Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134302e302f32332d3234203d3e2038303438.roa
File:                     3230302e33352e3134302e302f32332d3234203d3e2038303438.roa (raw, json)
Hash identifier:          35Hdmes5DILIOonYWfhy4xq07LGyI3QnOuf0H7OxL0Q=
Subject key identifier:   AB:6F:7E:68:59:ED:56:0B:17:C0:51:A8:58:F3:95:9B:3E:41:18:33
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       38E178DE8E353B238428E11B3B70B2BDF62C998E
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134302e302f32332d3234203d3e2038303438.roa
Signing time:             Tue 04 Feb 2025 18:44:29 +0000
ROA not before:           Tue 04 Feb 2025 18:39:29 +0000
ROA not after:            Tue 03 Feb 2026 18:44:29 +0000
asID:                     8048
IP address blocks:        200.35.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e1:78:de:8e:35:3b:23:84:28:e1:1b:3b:70:b2:bd:f6:2c:99:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Feb  4 18:39:29 2025 GMT
            Not After : Feb  3 18:44:29 2026 GMT
        Subject: CN=AB6F7E6859ED560B17C051A858F3959B3E411833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:24:7c:e4:9c:6b:b3:ff:80:53:14:1b:fb:
                    97:5d:17:0f:3f:c6:e5:1d:9f:f3:25:43:0c:8c:7e:
                    84:a6:4b:a7:05:75:41:7a:21:1a:54:ae:86:ae:59:
                    01:4b:c7:f6:2b:53:dd:d0:80:34:2b:1e:4e:3d:e7:
                    b2:03:1d:1d:6c:ca:d4:5a:30:c2:92:b0:5d:3a:d6:
                    d1:df:d9:6f:c7:6c:c2:88:d9:ea:29:5c:6f:c7:cb:
                    21:f1:c8:ec:0e:7a:03:6b:53:f7:cb:fe:8b:7b:9a:
                    af:c8:28:47:2d:4e:68:95:02:3d:8b:fc:52:04:5c:
                    2b:93:31:36:a7:99:42:39:8c:07:92:42:1d:89:6b:
                    85:f1:6d:0c:4d:17:da:5a:c5:5e:bd:41:17:f8:e9:
                    e7:4c:3b:c7:a9:19:ec:84:b6:41:69:78:a8:77:c4:
                    e4:80:cf:81:67:6c:67:02:59:c4:66:69:5d:b6:90:
                    2d:27:b2:e5:3b:ce:28:d8:33:05:6e:e5:fc:93:99:
                    e1:9f:45:32:ed:f3:d2:e6:e5:09:9a:f3:9c:e2:79:
                    b1:c6:76:1b:7f:9d:56:f4:02:9e:76:a9:38:fb:97:
                    81:1c:98:e7:86:6f:4d:4f:a4:d4:32:e7:b2:56:57:
                    3f:05:72:00:a7:a3:d1:51:b9:be:7d:5a:fe:de:61:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6F:7E:68:59:ED:56:0B:17:C0:51:A8:58:F3:95:9B:3E:41:18:33
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134302e302f32332d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:c4:5e:ab:27:a3:07:98:de:ca:56:08:e2:b8:73:18:92:8c:
         2e:1f:87:b8:7d:19:f5:83:4b:bf:43:cc:49:ce:44:96:9d:e0:
         c6:86:7c:bf:d4:35:fd:c2:89:f6:d8:39:b5:0b:f7:c3:bd:a8:
         3f:97:ad:49:ab:af:be:bb:24:a4:8f:8c:96:1f:d2:18:1a:ea:
         c9:f1:f9:18:b5:4f:da:20:94:e4:80:b3:cb:8f:25:d2:e5:8c:
         b8:c4:31:10:76:7e:d2:ec:db:00:ec:7d:c5:52:45:c3:2f:00:
         0c:2c:c5:e6:4f:4b:f9:5c:47:6a:ce:e7:af:77:7e:9f:69:d2:
         50:4f:54:b5:f5:e5:75:e6:35:1a:cc:cb:2e:98:f4:fe:e6:ff:
         60:88:86:bd:fc:04:56:2a:e3:44:40:67:ab:5b:c3:80:79:90:
         4e:05:81:a9:29:27:b9:ad:e1:ab:e9:94:fb:c7:5f:fd:c3:3c:
         f1:b4:ca:76:8a:5e:a1:4e:4b:62:af:91:c6:26:d9:6c:b4:26:
         61:0e:7e:ec:d4:b6:19:be:d0:12:b1:2c:8e:58:29:d1:9f:85:
         fd:59:cf:ee:b0:8f:bf:8b:9f:75:ec:1d:c4:c8:9a:19:95:a6:
         56:3e:ba:4a:a5:25:5e:75:fe:15:13:58:ec:8d:6e:84:96:57:
         ce:33:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:30 2025 by rpki-client