Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3233302e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3233302e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          YYUfMEUTlLSxBK4YhaLFUMCqzBcgOR97XT1/1NR1eEk=
Subject key identifier:   54:31:20:B5:1E:85:28:5F:4F:1F:06:10:57:06:AD:D0:4A:4C:99:44
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       4D97C9FFA2264F2933CB60A66FBF4C6FAC2984B9
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3233302e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:27 +0000
ROA not before:           Mon 27 May 2024 19:45:27 +0000
ROA not after:            Mon 26 May 2025 19:50:27 +0000
asID:                     22313
IP address blocks:        200.35.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:97:c9:ff:a2:26:4f:29:33:cb:60:a6:6f:bf:4c:6f:ac:29:84:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:27 2024 GMT
            Not After : May 26 19:50:27 2025 GMT
        Subject: CN=543120B51E85285F4F1F06105706ADD04A4C9944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:db:20:5a:75:f1:5e:5a:ed:92:dd:88:83:
                    31:94:ac:f6:93:a0:50:4f:aa:2d:e1:d5:ee:38:0f:
                    9e:7f:92:de:49:cb:4e:ab:4c:d0:81:1c:80:9b:da:
                    a4:0c:ef:df:47:71:14:00:9f:70:90:d6:ba:2f:9f:
                    6d:62:85:bf:a8:b4:ae:2f:fc:19:63:99:04:46:b6:
                    f3:4f:5c:92:3b:7a:a8:22:56:ae:da:6c:73:00:a0:
                    24:de:c8:e8:4f:5c:49:88:79:27:49:24:be:37:80:
                    1d:84:da:91:d3:74:a0:1a:6d:af:3f:71:5f:0c:66:
                    d9:b0:32:d6:d2:f0:3b:1a:cc:b5:92:14:bd:45:60:
                    00:74:d7:81:a0:ff:f8:42:ae:c3:8d:ca:f5:3f:8e:
                    d8:9b:29:c3:f2:06:f2:a0:7f:0c:12:dc:ac:8b:87:
                    4d:89:14:6e:10:cc:5c:8e:09:97:b2:5a:59:83:ab:
                    40:8f:21:43:94:24:6a:0a:d7:f6:2e:47:79:ce:59:
                    f3:8c:3d:7d:0b:d3:56:e2:cb:e6:d6:25:ba:87:8b:
                    4f:fe:f2:84:7e:5c:73:63:a2:f0:28:d2:f9:c5:23:
                    0d:1b:1b:c2:5e:7d:af:51:ba:ec:e9:66:ac:74:ec:
                    50:09:d0:ff:68:08:ec:1a:37:66:c4:a1:c8:c1:10:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:31:20:B5:1E:85:28:5F:4F:1F:06:10:57:06:AD:D0:4A:4C:99:44
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3233302e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:08:4d:88:e7:95:dd:96:d7:41:42:7b:a0:b5:e5:93:c0:
         d4:b3:3c:8d:de:b5:07:14:30:c0:97:53:76:cc:91:27:cc:f7:
         41:ab:8a:6f:47:12:e8:ff:a0:bd:a3:ad:16:54:31:26:04:a6:
         89:2e:43:ae:7a:ad:59:89:9a:47:58:36:bc:d0:21:95:30:bc:
         a4:38:a0:b8:2e:b3:89:88:4a:cd:b0:b4:27:81:6a:c3:e8:01:
         ae:06:96:5a:66:1a:aa:e7:3d:b6:bd:57:56:43:eb:13:37:e2:
         97:c7:03:86:d4:d6:da:aa:eb:1a:85:18:21:37:00:7a:fb:4c:
         f7:92:13:b1:c8:8a:85:37:16:5a:72:49:74:6b:46:bf:e4:92:
         d0:9c:74:47:8f:79:8e:9a:27:ba:e1:54:9e:98:3a:14:e4:e6:
         8b:5a:0a:ff:8d:19:15:12:75:47:51:c8:a9:4e:d0:87:12:b4:
         af:5e:8e:fc:fd:a1:d3:e0:cb:33:96:20:70:3f:56:d0:0d:e1:
         c1:16:91:02:8c:7b:a9:18:18:f9:9d:15:13:6c:b2:ef:44:48:
         64:b0:21:b1:12:2d:aa:14:3d:94:f7:2e:7d:6a:fa:f6:f7:3c:
         46:50:9d:5c:63:89:92:d2:da:60:64:33:1c:11:dc:25:e4:bc:
         0b:f2:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:31 2024 by rpki-client on console-fra.rpki-client.org