Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230302e302f32312d3234203d3e203232333133.roa
File:                     3230302e33352e3230302e302f32312d3234203d3e203232333133.roa (raw, json)
Hash identifier:          z4u69ysxvAAxYyNfU8BYRaB4XccaB81Dh//KEAlVXwE=
Subject key identifier:   7C:E7:AB:83:86:0F:7C:3A:30:34:11:8B:51:5E:9F:8E:8A:20:02:E6
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       4E404478261F9953B51E0CDA7E0AEFCFAEEE00C7
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230302e302f32312d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:26 +0000
ROA not before:           Mon 27 May 2024 19:45:26 +0000
ROA not after:            Mon 26 May 2025 19:50:26 +0000
asID:                     22313
IP address blocks:        200.35.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Sep 2024 10:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:40:44:78:26:1f:99:53:b5:1e:0c:da:7e:0a:ef:cf:ae:ee:00:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:26 2024 GMT
            Not After : May 26 19:50:26 2025 GMT
        Subject: CN=7CE7AB83860F7C3A3034118B515E9F8E8A2002E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:3e:a8:1d:b3:fb:11:d4:88:3a:01:40:cd:
                    6b:37:50:d2:b7:73:72:bf:0f:75:29:2c:33:cd:04:
                    93:d4:73:6a:b2:3d:88:65:0a:a4:d7:fd:b8:d9:53:
                    ea:a4:32:b0:86:7a:45:55:5e:be:7c:8f:34:20:ce:
                    5e:0f:7d:8c:76:f4:df:72:51:ef:0e:18:7c:5b:79:
                    59:0b:62:8c:ba:20:18:84:91:95:16:59:23:82:b6:
                    fc:35:64:18:0a:95:7a:08:c0:e6:57:01:4d:d0:7d:
                    ca:27:a5:a1:b1:1c:b5:a8:72:03:0b:5e:83:14:52:
                    04:bd:0c:42:f1:c8:f8:96:7b:24:af:a1:5e:f8:c7:
                    0b:de:26:96:a0:de:c4:ba:cd:e3:76:24:d6:f3:98:
                    14:9b:69:4a:17:08:38:46:50:08:52:8f:f8:aa:6b:
                    a6:78:26:47:d2:63:80:71:7e:ca:d4:d5:e7:ed:76:
                    5e:29:84:dd:21:e1:79:b6:a4:5c:5a:d7:5b:6f:31:
                    f9:e4:4c:c4:8e:8b:8e:68:fc:69:ca:a6:0d:3f:0d:
                    c7:57:82:a5:aa:e3:5a:10:f9:e9:34:41:09:a9:ad:
                    f2:e3:9f:96:cc:28:2a:2f:ce:96:b3:a3:6d:f6:09:
                    f4:a0:e5:29:8b:e5:a2:62:76:c0:72:fa:5f:0c:31:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E7:AB:83:86:0F:7C:3A:30:34:11:8B:51:5E:9F:8E:8A:20:02:E6
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3230302e302f32312d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:7d:29:f9:e2:a6:b2:47:51:61:93:09:fd:2e:f9:03:47:
         5b:5d:96:cf:ae:24:7c:67:03:8c:c4:9e:b9:02:a0:42:47:09:
         02:67:61:7c:7d:78:d5:31:0e:de:6d:76:0b:1a:d7:00:96:6e:
