Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3230302e33352e34382e302f32302d3230203d3e203237363935.roa
File:                     3230302e33352e34382e302f32302d3230203d3e203237363935.roa (raw, json)
Hash identifier:          b6F4L/9FEZRyXdlquWI7TUSbE/qSNfFQFU6FgEYys+c=
Subject key identifier:   44:3C:BA:7D:10:68:0E:90:5B:28:CE:63:AE:CD:E6:3B:85:35:50:9E
Certificate issuer:       /CN=29144D8070C44852403F550F31DEC53EBF48A61F
Certificate serial:       10748C1518F4E8CC9038740CC63085BF2959AE0A
Authority key identifier: 29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3230302e33352e34382e302f32302d3230203d3e203237363935.roa
Signing time:             Tue 05 Mar 2024 18:02:54 +0000
ROA not before:           Tue 05 Mar 2024 17:57:54 +0000
ROA not after:            Tue 04 Mar 2025 18:02:54 +0000
asID:                     27695
IP address blocks:        200.35.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:74:8c:15:18:f4:e8:cc:90:38:74:0c:c6:30:85:bf:29:59:ae:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29144D8070C44852403F550F31DEC53EBF48A61F
        Validity
            Not Before: Mar  5 17:57:54 2024 GMT
            Not After : Mar  4 18:02:54 2025 GMT
        Subject: CN=443CBA7D10680E905B28CE63AECDE63B8535509E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ea:61:78:41:93:6f:ab:dc:32:25:b1:23:07:
                    ec:4d:e0:c1:43:65:97:5f:d3:c9:28:51:55:36:17:
                    97:49:36:a1:bd:68:14:45:d6:69:25:89:2f:fe:4a:
                    66:c7:95:a3:aa:b6:d3:e4:69:e9:a1:fd:9b:d9:f4:
                    08:d4:4b:2f:a9:48:a0:ba:80:4e:ac:dd:f1:5b:7a:
                    2d:22:06:41:b2:06:cc:70:94:f7:e3:5b:c8:a0:78:
                    11:cc:5a:87:25:d0:bb:d9:4e:cb:da:fa:33:c8:e2:
                    c8:a5:58:13:4f:10:39:62:bc:93:b8:aa:2f:88:a8:
                    b5:24:50:74:1a:aa:5b:dd:a3:d2:91:7a:76:f4:03:
                    ed:c4:93:2b:a0:6c:0f:6c:74:d4:3f:ba:73:1c:cf:
                    33:54:db:6d:5f:5d:fd:57:5e:e4:15:21:df:07:e4:
                    98:b3:7f:1d:a3:22:e3:d9:c1:98:26:b2:98:f6:67:
                    6c:55:a1:aa:37:3a:21:62:13:d6:08:05:47:a2:d4:
                    ea:8b:2a:b9:f2:72:b1:34:e1:35:a1:5a:ae:be:16:
                    ad:30:59:9b:26:36:71:31:1c:b8:6a:48:62:79:4d:
                    86:b8:f3:c3:b6:65:f9:1d:de:a2:05:4b:7a:56:50:
                    7e:c2:fe:e9:a8:a6:e2:cd:c0:ef:e1:ce:87:2b:70:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3C:BA:7D:10:68:0E:90:5B:28:CE:63:AE:CD:E6:3B:85:35:50:9E
            X509v3 Authority Key Identifier:
                keyid:29:14:4D:80:70:C4:48:52:40:3F:55:0F:31:DE:C5:3E:BF:48:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/29144D8070C44852403F550F31DEC53EBF48A61F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29144D8070C44852403F550F31DEC53EBF48A61F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7DCDB5A680D4F8ECB74DA17E05A8671B343B411D9977CADEB12C4191E4F28E03/0/3230302e33352e34382e302f32302d3230203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:bc:bc:ce:9d:fe:3f:38:9f:f8:bb:33:c9:5a:f8:be:b8:
         3f:95:d9:1d:c1:8b:22:c3:5e:98:de:a5:46:88:7b:c8:f0:ab:
         fe:e9:0e:8b:f4:c1:29:ba:a7:8f:72:6f:ea:40:de:c5:ef:b8:
         46:df:50:cc:f9:16:05:4b:3e:38:ea:9e:b9:55:0a:89:40:36:
         46:aa:89:4f:b5:66:27:b4:dc:94:20:b3:36:06:51:a4:24:10:
         01:28:10:aa:5a:d1:a1:86:e2:0c:49:33:b7:83:92:91:eb:11:
         d3:a9:29:51:cd:4b:69:6e:d2:31:13:fa:ea:d5:60:55:e3:c6:
         37:a9:67:f4:de:53:0c:08:4b:d4:58:3a:94:44:9b:f4:db:1e:
         e7:a1:b9:b4:1e:31:82:23:73:fa:1d:ad:f9:7b:8b:de:bb:9a:
         fa:bb:8d:6e:d5:47:80:c4:04:22:9d:19:7b:a1:7c:46:fa:ad:
         26:f7:31:2c:67:0c:87:1e:24:e9:94:78:3a:99:19:0f:96:51:
         93:bc:72:af:94:0d:eb:d5:15:b9:ed:24:26:69:35:34:7a:b0:
         f6:08:5f:8a:22:72:da:f8:77:96:9f:47:01:1e:e3:e0:ed:18:
         b8:dc:51:64:bf:bd:6b:68:9d:0f:cc:38:cf:2b:7d:1e:af:0b:
         26:f9:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:56:07 2024 by rpki-client on console-fra.rpki-client.org