Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133322e302f32332d3234203d3e203238303839.roa
File:                     3230302e33352e3133322e302f32332d3234203d3e203238303839.roa (raw, json)
Hash identifier:          K3njgUUoxzrFs5Espf0Yu5w/WmsnIpwZ3uWUu/026/4=
Subject key identifier:   3E:69:5D:29:06:9D:B1:B7:36:96:4C:55:70:63:26:4C:3D:AC:E9:D4
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       28129BF80016293C502FF0FB9DF72E9148331D96
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133322e302f32332d3234203d3e203238303839.roa
Signing time:             Tue 05 Mar 2024 18:04:55 +0000
ROA not before:           Tue 05 Mar 2024 17:59:55 +0000
ROA not after:            Tue 04 Mar 2025 18:04:55 +0000
asID:                     28089
IP address blocks:        200.35.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:12:9b:f8:00:16:29:3c:50:2f:f0:fb:9d:f7:2e:91:48:33:1d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Mar  5 17:59:55 2024 GMT
            Not After : Mar  4 18:04:55 2025 GMT
        Subject: CN=3E695D29069DB1B736964C557063264C3DACE9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a8:17:2d:e4:c3:fa:38:98:32:26:76:18:1e:
                    f0:40:f8:a1:75:11:90:ce:9f:6a:4b:65:39:f8:dc:
                    83:72:4f:e9:b7:fd:80:a5:51:6d:1d:1c:1b:8e:8d:
                    63:f7:3d:d4:21:75:8f:e7:01:81:33:0d:e5:9e:8d:
                    ba:ef:e2:99:e6:47:57:6f:ea:17:4e:60:ad:21:ea:
                    ba:74:e6:81:b7:c4:53:bb:d7:a5:8d:ff:e1:5e:9a:
                    75:b7:ec:a2:1f:33:79:e6:6d:14:b5:92:59:14:2f:
                    e1:13:fd:40:64:34:f4:71:bd:15:9f:d4:fe:d2:fe:
                    36:95:c0:86:df:20:61:d5:7e:9c:21:57:a5:af:e2:
                    0f:40:ed:1a:61:0b:6f:06:8f:d3:fb:77:4d:f5:f4:
                    e2:e3:66:86:a3:07:44:27:a5:f5:fc:02:f0:dc:45:
                    98:d7:7c:da:fa:fa:af:56:f8:3b:3c:89:ba:c8:cf:
                    41:24:de:b3:3a:7e:c4:2d:50:6e:6e:51:83:a8:8b:
                    8f:6a:ac:42:fa:92:70:c8:01:da:3d:c1:c2:9b:42:
                    50:f6:2c:cd:12:30:eb:34:b2:f5:bf:ca:07:c7:ac:
                    8d:aa:e6:b8:76:bb:b1:6d:28:2b:cd:67:15:24:33:
                    fe:6b:bb:34:e3:87:7c:26:8a:be:e6:c8:2a:e7:44:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:69:5D:29:06:9D:B1:B7:36:96:4C:55:70:63:26:4C:3D:AC:E9:D4
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133322e302f32332d3234203d3e203238303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:b5:13:b6:8b:e6:cb:fa:63:0d:02:23:5a:88:e8:55:e5:0b:
         72:86:32:7f:e4:5d:80:49:79:3d:af:31:bd:2d:51:80:d6:be:
         3e:7e:ef:15:81:b1:48:76:d4:27:38:64:b4:7d:2f:61:a1:8e:
         83:31:20:b1:d7:d6:e2:ef:c0:84:46:6a:10:87:3f:ae:cd:cd:
         3c:6d:4e:a8:71:6c:57:c7:0a:1d:bc:a2:9a:60:66:e2:14:7a:
         f4:e6:b6:20:31:e1:4a:49:6b:ef:20:63:84:55:ad:2f:97:08:
         44:57:1e:86:56:b5:2b:db:6b:7b:b8:2c:a9:46:81:eb:fd:78:
         b7:7c:19:b9:8f:ad:29:25:7a:a7:f9:3f:1f:0d:a1:3b:d5:a4:
         50:74:d8:bc:aa:c3:af:3c:c8:e9:4f:d1:63:c3:e9:13:5a:79:
         02:f6:20:ef:e1:21:49:d6:37:c6:c2:04:02:f9:5b:51:8f:e3:
         1f:3e:38:01:3d:65:63:fd:32:67:72:43:d3:34:46:11:71:17:
         fc:57:bb:98:e6:ad:12:87:a1:f2:19:3c:7f:bd:cc:b8:4d:98:
         f4:d2:47:59:af:f6:44:51:60:3e:c5:de:87:d8:a4:f0:41:14:
         a6:bc:ef:5c:97:08:9f:44:a0:84:68:87:3f:bd:a8:2c:d1:07:
         a9:de:fa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org