Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3132382e302f32332d3234203d3e203238303839.roa
File:                     3230302e33352e3132382e302f32332d3234203d3e203238303839.roa (raw, json)
Hash identifier:          3RYcJymLzgoC4Xroel/EKaNTNSnCZOCjd5s9aS/H5tw=
Subject key identifier:   58:6F:55:62:7B:3C:40:BA:D1:8D:E2:D9:F5:22:2A:59:3D:E1:AC:23
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       0A86997BDB92EEDA7BAB55473F9F85F4D1B2E630
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3132382e302f32332d3234203d3e203238303839.roa
Signing time:             Tue 05 Mar 2024 18:04:54 +0000
ROA not before:           Tue 05 Mar 2024 17:59:54 +0000
ROA not after:            Tue 04 Mar 2025 18:04:54 +0000
asID:                     28089
IP address blocks:        200.35.128.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:86:99:7b:db:92:ee:da:7b:ab:55:47:3f:9f:85:f4:d1:b2:e6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Mar  5 17:59:54 2024 GMT
            Not After : Mar  4 18:04:54 2025 GMT
        Subject: CN=586F55627B3C40BAD18DE2D9F5222A593DE1AC23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:95:ea:bf:0d:95:0a:88:f9:39:c7:c7:57:
                    81:f4:d7:5b:7c:2a:b5:97:47:6b:79:d5:0f:54:0f:
                    7e:8d:d1:0c:8f:6a:70:e9:2e:68:46:63:91:04:87:
                    73:5e:42:29:92:6c:a6:76:a3:1b:76:8c:92:e3:3b:
                    cf:4b:0c:43:31:59:f3:c9:28:20:30:d4:0a:b7:a0:
                    09:3a:96:e5:4a:20:0a:22:4c:5b:4d:46:bd:9e:4d:
                    55:19:12:1b:a6:8e:07:ca:c8:d7:88:8f:cc:f0:1e:
                    59:22:70:dd:3d:4b:22:d1:63:21:fc:14:9e:79:0a:
                    81:34:f7:cd:ba:8f:29:7f:51:7b:95:92:ea:7e:19:
                    4d:41:f2:c0:53:0b:c7:a3:6a:cf:16:36:e6:b1:1a:
                    70:67:74:64:a4:71:5a:34:c1:64:d2:31:e7:e5:e4:
                    96:b6:d1:d4:aa:07:ce:a1:fe:2a:5c:ed:f7:1e:64:
                    1c:f2:5b:b8:6b:2e:a1:98:47:72:ca:b1:61:56:27:
                    9c:ca:a7:09:e9:b9:3a:b0:ae:c8:8f:7e:9b:e1:0c:
                    3d:54:e3:f8:86:bd:d7:50:a9:d7:69:f3:3c:3f:11:
                    cb:28:b8:ac:61:76:04:d2:98:cf:e1:d7:2c:b8:45:
                    04:5e:86:04:0a:fb:86:17:40:6b:5c:74:1b:72:64:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6F:55:62:7B:3C:40:BA:D1:8D:E2:D9:F5:22:2A:59:3D:E1:AC:23
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3132382e302f32332d3234203d3e203238303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:6b:5c:d8:c2:9a:65:95:6d:f8:0c:93:a8:52:b2:b1:4c:93:
         a8:72:25:cb:d1:3e:4b:d1:e2:42:c7:5c:19:6c:e2:c0:db:9a:
         0f:3f:82:5e:ef:c4:42:a7:1f:51:fc:70:36:12:06:62:32:62:
         e0:a7:8e:52:d4:6c:ac:8a:f9:47:07:fd:4c:5b:5b:7a:7f:da:
         77:c9:5b:c7:2d:ac:e9:f3:5e:65:16:a4:4c:15:a9:60:95:92:
         35:df:6d:fa:8b:f6:54:dc:4a:fa:72:c7:08:50:a1:62:d1:a2:
         cd:f3:a6:ee:0d:1f:bc:dc:99:b5:19:86:dd:d1:fa:85:d2:7e:
         11:fb:70:ed:30:aa:f8:f7:58:71:48:83:ec:d9:c8:7c:1f:3a:
         14:85:3b:4f:bc:0b:ff:16:2a:11:22:59:b3:ed:57:b3:15:27:
         84:07:ba:85:16:72:81:27:59:2a:92:8b:46:28:41:21:33:4f:
         f3:50:15:21:44:95:0f:74:98:eb:32:2e:a1:7e:58:e9:5d:de:
         4d:4c:ea:bc:66:e1:06:b9:c6:2f:ae:e7:dc:f1:df:8f:3d:36:
         b7:be:47:8d:3f:d1:a0:34:00:2c:d6:fc:f0:c2:8c:c4:b8:4d:
         27:5f:ea:5e:c0:17:ca:b6:7d:32:25:76:e3:5d:1e:82:82:ff:
         b4:a6:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org