Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3234382e302f32312d3234203d3e203232333133.roa
File:                     3230302e33352e3234382e302f32312d3234203d3e203232333133.roa (raw, json)
Hash identifier:          WOzsLW30PY2JpbNt3K4Qmx0lOdSNUkqBIdBWdqOC16k=
Subject key identifier:   43:08:D5:88:93:38:B4:19:7C:6A:EF:4A:F9:D9:BC:EB:5D:B3:05:73
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       1665089FBB3C5C306679381D019738EEA8C74FFA
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3234382e302f32312d3234203d3e203232333133.roa
Signing time:             Mon 27 May 2024 19:50:21 +0000
ROA not before:           Mon 27 May 2024 19:45:21 +0000
ROA not after:            Mon 26 May 2025 19:50:21 +0000
asID:                     22313
IP address blocks:        200.35.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:65:08:9f:bb:3c:5c:30:66:79:38:1d:01:97:38:ee:a8:c7:4f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: May 27 19:45:21 2024 GMT
            Not After : May 26 19:50:21 2025 GMT
        Subject: CN=4308D5889338B4197C6AEF4AF9D9BCEB5DB30573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:08:e1:43:5f:97:e0:14:24:01:dd:9d:b9:
                    1d:f7:92:c4:4b:c9:96:79:d9:f4:bf:6c:a8:b2:5d:
                    d0:47:54:1b:0e:89:c4:ae:00:32:df:3c:ef:ca:19:
                    c4:9f:34:31:72:98:c6:f7:23:0f:7f:0d:04:bc:03:
                    ad:fb:24:31:ae:13:6b:62:a3:e8:db:91:f2:aa:db:
                    9d:17:bf:00:a1:8a:80:eb:ef:e4:cf:17:f6:70:7b:
                    99:d1:30:57:6e:0c:ee:0b:c3:df:09:20:8f:cb:8e:
                    a9:c4:0c:73:6a:cb:ea:5e:9e:70:fe:3b:cc:4f:79:
                    00:fe:69:76:0f:d3:c1:8f:66:aa:9f:3e:67:73:e2:
                    15:6c:3e:6c:3c:15:2f:29:6e:34:7c:3e:fa:de:c7:
                    ed:4d:8d:a4:b2:8b:36:19:a4:3f:6d:52:06:5e:4d:
                    f4:8f:14:c0:ab:2b:69:e3:cc:d8:82:9f:6c:0d:2c:
                    8e:18:90:f8:43:7f:60:98:82:3e:d8:28:0a:61:71:
                    b4:30:b2:66:52:b7:78:ae:45:92:28:7d:a7:48:ea:
                    a2:39:2d:10:0e:87:80:d9:9a:b6:d4:0f:24:5f:a9:
                    4e:8b:4d:fc:07:25:d1:90:23:98:9b:cd:7a:d8:b0:
                    c7:be:ce:3b:26:dd:ac:61:97:16:8b:3b:a2:ec:cc:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:08:D5:88:93:38:B4:19:7C:6A:EF:4A:F9:D9:BC:EB:5D:B3:05:73
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3234382e302f32312d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:93:9b:f1:a0:e3:f0:2e:85:dc:1b:ad:ee:f8:65:27:68:2f:
         1b:b0:a0:bf:d9:0d:86:95:e1:2e:1b:c1:52:88:57:bd:7d:ef:
         1a:3a:1c:ca:26:14:d9:0e:f3:14:82:5e:2f:f7:af:7a:35:55:
         7e:5e:bb:b5:a8:e5:8b:8d:1b:6a:2a:10:5f:0f:78:e4:1f:2a:
         69:17:2b:ba:fa:09:c1:55:fa:1a:f5:f1:3e:c5:f1:68:1d:f0:
         21:ea:b1:29:ee:e8:f9:b9:fa:ee:ff:c1:c7:9a:19:32:cb:f9:
         1d:78:69:4c:a6:f0:34:87:e2:25:04:13:77:56:2f:19:b6:f0:
         a8:c1:a7:1a:94:0a:26:61:0c:ef:09:c7:8a:b2:c0:4e:65:c5:
         65:62:fd:81:12:75:eb:d4:60:bb:83:af:a7:d4:59:56:b7:72:
         16:16:4f:1e:b6:4b:6a:d6:b3:20:30:41:71:91:24:48:3b:47:
         b6:30:11:67:c8:0a:8d:5b:c9:44:05:a0:00:33:d5:92:b5:90:
         b0:25:95:d5:6c:4b:c6:16:d3:c6:91:8d:1e:47:1d:f1:0f:04:
         73:a8:3f:4a:c1:fe:e0:f4:e6:8a:ac:db:80:c8:08:ce:eb:a7:
         71:33:03:c0:30:52:99:9e:5e:54:90:68:5f:83:c7:35:68:98:
         1e:b8:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 13:51:45 2024 by rpki-client on console-fra.rpki-client.org