Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3232372e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3232372e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          KRa5+45ZARi5NewySojxHL3L33JQzkiu0FrXnKKKqlI=
Subject key identifier:   81:F2:6A:45:67:4C:1B:F1:1F:7D:C4:FC:45:25:D9:EA:CE:55:E3:07
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       0BEFE8B3655924E81B4576CB378C85A8F78F3857
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3232372e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:14 +0000
ROA not before:           Mon 27 May 2024 19:45:14 +0000
ROA not after:            Mon 26 May 2025 19:50:14 +0000
asID:                     22313
IP address blocks:        200.35.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ef:e8:b3:65:59:24:e8:1b:45:76:cb:37:8c:85:a8:f7:8f:38:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:14 2024 GMT
            Not After : May 26 19:50:14 2025 GMT
        Subject: CN=81F26A45674C1BF11F7DC4FC4525D9EACE55E307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:ef:26:b1:36:1c:ba:c5:f6:b5:6b:a8:bc:
                    c4:fc:f0:05:82:0e:59:f0:a8:bf:67:87:c6:48:15:
                    07:e8:c6:aa:44:5f:ce:7a:f9:6d:05:ad:de:4f:90:
                    af:a7:d5:66:0f:e4:c5:55:f7:6c:26:b3:2c:33:8e:
                    8c:f3:78:11:de:6b:3d:aa:43:e7:cb:3c:82:5a:84:
                    62:d3:ac:66:15:7f:27:7a:a3:eb:6c:ec:9e:67:39:
                    7f:9d:2c:9c:92:94:b0:0e:1c:0a:92:f2:ba:85:35:
                    f1:89:ef:3d:63:b6:43:5c:90:c6:21:06:c4:11:c4:
                    93:3d:13:58:78:a3:78:ee:37:3a:ed:33:8a:b4:09:
                    ba:6e:bf:ab:1d:04:f2:62:e6:84:98:42:a9:92:3c:
                    23:da:fc:ad:dd:28:7b:ad:33:bc:d9:b8:75:25:22:
                    82:2f:93:14:b7:22:3f:de:6c:d0:78:b9:d0:ef:9c:
                    fd:f6:d9:9c:57:8e:56:6a:6e:14:77:58:0f:18:a6:
                    79:41:60:96:66:01:ea:41:c4:93:ba:1c:f6:6e:0f:
                    04:08:ed:ad:ac:ce:9a:2b:f7:a7:f8:09:cb:66:de:
                    38:e0:40:58:4e:87:ef:2d:c2:8f:01:b2:9e:25:97:
                    11:5d:3e:59:17:de:67:3e:9c:b7:40:8d:39:7c:63:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F2:6A:45:67:4C:1B:F1:1F:7D:C4:FC:45:25:D9:EA:CE:55:E3:07
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3232372e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:4a:d5:4c:f0:cb:33:86:d7:2e:41:27:c0:ce:7a:3b:af:7e:
         c3:42:5e:b2:89:75:51:11:7a:9f:0e:ef:c6:31:2a:95:cc:61:
         e3:d2:4d:d6:aa:96:44:64:6c:97:62:9c:f1:60:d6:1b:e7:68:
         f3:37:b2:5c:21:77:a2:da:c9:e3:58:1e:30:50:eb:01:7f:a8:
         89:54:c5:c7:7d:da:c6:4c:26:32:1c:8c:3b:d8:47:f7:36:fc:
         44:28:b3:1e:c2:5c:2b:59:71:9b:03:0e:e0:d5:23:31:b3:b8:
         fc:2d:5d:61:fc:fe:fd:5d:bf:73:ea:3b:53:1c:e2:5e:5d:5b:
         cf:8e:1c:ee:f0:93:2f:b5:ee:74:dc:5f:79:24:bc:0a:a3:51:
         a4:72:8e:3e:6b:fa:cb:9b:37:18:68:64:a3:e0:4d:54:df:7e:
         3a:31:d0:72:9c:8a:34:66:53:2b:a5:b8:f5:6d:c1:5e:fb:1e:
         c3:8b:09:a0:b2:d9:83:02:e6:1c:d4:76:8a:7d:3a:0e:66:0f:
         d3:e1:9f:41:61:75:d5:a7:61:9a:21:7c:51:32:e1:04:45:e6:
         7c:3d:e4:55:07:c4:f1:ce:7c:f1:a6:df:a8:a0:6d:90:12:98:
         11:47:ad:37:44:6f:3e:65:62:9a:00:38:d2:2c:b1:12:6d:8c:
         54:1b:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org