Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139362e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3139362e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          iGczOm3bZ6gL+ZEIQwZrm05s2M3W6P07qzhSENRCWuc=
Subject key identifier:   5F:24:A0:00:BF:D7:1C:73:39:9E:91:E4:52:A9:E9:62:7D:C3:6F:74
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       0A65B6806BCC2CA9EB38FD35D1DA18D0CD888513
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139362e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:31 +0000
ROA not before:           Mon 27 May 2024 19:45:31 +0000
ROA not after:            Mon 26 May 2025 19:50:31 +0000
asID:                     22313
IP address blocks:        200.35.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:65:b6:80:6b:cc:2c:a9:eb:38:fd:35:d1:da:18:d0:cd:88:85:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:31 2024 GMT
            Not After : May 26 19:50:31 2025 GMT
        Subject: CN=5F24A000BFD71C73399E91E452A9E9627DC36F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:14:77:be:b1:89:a0:4f:63:1f:a6:d6:8f:
                    e9:83:8d:9d:11:ec:81:76:a3:36:b9:a4:f4:1b:08:
                    59:f1:7e:81:27:69:94:4a:7c:16:28:ca:5a:83:b7:
                    7c:1e:c9:ce:1a:27:1b:74:4e:9c:82:38:c8:eb:d1:
                    26:ab:80:3b:4a:de:19:60:f0:4c:09:6a:ad:89:29:
                    47:b2:bb:eb:29:aa:a6:93:ba:d3:ef:26:75:74:79:
                    92:70:ea:7f:c1:77:b2:5f:09:d2:30:72:fe:48:ea:
                    8e:8b:c1:7b:a0:1c:18:ad:a8:54:49:e6:50:31:1f:
                    9c:7a:e0:e0:26:34:b2:3a:6a:00:da:9b:cf:e6:a8:
                    9c:08:6d:a5:b0:90:74:3d:3b:a3:e2:67:3c:70:b9:
                    2a:96:82:8d:1c:15:ed:7a:58:b4:e6:55:f0:58:f9:
                    f5:d3:7c:82:df:eb:48:80:90:57:6f:c1:05:5f:c4:
                    90:4c:98:d6:f2:17:58:c6:fa:1f:f9:24:a0:21:94:
                    21:e7:93:42:08:9c:84:62:a7:e5:de:82:c9:d3:64:
                    be:e6:92:fb:b1:6c:2e:8a:9f:84:9d:60:b1:9c:a9:
                    09:d5:78:a1:50:30:bb:ea:8e:40:c6:e1:46:08:b6:
                    38:55:ec:bf:eb:f6:30:be:56:46:70:80:b3:43:94:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:24:A0:00:BF:D7:1C:73:39:9E:91:E4:52:A9:E9:62:7D:C3:6F:74
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139362e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b5:18:dc:95:48:68:50:a2:de:b8:05:0f:e3:c4:da:1e:08:
         8e:fb:e6:87:20:34:1a:a2:fd:25:94:a6:60:b5:5f:53:56:b1:
         7b:99:b1:49:8a:b2:e7:76:0f:d4:48:bd:57:cc:e5:11:45:66:
         5c:ce:7e:ef:cd:57:15:df:4c:9f:2a:d3:dd:5f:2a:fc:86:22:
         d4:9c:8c:e5:c9:0e:87:e9:7e:28:b7:f7:ca:d7:ee:16:71:7f:
         a1:3e:31:4e:cc:7d:2b:12:0e:ae:c7:52:1f:2e:72:6a:eb:df:
         b0:35:b1:00:12:61:de:3a:3b:00:b5:31:0e:d0:0f:f2:26:f6:
         64:2b:cb:14:ed:fc:3a:51:63:9c:bd:f9:de:87:a6:03:81:b2:
         6a:6b:63:ba:6b:f7:80:30:d0:c9:ed:21:34:2c:1b:de:09:19:
         4c:52:99:41:5e:ba:6f:e3:db:46:e0:63:02:32:f7:09:43:3a:
         4d:8d:48:64:37:5b:93:cb:3c:fa:20:14:46:8a:ae:5f:94:2b:
         b2:aa:96:84:31:15:aa:b3:b7:53:22:ef:09:da:8b:45:d2:5a:
         f0:8a:ea:57:5f:83:b9:07:3f:ac:d0:de:1c:cc:f0:45:28:e1:
         12:06:cb:5c:e5:f5:5d:f4:50:62:de:87:71:b2:5a:7c:f5:e3:
         a7:7a:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org