Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3132382e302f32332d3234203d3e203238303839.roa
File:                     3230302e33352e3132382e302f32332d3234203d3e203238303839.roa (raw, json)
Hash identifier:          pCkJJulvpv51DjUH/v0qNXzRuNukzbL0fuY65jtYZAY=
Subject key identifier:   F6:B1:9F:BE:91:37:B7:65:B3:AE:94:CF:B4:4B:16:A6:24:25:B5:58
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       4CD314F7FAA05F09F45C4EB847C322AB91C4298A
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3132382e302f32332d3234203d3e203238303839.roa
Signing time:             Tue 04 Feb 2025 18:44:29 +0000
ROA not before:           Tue 04 Feb 2025 18:39:29 +0000
ROA not after:            Tue 03 Feb 2026 18:44:29 +0000
asID:                     28089
IP address blocks:        200.35.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d3:14:f7:fa:a0:5f:09:f4:5c:4e:b8:47:c3:22:ab:91:c4:29:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Feb  4 18:39:29 2025 GMT
            Not After : Feb  3 18:44:29 2026 GMT
        Subject: CN=F6B19FBE9137B765B3AE94CFB44B16A62425B558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:a7:78:19:28:f3:33:93:7b:35:1c:9d:05:
                    e6:1e:ce:87:8c:4c:49:06:9e:d8:83:ee:52:9c:08:
                    17:87:c0:67:13:4a:19:bc:8c:e3:df:41:35:48:76:
                    9d:7b:36:0f:b8:1e:94:c1:04:2d:16:3e:d1:8b:13:
                    75:cf:a2:6b:3b:41:26:03:21:a8:8e:42:b5:bd:95:
                    74:f2:ab:e6:02:97:c9:d8:fd:f7:12:a0:e2:68:d5:
                    f0:46:99:b9:ca:01:ed:2b:0a:ba:a7:35:f1:7b:5c:
                    4a:77:cb:06:41:51:eb:a2:e5:59:2e:eb:d8:9b:9c:
                    8d:b7:b7:65:12:e3:87:f3:6d:57:51:9a:0e:f1:f5:
                    35:1f:9a:48:0d:16:1f:e8:6c:35:ce:fd:75:2f:90:
                    60:9a:04:8e:e9:89:0b:62:fc:40:4a:b7:82:3c:f5:
                    e5:04:4f:91:e3:64:0f:c2:20:94:0d:e9:9a:2f:98:
                    da:c1:4e:91:21:24:43:e6:3a:cf:f1:15:39:8e:05:
                    1b:31:fc:6b:5b:b0:25:7e:91:f5:97:3e:01:f3:93:
                    fb:a1:7d:b0:a3:73:7d:4d:8a:a3:27:5f:66:2b:75:
                    b0:7c:67:8a:ea:8c:b4:3c:8f:3e:9c:df:f7:ff:99:
                    b5:4c:0d:60:b1:53:f9:ba:26:2f:d6:23:30:f3:e8:
                    e1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B1:9F:BE:91:37:B7:65:B3:AE:94:CF:B4:4B:16:A6:24:25:B5:58
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3132382e302f32332d3234203d3e203238303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:b8:aa:d9:6f:36:4c:de:df:cf:61:9e:d4:51:44:f3:cb:3d:
         3b:51:5a:56:61:d9:70:3e:0f:d1:ca:8a:ec:cf:6e:64:37:a5:
         c0:6c:8e:9e:d9:7c:04:a1:1e:08:8c:30:c9:2a:0d:31:d2:90:
         9f:0b:b3:39:6e:da:60:80:1e:0d:d0:04:df:29:37:ff:a4:e4:
         54:32:f9:bd:c9:9e:8c:c7:87:47:74:2a:7f:09:40:41:1f:9b:
         e8:48:a0:c1:bc:df:38:4d:81:5b:cd:e2:03:44:63:60:4a:a6:
         36:5d:22:44:39:5a:68:1e:6b:b1:77:f1:fc:8e:12:1f:3f:f9:
         17:97:15:fe:33:3f:cc:f1:3b:24:f5:10:59:8f:98:3b:43:60:
         85:61:19:4e:25:ad:a7:a8:d0:f6:33:81:4c:ce:a8:ef:18:ac:
         47:66:83:2b:31:c0:fa:61:82:19:02:08:b8:44:a2:7f:f2:d0:
         dc:20:6c:c6:57:f8:a1:5e:05:c1:15:a2:df:bc:04:19:8f:07:
         76:8b:c1:9d:90:25:ff:8d:91:05:04:dd:e2:cd:bc:f9:5b:ca:
         71:a5:7d:b9:32:c6:54:68:bf:af:ef:73:52:f1:5c:78:bb:46:
         18:96:cd:4a:96:82:aa:a9:1e:e0:9a:6c:cd:b7:e5:1a:57:05:
         e7:50:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:54 2025 by rpki-client