Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/3230302e31322e3139322e302f32342d3234203d3e203532323933.roa
File:                     3230302e31322e3139322e302f32342d3234203d3e203532323933.roa (raw, json)
Hash identifier:          6VL0s51b27jyTSsjaAQZOe62hmtKlD/oGqJJzzowjRU=
Subject key identifier:   54:44:2C:81:57:83:AF:48:7C:0F:CA:40:CC:7E:71:31:9B:F6:27:00
Certificate issuer:       /CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
Certificate serial:       08B39AD1782999CA527DF5823F2B30DB7D0AD46C
Authority key identifier: 35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/3230302e31322e3139322e302f32342d3234203d3e203532323933.roa
Signing time:             Tue 05 Mar 2024 18:05:39 +0000
ROA not before:           Tue 05 Mar 2024 18:00:39 +0000
ROA not after:            Tue 04 Mar 2025 18:05:39 +0000
asID:                     52293
IP address blocks:        200.12.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b3:9a:d1:78:29:99:ca:52:7d:f5:82:3f:2b:30:db:7d:0a:d4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
        Validity
            Not Before: Mar  5 18:00:39 2024 GMT
            Not After : Mar  4 18:05:39 2025 GMT
        Subject: CN=54442C815783AF487C0FCA40CC7E71319BF62700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:cc:31:99:10:44:17:93:89:7e:77:2d:c2:
                    d4:29:7d:fe:15:bd:63:e8:8a:99:14:53:bd:ef:2b:
                    03:79:39:ea:38:7a:88:5d:fb:40:ed:f3:89:30:16:
                    4a:c6:e5:41:37:c1:eb:2a:81:c8:05:5b:2c:17:b6:
                    23:4a:ce:41:87:ec:98:3b:36:e9:bd:4d:5d:cb:f2:
                    3d:bb:54:e0:55:dc:7f:fe:f9:a6:48:1c:d5:f9:4f:
                    69:a3:2e:62:5f:c1:73:25:06:93:06:9c:08:47:07:
                    ea:ea:69:21:2e:f3:61:86:07:41:70:ca:78:a5:58:
                    e5:af:04:b0:02:e0:44:16:53:17:ab:b8:38:09:ec:
                    62:60:48:73:18:6b:3a:04:71:04:ad:ed:1f:a5:95:
                    f5:80:ac:7f:a4:6f:8c:f5:99:47:98:ac:9b:50:71:
                    a8:cb:b7:19:10:55:ea:83:3a:35:4a:fb:31:32:a0:
                    3c:6d:ec:d1:fd:20:19:65:7b:e3:6e:28:e8:02:25:
                    96:46:f3:52:38:39:2a:2e:88:c4:48:63:29:ac:f2:
                    c2:f0:77:dd:05:86:fb:8c:b6:89:08:21:39:1e:56:
                    6c:e8:09:e8:e8:32:73:32:14:a6:f7:41:42:b0:ba:
                    99:70:0b:a2:09:3d:e6:8e:57:08:f0:da:7a:bc:3d:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:2C:81:57:83:AF:48:7C:0F:CA:40:CC:7E:71:31:9B:F6:27:00
            X509v3 Authority Key Identifier:
                keyid:35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/3230302e31322e3139322e302f32342d3234203d3e203532323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:85:35:c4:a8:78:33:f1:87:f3:90:95:92:b2:fc:3f:6c:01:
         86:f8:07:fc:fa:1d:2f:ea:ee:f1:db:08:ee:09:d3:fd:58:39:
         47:4d:d1:7a:65:d8:87:54:1f:cb:4c:3b:34:91:02:04:4f:85:
         ab:77:39:2a:a7:14:92:b5:cf:0f:93:6a:84:fa:e2:98:91:a6:
         ed:93:f7:ec:96:ea:07:2c:5a:80:17:5a:e2:0f:61:20:4b:e9:
         cc:ee:65:37:98:77:93:6c:83:1d:d3:8f:39:ee:f5:ac:c0:96:
         23:a9:8f:8f:87:ca:98:e7:2e:ca:17:6a:a9:5f:1f:56:d5:3c:
         b9:a7:7e:64:4e:74:5f:89:39:7f:a4:09:d5:bf:78:74:8d:04:
         b0:69:64:d7:ce:93:bf:11:10:5c:1b:72:bd:04:79:4a:bc:f6:
         35:c3:d9:4b:2a:11:13:ba:ff:f6:e4:bb:bf:30:30:5a:56:0c:
         35:50:f3:eb:9d:f2:0f:a3:ae:e2:e3:bf:32:a4:b4:13:0e:89:
         bd:75:98:27:d4:0b:4e:1e:ae:18:ad:7b:03:25:cf:bd:c0:14:
         68:b8:4c:26:0b:dc:6c:6d:89:8e:74:63:79:c4:8d:81:e6:d6:
         c3:9f:7b:3c:e3:87:9c:47:f4:0d:7c:6b:e6:91:d3:c9:fd:ea:
         ed:9f:c4:6a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCLOa0XgpmcpSffWCPysw230K1GwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVFNUJCNjBGNDVEQTdBNUVCODM5OEUxMTlCRjNFOUMy
RUE1OTRCMjAeFw0yNDAzMDUxODAwMzlaFw0yNTAzMDQxODA1MzlaMDMxMTAvBgNV
BAMTKDU0NDQyQzgxNTc4M0FGNDg3QzBGQ0E0MENDN0U3MTMxOUJGNjI3MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgC8wxmRBEF5OJfnctwtQpff4V
vWPoipkUU73vKwN5Oeo4eohd+0Dt84kwFkrG5UE3wesqgcgFWywXtiNKzkGH7Jg7
Num9TV3L8j27VOBV3H/++aZIHNX5T2mjLmJfwXMlBpMGnAhHB+rqaSEu82GGB0Fw
ynilWOWvBLAC4EQWUxeruDgJ7GJgSHMYazoEcQSt7R+llfWArH+kb4z1mUeYrJtQ
cajLtxkQVeqDOjVK+zEyoDxt7NH9IBlle+NuKOgCJZZG81I4OSouiMRIYyms8sLw
d90FhvuMtokIITkeVmzoCejoMnMyFKb3QUKwuplwC6IJPeaOVwjw2nq8PZiRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUVEQsgVeDr0h8D8pAzH5xMZv2JwAwHwYDVR0j
BBgwFoAUNeW7YPRdp6Xrg5jhGb8+nC6llLIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTg3Nzg5NjIwQUVGMTE3MUM4NUFFQkE0MUZFRkRCMkEz
QjY4QTY1QkUyOTAyQ0U5MzNCNEE4MzkxMUM4QTIxLzAvMzVFNUJCNjBGNDVEQTdB
NUVCODM5OEUxMTlCRjNFOUMyRUE1OTRCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNUU1QkI2MEY0NURBN0E1RUI4
Mzk4RTExOUJGM0U5QzJFQTU5NEIyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E4Nzc4OTYyMEFFRjExNzFDODVBRUJBNDFGRUZEQjJBM0I2OEE2NUJF
MjkwMkNFOTMzQjRBODM5MTFDOEEyMS8wLzMyMzAzMDJlMzEzMjJlMzEzOTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgMwDAN
BgkqhkiG9w0BAQsFAAOCAQEAcYU1xKh4M/GH85CVkrL8P2wBhvgH/PodL+ru8dsI
7gnT/Vg5R03RemXYh1Qfy0w7NJECBE+Fq3c5KqcUkrXPD5NqhPrimJGm7ZP37Jbq
ByxagBda4g9hIEvpzO5lN5h3k2yDHdOPOe71rMCWI6mPj4fKmOcuyhdqqV8fVtU8
uad+ZE50X4k5f6QJ1b94dI0EsGlk186TvxEQXBtyvQR5Srz2NcPZSyoRE7r/9uS7
vzAwWlYMNVDz653yD6Ou4uO/MqS0Ew6JvXWYJ9QLTh6uGK17AyXPvcAUaLhMJgvc
bG2JjnRjecSNgebWw597POOHnEf0DXxr5pHTyf3q7Z/Eag==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org