Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3232302e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3232302e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          ag629dSHg+zYrlibMDKjwbr85TB94H4BawMYG5m5Eig=
Subject key identifier:   6B:97:74:6E:01:3A:2C:5E:D2:E7:EF:D0:4C:7C:2F:60:39:B3:C5:5C
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       50D05598D4315600A3452B7DA0A479A38DA8A6CC
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3232302e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:08 +0000
ROA not before:           Mon 27 May 2024 19:45:08 +0000
ROA not after:            Mon 26 May 2025 19:50:08 +0000
asID:                     22313
IP address blocks:        200.35.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d0:55:98:d4:31:56:00:a3:45:2b:7d:a0:a4:79:a3:8d:a8:a6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:08 2024 GMT
            Not After : May 26 19:50:08 2025 GMT
        Subject: CN=6B97746E013A2C5ED2E7EFD04C7C2F6039B3C55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:24:e5:eb:92:9e:ba:d5:65:2f:03:3a:a9:
                    0a:71:95:32:69:03:92:b2:0b:10:4e:a1:26:cb:60:
                    7c:74:0d:40:d8:b3:8b:a3:32:b8:84:d7:d7:10:3c:
                    04:c4:5f:7c:47:e0:e3:32:29:60:2c:a9:d3:36:34:
                    45:b1:8a:22:32:16:79:e3:56:f2:6b:56:71:d7:7e:
                    2d:61:15:2e:02:c3:cf:f7:ce:8d:52:96:9a:cc:fd:
                    b8:ee:b0:ad:b9:df:08:ab:a9:80:35:77:ff:a7:d5:
                    d2:d9:90:43:c4:ce:9b:2f:b1:d3:a0:72:95:42:3a:
                    03:35:3b:a6:ea:4e:e7:a3:b0:78:0d:0c:92:55:c6:
                    6b:78:b3:b2:83:0d:d6:c9:a9:9e:d4:64:e4:ba:13:
                    38:79:84:90:b0:54:8b:81:29:57:9c:6c:06:e2:96:
                    e6:f8:22:2e:7e:f8:0c:e1:a9:b4:9b:9b:5c:8d:1a:
                    5d:51:e6:b5:62:22:cb:1b:ff:53:f4:a7:e9:c9:ed:
                    3a:8b:08:9d:31:0d:7b:59:1a:44:07:d8:50:b0:57:
                    f5:ac:67:3c:1e:4f:46:7c:27:43:3a:39:2c:5a:77:
                    41:e6:f8:a3:74:a4:e0:9e:da:92:d8:8f:a7:00:e0:
                    06:8c:dd:1d:96:93:33:4b:f0:fb:43:22:21:d7:f4:
                    cf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:97:74:6E:01:3A:2C:5E:D2:E7:EF:D0:4C:7C:2F:60:39:B3:C5:5C
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3232302e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:01:97:39:2e:cc:14:8c:76:e6:6b:72:b5:22:15:e0:59:
         43:66:a3:0f:5c:bd:e1:f8:72:4b:48:5d:c5:93:99:b4:01:5d:
         a3:3d:5f:f8:a9:ef:60:e8:7f:54:9d:ab:7f:3e:1d:4a:0b:cb:
         6b:cd:f7:6e:66:41:6f:94:e6:dd:17:b8:4d:1a:79:fc:77:0d:
         20:e1:ce:9f:b2:fc:bb:07:73:1c:1e:fe:c2:20:39:0b:9b:3a:
         9d:21:83:48:ab:bb:18:13:0f:29:c6:43:46:08:b8:c4:71:cb:
         b9:41:8f:48:5f:5a:7c:a3:25:aa:31:34:51:0d:c3:19:56:de:
         b2:a4:7a:e1:23:42:e2:3c:a8:8e:87:2e:fb:eb:f4:30:0d:0e:
         02:72:22:bd:69:6b:15:0b:85:f4:55:02:57:8b:b8:3d:e0:35:
         01:00:66:ca:16:0c:fd:8f:48:9e:be:cd:b0:d2:be:53:96:f3:
         54:fe:bd:51:14:e1:01:7d:c8:62:8d:1f:78:e0:79:d6:f2:2f:
         8b:26:c9:d3:b4:aa:d7:70:43:f9:3a:1b:1e:cf:c0:01:f4:16:
         be:af:e5:76:df:d6:c5:e6:75:99:4e:2e:3c:6a:01:da:a4:13:
         ca:18:a4:d5:45:46:17:f7:45:2b:f8:ce:13:2f:86:e3:4f:9b:
         2b:33:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org