95:53:f9:
                    72:20:98:ff:47:e6:f7:dc:2e:d4:d7:1f:ff:07:5e:
                    c1:9b:b3:bf:6b:bf:61:7c:b5:0d:23:7d:86:8a:20:
                    b8:4c:cc:65:6e:64:1f:d0:40:6e:4f:4e:71:dc:30:
                    bb:29:a7:a2:e0:f2:6c:a8:68:ff:a7:c7:81:34:db:
                    8a:56:64:90:be:32:ef:69:21:f0:45:e7:52:06:64:
                    1f:8b:42:26:0e:8b:d4:1b:c2:5c:e1:2b:43:66:66:
                    7c:95:3b:e8:50:6e:79:42:d6:da:7f:87:fd:53:be:
                    2b:1d:3f:76:cb:d0:9f:d0:b0:68:be:84:4c:f7:b3:
                    4b:82:f0:b2:ce:02:1f:70:29:37:e2:af:cd:19:f1:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:78:39:4D:84:DC:F7:74:73:9C:7A:BA:00:B7:BA:DE:3C:F7:73
            X509v3 Authority Key Identifier:
                keyid:93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:c0:c3:bf:a4:e2:15:82:6f:56:26:14:d1:44:fb:f4:a4:93:
         52:1b:9f:a2:1a:72:15:65:2d:39:33:30:da:10:0c:c5:fb:a7:
         fa:b6:18:f5:9e:55:be:bd:e1:3a:1b:f4:12:d7:2a:2f:61:bc:
         67:93:c3:d3:c3:70:fe:06:41:2b:14:79:c3:60:bb:f1:de:e0:
         85:ed:5d:a8:63:68:99:dd:f0:5c:d5:ce:47:8b:42:8f:23:0c:
         c5:58:30:2d:2a:54:2f:43:fc:6b:e8:f0:14:c6:e1:3e:41:32:
         0a:3e:fc:f4:a9:e9:20:f5:d4:ec:49:9f:21:30:00:17:3d:1a:
         7b:af:fd:c4:c3:2f:cf:a9:63:90:12:6b:62:30:a6:6f:65:5d:
         1c:74:89:25:4f:c9:52:37:0d:d8:23:55:e3:f4:4d:ce:66:f8:
         de:2a:be:da:b6:c6:a0:52:27:a2:d4:99:83:0c:f6:ad:b5:08:
         cc:45:bc:da:4b:52:15:42:59:d0:bc:4b:5b:04:e1:11:4f:8d:
         2d:b4:c8:e1:83:88:0d:a8:57:1d:4f:9e:34:89:62:f6:f4:0d:
         3d:bb:ee:0f:85:ba:e5:a5:f8:c3:b5:db:26:42:2c:34:1d:fa:
         22:54:22:df:a2:f2:6c:1c:87:5d:53:ef:d1:b7:ec:29:59:3b:
         9e:f5:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:13 2025 by rpki-client