Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32322d3232203d3e203230343733.roa
File:                     3230302e33352e3135322e302f32322d3232203d3e203230343733.roa (raw, json)
Hash identifier:          iXOsN3clZsMAJwDhJYKzfnQYMi/YhW2bqrh5IE2UNn0=
Subject key identifier:   39:85:A8:42:BF:33:BB:D0:9A:77:89:1C:01:DC:49:72:93:F0:10:CB
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       2FD809DAA21C397579F5BEDDF83CD7254BACE42B
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32322d3232203d3e203230343733.roa
Signing time:             Fri 16 May 2025 01:10:00 +0000
ROA not before:           Fri 16 May 2025 01:05:00 +0000
ROA not after:            Fri 15 May 2026 01:10:00 +0000
asID:                     20473
IP address blocks:        200.35.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d8:09:da:a2:1c:39:75:79:f5:be:dd:f8:3c:d7:25:4b:ac:e4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May 16 01:05:00 2025 GMT
            Not After : May 15 01:10:00 2026 GMT
        Subject: CN=3985A842BF33BBD09A77891C01DC497293F010CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:85:e0:22:0e:50:36:dd:a0:ac:da:62:11:
                    52:7b:51:df:b0:25:3e:a7:7b:1a:e0:2f:dd:6f:31:
                    b5:79:f3:50:87:76:5f:7a:9e:a7:c1:3b:9b:d2:32:
                    0d:9b:25:57:0b:e2:c2:ce:01:ef:40:fc:03:ed:a4:
                    01:8a:b7:93:4f:88:a9:4e:c8:3f:bf:e9:b6:eb:9f:
                    99:a6:0d:d5:7e:c0:e3:5d:48:c6:a5:5f:b9:91:ad:
                    b7:a0:01:bf:40:0b:af:90:d1:db:85:22:de:8e:50:
                    cf:05:1c:7b:51:40:a4:3e:f7:ed:66:d3:23:d6:34:
                    31:1c:fc:d8:10:d4:8f:3a:7a:24:bc:63:11:47:1d:
                    c7:d2:f7:06:91:bd:24:9c:99:85:a0:78:23:90:c4:
                    28:a1:d4:ee:22:ed:e2:69:21:2a:35:a5:fd:16:9d:
                    e4:d3:ef:74:4f:00:e0:7e:83:0c:63:21:9f:81:86:
                    64:d5:fa:b3:1a:41:24:58:95:16:0d:20:e7:b6:9c:
                    87:e7:b6:8b:26:0f:ba:2f:93:3c:4b:c5:5c:99:b9:
                    14:df:f3:c6:b2:1f:24:53:ca:80:b2:6d:02:5e:f9:
                    43:89:a2:80:a0:30:ae:57:1c:12:f1:23:af:06:b6:
                    78:74:92:75:e9:11:09:88:65:6e:4f:0f:81:e3:90:
                    7b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:85:A8:42:BF:33:BB:D0:9A:77:89:1C:01:DC:49:72:93:F0:10:CB
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32322d3232203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:20:9a:ea:41:98:dd:f4:a5:7e:e5:11:23:03:70:9b:b2:66:
         bb:48:38:cd:ee:67:f3:04:d8:da:03:cb:be:26:27:70:8b:3f:
         fd:84:a5:8d:c7:fb:05:d4:c5:61:67:14:61:79:ac:19:11:3e:
         86:99:92:c8:f6:57:22:5c:55:3f:29:00:41:b9:c4:fd:d9:6e:
         a0:6f:37:89:42:15:9e:89:f2:4c:57:05:2e:60:d0:46:ca:ca:
         45:7c:c0:15:ac:62:b0:2d:a9:2d:89:7f:4a:5c:2c:51:7f:e5:
         99:f4:b9:b5:b5:4f:ba:10:60:eb:8d:f5:34:b1:7d:39:02:86:
         dc:80:3b:52:f6:79:3e:96:e9:1a:7f:c0:82:95:44:63:54:5d:
         6c:0f:f6:6d:80:2e:64:94:24:e1:42:7b:d7:f1:d4:4e:a2:b9:
         bc:ee:56:19:70:6d:c5:54:1b:e8:50:b4:35:93:75:9e:5a:7a:
         27:3a:9c:6e:40:12:3c:af:78:76:9b:9f:b2:3e:eb:91:0b:49:
         f5:66:23:4e:3c:df:0c:70:d9:23:2c:34:ce:81:2a:0e:f3:d9:
         5d:f5:8c:b6:8a:62:bb:c9:a5:31:67:8f:09:86:92:37:ac:d1:
         49:29:4b:22:b3:ea:91:e3:3d:6e:64:81:96:91:c9:a7:9e:72:
         b6:af:88:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:07:27 2025 by rpki-client