Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134322e302f32342d3234203d3e2038303438.roa
File:                     3230302e33352e3134322e302f32342d3234203d3e2038303438.roa (raw, json)
Hash identifier:          UC9Gm/M5af9TkyBKAfPV9kDRj4fR1C/tYApBNSI9rvQ=
Subject key identifier:   03:B4:34:13:61:07:9C:11:3E:F2:8C:CE:35:AA:A6:61:B5:41:D8:F7
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       4C85CAE3101757AACD9D88924CB146806FA3675E
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134322e302f32342d3234203d3e2038303438.roa
Signing time:             Tue 05 Mar 2024 18:04:55 +0000
ROA not before:           Tue 05 Mar 2024 17:59:55 +0000
ROA not after:            Tue 04 Mar 2025 18:04:55 +0000
asID:                     8048
IP address blocks:        200.35.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:85:ca:e3:10:17:57:aa:cd:9d:88:92:4c:b1:46:80:6f:a3:67:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Mar  5 17:59:55 2024 GMT
            Not After : Mar  4 18:04:55 2025 GMT
        Subject: CN=03B4341361079C113EF28CCE35AAA661B541D8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:58:7f:e1:a3:34:98:8d:f2:73:93:5e:0c:
                    97:62:f3:5e:2c:f3:4e:eb:9b:4f:0f:02:be:e2:3c:
                    ed:a8:46:2b:b3:72:87:57:b4:d8:c5:59:5f:f3:f4:
                    40:c7:a9:09:fd:62:02:53:e5:ee:b1:48:5f:44:e9:
                    db:d3:09:7e:54:76:2b:18:65:01:d8:ab:2e:ee:2a:
                    35:dd:88:a5:63:47:e6:ea:ab:a7:99:e6:4e:5e:58:
                    51:3a:26:14:ab:96:b9:ab:07:3e:18:49:65:7b:fe:
                    f2:7c:de:c2:d9:37:85:da:62:66:7b:42:1b:6c:f3:
                    d3:a0:f0:0f:6e:71:96:be:a4:7f:a1:30:f6:3c:39:
                    39:06:e1:1a:ae:21:80:53:7f:68:93:28:4b:7f:1b:
                    14:c3:4e:63:54:9f:25:2b:5d:96:02:a9:72:28:b3:
                    34:c0:67:58:57:5b:4a:a0:67:3c:62:3d:95:7a:55:
                    00:ac:76:29:39:63:92:78:8b:e2:bd:dd:69:2d:90:
                    57:76:39:92:8c:33:e8:10:ba:ca:f4:80:78:98:ef:
                    a3:d7:d4:71:c0:40:3e:57:df:63:cf:d3:59:86:a5:
                    14:2a:77:ea:46:dc:56:41:fb:e4:fa:dc:5b:a1:8b:
                    ca:2e:4d:e0:ac:aa:a0:2b:0f:e9:50:cf:70:7d:13:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B4:34:13:61:07:9C:11:3E:F2:8C:CE:35:AA:A6:61:B5:41:D8:F7
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134322e302f32342d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b8:2a:3f:94:a6:54:ad:22:1a:07:42:64:76:6c:a9:0a:a1:
         70:38:b4:87:d2:58:c4:67:71:ec:d6:da:c9:65:5c:f1:79:91:
