Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134332e302f32342d3234203d3e203238303839.roa
File:                     3230302e33352e3134332e302f32342d3234203d3e203238303839.roa (raw, json)
Hash identifier:          MjdrWrt0FpvAiFnBit5pUWcApjv2Zzwh8pYf6RFZTjQ=
Subject key identifier:   A9:68:92:99:7F:06:38:B9:E0:CA:58:FC:34:AE:3E:A1:1A:8E:31:87
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       47A817E62ED00AAB082EB4B8DC0E85F19F92784A
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134332e302f32342d3234203d3e203238303839.roa
Signing time:             Mon 09 Sep 2024 19:50:00 +0000
ROA not before:           Mon 09 Sep 2024 19:45:00 +0000
ROA not after:            Mon 08 Sep 2025 19:50:00 +0000
asID:                     28089
IP address blocks:        200.35.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a8:17:e6:2e:d0:0a:ab:08:2e:b4:b8:dc:0e:85:f1:9f:92:78:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Sep  9 19:45:00 2024 GMT
            Not After : Sep  8 19:50:00 2025 GMT
        Subject: CN=A96892997F0638B9E0CA58FC34AE3EA11A8E3187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:ad:d3:22:ad:91:c6:a9:f2:6a:20:a6:cf:
                    1a:9a:f1:a8:98:61:15:6e:10:58:cf:7a:65:8a:a5:
                    e5:ed:a7:95:99:a0:ad:3e:87:f9:dd:c4:74:91:7d:
                    c2:a5:4d:5e:2d:e8:85:26:c4:7f:e7:47:af:62:9a:
                    67:a8:41:c5:e3:94:d9:5d:95:48:ce:af:b0:b2:8c:
                    36:7d:6b:32:85:8a:19:88:95:d1:7c:0d:30:e4:1d:
                    36:6e:3d:f9:18:83:82:f8:02:a8:6a:27:a9:55:93:
                    3b:8a:c4:c5:e6:02:aa:fd:68:2b:02:d4:46:0d:60:
                    16:76:df:4f:56:9c:ff:21:1f:75:1e:15:2c:ac:20:
                    30:e0:5a:aa:84:a8:5e:f2:5d:45:f7:aa:69:fa:fa:
                    82:07:4d:fc:22:53:53:39:fb:b6:f3:2a:bf:af:41:
                    e1:14:65:54:9b:04:bf:7d:59:0c:42:ac:be:ac:d4:
                    7d:2d:ad:68:d4:29:98:16:cd:d2:62:c5:76:b6:47:
                    ff:df:37:fc:d9:b8:6e:60:36:52:ac:c9:74:fc:4a:
                    24:36:a0:71:4e:5e:36:09:a0:97:c3:81:22:cb:ce:
                    c0:0e:e8:4b:43:f6:21:eb:7f:76:36:67:6f:e0:70:
                    29:0c:d3:8d:b1:ae:53:b8:e2:8d:46:95:bc:44:b4:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:68:92:99:7F:06:38:B9:E0:CA:58:FC:34:AE:3E:A1:1A:8E:31:87
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134332e302f32342d3234203d3e203238303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:00:4d:74:f1:e4:3b:20:31:9c:e1:e5:4c:ca:18:96:08:af:
         0d:de:d3:2d:ae:a1:96:d5:56:e6:a7:08:c2:3e:11:ca:18:82:
         42:a6:2d:92:11:a4:d7:60:5a:ee:4e:da:a5:ad:d4:e1:71:92:
         08:d1:da:37:5c:11:ee:15:6a:24:81:8c:a7:7b:4b:c4:ad:bd:
         08:39:30:68:85:17:67:7c:9e:74:28:e1:2b:f8:90:7b:c6:7d:
         62:75:15:eb:94:eb:0e:89:5e:16:f6:36:c9:31:1d:f1:59:b0:
         04:0e:eb:84:c7:8e:4f:47:02:76:67:3e:74:24:eb:bc:1a:b2:
         b7:d0:64:14:50:7b:f3:b2:c8:1b:e7:de:6c:ca:f6:b1:6d:2e:
         97:08:79:3d:1e:d2:d1:31:bb:e2:0f:3c:fb:4f:29:84:1b:29:
         13:c5:e3:15:5d:af:0d:06:6e:e4:b5:54:1e:4d:54:2c:31:08:
         9b:a8:e8:7f:64:37:d5:2c:b2:c9:d0:1c:f7:8c:1e:00:18:d1:
         10:33:d0:f9:36:ff:9f:bb:dc:9f:58:05:6c:d7:3f:90:62:ee:
         93:59:c3:5f:cc:b9:93:ca:67:79:b2:ec:f7:1f:67:3c:81:73:
         48:53:a9:e0:47:64:93:09:db:43:a1:84:98:f8:44:63:22:ed:
         b2:4c:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org