         dc:0d:7c:b1:bf:fa:55:d6:3d:6a:7d:29:b4:8e:eb:c9:bb:60:
         79:ae:40:00:33:86:db:0a:8d:e3:92:41:e0:cf:a1:82:9c:09:
         d3:96:1e:f2:e9:b3:fd:88:54:60:e7:9c:f8:1f:18:59:bf:03:
         75:1e:fb:50:2f:c6:a4:71:db:57:07:7d:63:90:82:91:89:56:
         d1:34:8d:50:10:70:ff:3f:82:75:6f:0e:ce:19:57:d8:b8:b3:
         41:bb:fc:02:2e:dd:39:c2:8e:56:d7:dc:3e:07:49:69:76:5c:
         ed:a5:e2:67:94:5f:b4:04:73:c2:cc:15:19:1f:20:c0:d4:7b:
         32:4d:6c:ad:53:da:80:d7:63:f3:ab:0c:75:39:9b:12:0d:7b:
         0f:b3:f3:d6:f2:a0:90:66:f3:da:b8:2d:18:d1:90:31:2a:98:
         df:43:ba:82:a8:45:2c:5c:37:28:c0:58:4f:60:af:ab:dc:aa:
         f5:91:ee:ab:e4:a0:06:f1:60:5a:f3:1d:c2:d5:3f:e1:4b:f6:
         63:63:e7:97
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTkBEeCYfmVO1Hgzafgrvz67uAMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NjI5QTY5NEVGNzIxN0VGM0RFNUUxMjgxMDRDMUUx
NEI0QkVCMzAeFw0yNDA1MjcxOTQ1MjZaFw0yNTA1MjYxOTUwMjZaMDMxMTAvBgNV
BAMTKDdDRTdBQjgzODYwRjdDM0EzMDM0MTE4QjUxNUU5RjhFOEEyMDAyRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZD6oHbP7EdSIOgFAzWs3UNK3
c3K/D3UpLDPNBJPUc2qyPYhlCqTX/bjZU+qkMrCGekVVXr58jzQgzl4PfYx29N9y
Ue8OGHxbeVkLYoy6IBiEkZUWWSOCtvw1ZBgKlXoIwOZXAU3QfconpaGxHLWocgML
XoMUUgS9DELxyPiWeySvoV74xwveJpag3sS6zeN2JNbzmBSbaUoXCDhGUAhSj/iq
a6Z4JkfSY4BxfsrU1eftdl4phN0h4Xm2pFxa11tvMfnkTMSOi45o/GnKpg0/DcdX
gqWq41oQ+ek0QQmprfLjn5bMKCovzpazo232CfSg5SmL5aJidsBy+l8MMQXrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUfOerg4YPfDowNBGLUV6fjoogAuYwHwYDVR0j
BBgwFoAUs2YpppTvchfvPeXhKBBMHhS0vrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDc2ODMxMjlDQTNFODAwRDY5QUY1RjVCMjcxQjE3NkYw
OEE3MjkyQzZDRUFGQzExMDU4REY3RUU5MTMzMTRDLzAvQjM2NjI5QTY5NEVGNzIx
N0VGM0RFNUUxMjgxMDRDMUUxNEI0QkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzY2MjlBNjk0RUY3MjE3RUYz
REU1RTEyODEwNEMxRTE0QjRCRUIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA3NjgzMTI5Q0EzRTgwMEQ2OUFGNUY1QjI3MUIxNzZGMDhBNzI5MkM2
Q0VBRkMxMTA1OERGN0VFOTEzMzE0Qy8wLzMyMzAzMDJlMzMzNTJlMzIzMDMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzMjMzMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8gjyDAN
BgkqhkiG9w0BAQsFAAOCAQEAWOl9KfniprJHUWGTCf0u+QNHW12Wz64kfGcDjMSe
uQKgQkcJAmdhfH141TEO3m12CxrXAJZu3A18sb/6VdY9an0ptI7rybtgea5AADOG
2wqN45JB4M+hgpwJ05Ye8umz/YhUYOec+B8YWb8DdR77UC/GpHHbVwd9Y5CCkYlW
0TSNUBBw/z+CdW8OzhlX2LizQbv8Ai7dOcKOVtfcPgdJaXZc7aXiZ5RftARzwswV
GR8gwNR7Mk1srVPagNdj86sMdTmbEg17D7Pz1vKgkGbz2rgtGNGQMSqY30O6gqhF
LFw3KMBYT2Cvq9yq9ZHuq+SgBvFgWvMdwtU/4Uv2Y2Pnlw==
-----END CERTIFICATE-----
Generated at Fri Sep 20 09:16:25 2024 by rpki-client on console-fra.rpki-client.org