         05:e2:fa:ee:80:89:e0:81:02:b9:9d:aa:7f:96:e2:7e:21:9f:
         34:78:0f:77:eb:f2:00:25:3d:31:4b:f7:91:e7:60:f9:b4:bd:
         72:f5:72:1a:b8:09:f2:8c:2f:0d:58:d1:68:8d:fa:e7:60:5c:
         f3:1d:aa:be:d1:f5:1c:d1:d4:ce:fa:81:7a:2d:f2:97:26:8b:
         7f:21:b5:a2:9e:cd:ea:5c:8f:49:ca:6c:77:ff:4e:0f:1a:7e:
         b3:88:9f:11:a7:66:33:a2:0b:2d:bb:ab:39:6a:ca:6b:2f:37:
         da:03:1d:1b:9e:3e:cb:ac:5a:30:da:a0:b0:b3:f1:73:0e:32:
         f4:04:a5:b8:8a:f5:d4:61:ff:b6:0c:9e:65:ab:b6:19:56:3d:
         61:b3:df:53:f0:21:8e:df:6c:56:a4:3b:02:12:c3:3a:d1:2f:
         91:87:cd:52:4b:0c:ba:06:fd:91:27:fc:3e:d9:58:28:01:59:
         f0:95:a7:e4:e5:c8:2c:76:a5:7b:cf:a5:32:f7:78:69:c8:a4:
         39:d9:71:90:10:d4:e2:89:d3:ac:8f:8c:4f:9b:4c:21:0b:3b:
         39:43:bd:01
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTIXK4xAXV6rNnYiSTLFGgG+jZ14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI5Q0E3QkI0MzgyQTY0ODMzMkZEMzc3Njg5RTA0MDE2
NkM1MDVCNTAeFw0yNDAzMDUxNzU5NTVaFw0yNTAzMDQxODA0NTVaMDMxMTAvBgNV
BAMTKDAzQjQzNDEzNjEwNzlDMTEzRUYyOENDRTM1QUFBNjYxQjU0MUQ4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbb1h/4aM0mI3yc5NeDJdi814s
807rm08PAr7iPO2oRiuzcodXtNjFWV/z9EDHqQn9YgJT5e6xSF9E6dvTCX5UdisY
ZQHYqy7uKjXdiKVjR+bqq6eZ5k5eWFE6JhSrlrmrBz4YSWV7/vJ83sLZN4XaYmZ7
Qhts89Og8A9ucZa+pH+hMPY8OTkG4RquIYBTf2iTKEt/GxTDTmNUnyUrXZYCqXIo
szTAZ1hXW0qgZzxiPZV6VQCsdik5Y5J4i+K93WktkFd2OZKMM+gQusr0gHiY76PX
1HHAQD5X32PP01mGpRQqd+pG3FZB++T63Fuhi8ouTeCsqqArD+lQz3B9E8NzAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUA7Q0E2EHnBE+8ozONaqmYbVB2PcwHwYDVR0j
BBgwFoAUgpynu0OCpkgzL9N3aJ4EAWbFBbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTIwMjlGNjM3NDUwNjc4NUYzOTExMTFGMTA0RTY1NjA3
MDFBOUE0RDI3QkQzNkZDRkZGODE2QzBGRTYyNkQ4LzAvODI5Q0E3QkI0MzgyQTY0
ODMzMkZEMzc3Njg5RTA0MDE2NkM1MDVCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjlDQTdCQjQzODJBNjQ4MzMy
RkQzNzc2ODlFMDQwMTY2QzUwNUI1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDEyMDI5RjYzNzQ1MDY3ODVGMzkxMTExRjEwNEU2NTYwNzAxQTlBNEQy
N0JEMzZGQ0ZGRjgxNkMwRkU2MjZEOC8wLzMyMzAzMDJlMzMzNTJlMzEzNDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMDM0Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADII44wDQYJ
KoZIhvcNAQELBQADggEBAJ64Kj+UplStIhoHQmR2bKkKoXA4tIfSWMRncezW2sll
XPF5kQXi+u6AieCBArmdqn+W4n4hnzR4D3fr8gAlPTFL95HnYPm0vXL1chq4CfKM
Lw1Y0WiN+udgXPMdqr7R9RzR1M76gXot8pcmi38htaKezepcj0nKbHf/Tg8afrOI
nxGnZjOiCy27qzlqymsvN9oDHRuePsusWjDaoLCz8XMOMvQEpbiK9dRh/7YMnmWr
thlWPWGz31PwIY7fbFakOwISwzrRL5GHzVJLDLoG/ZEn/D7ZWCgBWfCVp+TlyCx2
pXvPpTL3eGnIpDnZcZAQ1OKJ06yPjE+bTCELOzlDvQE=
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org