Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134302e302f32332d3234203d3e2038303438.roa
File:                     3230302e33352e3134302e302f32332d3234203d3e2038303438.roa (raw, json)
Hash identifier:          tUuOGJl+/KpYjqGF4Ds0KDCVXRssBRu2l78XsfhXex8=
Subject key identifier:   4F:2C:D5:86:C2:EC:5A:52:86:42:3F:44:1D:BD:6E:16:3F:08:E5:03
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       4D93201672920BF61F9FE421B30A877C8A63900B
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134302e302f32332d3234203d3e2038303438.roa
Signing time:             Tue 05 Mar 2024 18:04:55 +0000
ROA not before:           Tue 05 Mar 2024 17:59:55 +0000
ROA not after:            Tue 04 Mar 2025 18:04:55 +0000
asID:                     8048
IP address blocks:        200.35.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:93:20:16:72:92:0b:f6:1f:9f:e4:21:b3:0a:87:7c:8a:63:90:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Mar  5 17:59:55 2024 GMT
            Not After : Mar  4 18:04:55 2025 GMT
        Subject: CN=4F2CD586C2EC5A5286423F441DBD6E163F08E503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:80:60:a8:8e:62:dd:fb:c0:e2:a3:63:9d:
                    79:65:0e:34:be:b7:69:b7:ac:3d:f2:82:bd:65:0a:
                    ab:2a:f5:b5:56:c8:07:ae:8a:1c:c0:dc:23:c6:04:
                    1e:d1:f7:48:ba:5e:dd:42:2d:7a:6d:0c:ef:16:3c:
                    f7:8b:26:ba:61:e4:9d:aa:86:1f:ad:ec:7c:ce:2b:
                    c2:2b:be:42:fb:64:02:7f:b6:6d:1b:26:d8:6c:dd:
                    75:46:59:be:d5:ba:19:8e:1a:7f:9f:13:fb:be:7c:
                    53:64:01:b6:d9:0e:07:bb:e4:0f:5a:ca:18:7e:ff:
                    ec:c8:94:a1:c9:bf:a7:96:40:f1:04:bf:3e:86:af:
                    1d:b1:37:c2:c0:3d:27:12:94:4c:96:8a:5c:25:33:
                    cc:37:86:6d:31:a5:38:95:3c:37:5c:3e:c1:79:c9:
                    f4:da:d3:59:38:09:7c:1c:20:9c:b2:43:ec:15:c3:
                    c2:fd:a4:a0:52:8e:d4:65:bf:05:cc:4b:36:98:cd:
                    bb:92:92:47:11:62:96:1b:65:42:df:21:61:c2:9a:
                    3a:bf:99:d1:a8:d7:56:06:ce:69:64:ff:71:12:72:
                    54:ba:6e:37:1e:ad:d3:0f:11:4d:9b:eb:ab:4c:32:
                    6f:41:4f:ec:04:5f:fc:a2:c3:73:94:a3:5f:4a:37:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2C:D5:86:C2:EC:5A:52:86:42:3F:44:1D:BD:6E:16:3F:08:E5:03
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134302e302f32332d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:fa:7a:8c:f0:fb:1f:a8:95:92:38:fb:ec:95:f8:cd:16:7d:
         18:c4:07:2c:fb:26:2a:34:c7:e1:52:2f:64:1c:fb:27:bf:63:
         4e:db:33:f2:f0:02:50:39:0e:1c:2f:54:52:53:d7:c4:a7:ac:
         5b:9a:c9:41:48:19:8c:e8:e7:45:c2:68:a1:6e:05:63:aa:01:
         49:bc:f5:76:ed:cc:ec:78:10:bb:f8:ee:b9:1f:80:ee:75:0b:
         30:e6:41:9b:de:b7:15:11:4c:b2:fe:fc:bf:fa:ce:32:81:2a:
         99:82:0e:a2:75:c5:dd:74:d9:84:8f:e2:d6:81:66:53:36:0b:
         8d:38:57:c2:0f:ad:3f:ba:39:6c:b6:6f:5c:b2:c0:d4:38:ee:
         ae:72:72:ce:c0:07:2f:9b:a5:00:5c:9a:94:6c:df:dd:1b:90:
         02:49:43:46:b6:30:49:72:5a:1c:b8:23:02:1a:1c:e0:05:9c:
         6a:9b:05:a6:19:f1:50:01:95:59:78:39:86:0a:ae:6a:d8:f4:
         0d:40:a9:b7:1e:61:92:39:6b:70:32:81:4c:06:c8:3b:f5:e0:
         ba:62:0e:5b:a7:e9:0f:42:66:03:76:5e:eb:09:00:d6:3c:5b:
         72:94:75:ec:17:95:a7:46:15:78:81:85:0f:c5:ce:1d:65:16:
         ee:11:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org