Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/3230302e31322e3139322e302f32342d3234203d3e203532323933.roa
File:                     3230302e31322e3139322e302f32342d3234203d3e203532323933.roa (raw, json)
Hash identifier:          4rJ90juFtA7jBoYxbipzbuTMwSm9yL5jjp6/EEhtrn0=
Subject key identifier:   7A:31:95:D9:53:C9:74:92:60:6B:00:D9:3C:B0:17:BC:D2:00:E3:90
Certificate issuer:       /CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
Certificate serial:       0AE7D3435A82426174BC0DF0CEB3039A907A1ED7
Authority key identifier: 35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/3230302e31322e3139322e302f32342d3234203d3e203532323933.roa
Signing time:             Tue 04 Feb 2025 20:01:33 +0000
ROA not before:           Tue 04 Feb 2025 19:56:33 +0000
ROA not after:            Tue 03 Feb 2026 20:01:33 +0000
asID:                     52293
IP address blocks:        200.12.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e7:d3:43:5a:82:42:61:74:bc:0d:f0:ce:b3:03:9a:90:7a:1e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
        Validity
            Not Before: Feb  4 19:56:33 2025 GMT
            Not After : Feb  3 20:01:33 2026 GMT
        Subject: CN=7A3195D953C97492606B00D93CB017BCD200E390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:94:da:77:0a:02:9e:fe:78:94:a1:be:ab:
                    c0:85:9c:a6:5b:8e:97:84:56:6f:36:36:9d:48:d1:
                    c8:04:7f:d0:39:51:3f:08:cb:f2:e4:fa:cb:89:8d:
                    92:b3:1c:ee:1f:b3:3d:be:90:50:e4:02:bf:b0:3f:
                    a8:50:4b:d5:0d:ba:c0:07:59:32:5d:dc:21:f0:46:
                    fc:c4:71:bb:de:cb:64:95:e4:66:76:35:b4:ea:ea:
                    a6:a2:4a:c0:da:02:5c:c0:76:78:7a:58:3e:85:0c:
                    3d:42:af:1f:ed:e7:78:93:c9:21:e3:f5:d1:10:19:
                    bd:77:ef:10:bf:eb:7f:45:4a:44:61:28:78:ca:a4:
                    39:68:10:ef:ac:d4:10:31:ca:90:cf:3c:ec:94:7d:
                    c4:7b:e7:36:9c:4e:05:7f:a2:de:0b:20:45:20:76:
                    9d:0c:fc:03:04:09:56:19:bd:fd:f5:1a:1b:f9:89:
                    b6:be:ba:d0:7e:f1:8b:ec:3b:13:13:b1:98:56:b1:
                    4d:e5:fd:02:77:89:1e:b4:75:3a:73:89:98:16:77:
                    1f:19:03:e2:2c:3e:ad:0a:16:b2:56:b9:76:38:8a:
                    a2:62:50:bc:27:b8:a8:12:b3:23:17:99:bd:ac:c9:
                    2e:ff:62:11:b2:65:27:78:9f:74:33:df:46:46:0d:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:31:95:D9:53:C9:74:92:60:6B:00:D9:3C:B0:17:BC:D2:00:E3:90
            X509v3 Authority Key Identifier:
                keyid:35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/3230302e31322e3139322e302f32342d3234203d3e203532323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:56:0f:45:25:9c:a2:98:55:bc:63:ce:71:ce:d3:6e:f4:
         e6:d2:ea:b1:9f:33:f3:c6:0b:fe:f3:32:82:3e:2e:ff:e8:e7:
         aa:03:e2:58:40:0e:89:c2:07:73:d8:0d:73:4a:1d:df:4a:c7:
         21:88:30:1f:09:53:03:86:dd:8f:a3:74:91:c0:b1:76:a1:c4:
         26:44:56:b7:b1:be:b6:50:c0:45:d9:ac:fe:ec:25:bb:cf:45:
         c7:2c:6a:70:95:18:0e:3e:3f:a8:58:7b:f5:42:35:24:92:0b:
         21:7d:5c:74:03:ac:7c:b0:51:47:8a:36:d8:12:53:58:12:07:
         16:6d:ec:8e:b0:11:83:8b:25:8f:ae:aa:43:c0:10:d9:a8:45:
         0f:b2:70:e1:2f:e9:51:fd:85:42:01:56:24:8e:4f:7f:96:64:
         52:37:89:d6:68:1c:99:1f:ff:f6:b8:dc:0d:03:b2:c7:0f:63:
         3a:09:5d:4b:46:33:dd:6b:e5:63:6d:0b:16:37:76:d7:1c:92:
         fb:3e:ae:f7:34:e1:8a:f8:db:c4:41:67:f6:15:a2:78:82:ee:
         14:a8:52:a5:66:78:c2:79:76:9d:5a:b2:69:67:c5:e4:5b:d2:
         e4:43:a5:82:65:72:4f:1d:95:d6:5b:6d:a6:c3:d1:67:65:22:
         c1:cf:66:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:55 2025 by rpki-client