Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203230343733.roa
File:                     3230302e33352e3135322e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          06TAYM+v4jsZuKnsMPqlX8EUWeJL4R8dB9jKYnZlRzA=
Subject key identifier:   07:7E:A0:A1:B1:FD:66:0E:50:14:C1:3E:8E:8B:3B:B3:46:9C:9B:41
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       3518AB98AACB10DD2C2357F21F8565B4F6888CF5
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203230343733.roa
Signing time:             Fri 09 May 2025 10:50:01 +0000
ROA not before:           Fri 09 May 2025 10:45:01 +0000
ROA not after:            Fri 08 May 2026 10:50:01 +0000
asID:                     20473
IP address blocks:        200.35.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:18:ab:98:aa:cb:10:dd:2c:23:57:f2:1f:85:65:b4:f6:88:8c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 10:45:01 2025 GMT
            Not After : May  8 10:50:01 2026 GMT
        Subject: CN=077EA0A1B1FD660E5014C13E8E8B3BB3469C9B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:b9:77:80:ed:de:39:df:4f:80:a2:cd:c5:
                    32:a5:84:94:db:a5:ef:70:c6:ee:29:f6:97:2e:fb:
                    e8:78:7b:c8:62:5b:1b:79:fa:5c:79:44:18:06:00:
                    60:bf:50:47:3c:5c:44:e2:9c:7d:47:f4:1c:60:d8:
                    59:4f:2d:04:9d:c3:5b:82:55:c8:b0:ea:66:b3:4d:
                    bb:6b:6e:82:31:e6:fe:7f:1b:87:58:9a:d3:00:7f:
                    ea:16:4e:42:f0:db:84:8f:ca:33:f5:1b:11:a4:a0:
                    3b:34:8d:2b:86:2f:09:95:cc:a0:33:e0:3d:68:20:
                    db:64:23:f2:90:18:59:95:68:5f:45:cd:3b:fd:15:
                    74:00:a4:9b:3f:e4:81:2a:e4:60:a1:78:74:68:f8:
                    0c:7d:16:27:6f:ca:7f:2a:37:73:bd:4c:a7:1c:e2:
                    b7:28:e2:5e:0d:ef:06:c9:9d:db:89:f0:29:ee:80:
                    83:26:3e:8d:8e:66:2c:ec:96:8b:9d:7f:83:44:0c:
                    5e:c7:c2:17:0b:15:e4:25:92:3a:5b:94:6f:a7:29:
                    63:30:1f:5b:0e:f6:d4:be:ea:d6:f5:6d:3d:44:e5:
                    e6:ec:5a:ab:94:21:eb:b4:25:03:5a:0f:86:e7:52:
                    eb:a4:e9:87:ad:b5:49:55:8c:69:4a:5c:e6:cf:64:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7E:A0:A1:B1:FD:66:0E:50:14:C1:3E:8E:8B:3B:B3:46:9C:9B:41
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:56:ac:4c:78:c0:5b:05:83:02:be:61:80:55:36:82:dd:e7:
         7d:51:c6:98:20:34:c1:08:6d:fd:50:37:b6:8f:53:61:a9:43:
         03:cb:8d:04:bb:fc:e9:61:3d:f0:5b:1c:72:7b:2a:a4:e9:11:
         32:ce:a9:a2:0e:a3:74:d0:1a:c3:08:ab:08:20:ae:f5:4b:77:
         a9:be:6c:75:fb:37:38:03:06:dc:4d:d8:89:56:7b:a9:c7:3d:
         93:c0:19:f6:9e:87:52:24:3f:b7:3a:66:ef:01:ae:b9:94:5d:
         f2:60:1d:ff:88:a6:a2:a2:df:ff:5e:8b:c1:df:a3:2e:91:d5:
         cc:3a:ef:26:69:c2:8d:f8:4c:d1:cb:d8:b3:54:56:71:14:e7:
         0d:25:57:b6:33:0a:98:96:f5:15:91:32:ed:a4:f0:3c:cd:6c:
         62:5c:c5:de:ae:bc:0e:2a:0e:ae:d5:99:ae:6b:a0:16:47:b9:
         9b:a5:0c:c6:1f:f8:39:0e:1a:9b:9f:a2:4c:1f:2d:d0:0c:83:
         75:0c:7f:e5:ed:bc:9b:71:63:50:94:cf:fd:88:bb:ff:98:7f:
         d2:d0:2c:22:55:8c:79:25:2e:1a:e5:b2:9c:fe:f4:23:5f:fb:
         57:7b:ee:f0:5a:8a:37:aa:02:10:b5:0a:a2:69:cd:a9:be:e8:
         ea:e9:e6:4f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNRirmKrLEN0sI1fyH4VltPaIjPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNTA1MDkxMDQ1MDFaFw0yNjA1MDgxMDUwMDFaMDMxMTAvBgNV
BAMTKDA3N0VBMEExQjFGRDY2MEU1MDE0QzEzRThFOEIzQkIzNDY5QzlCNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDrl3gO3eOd9PgKLNxTKlhJTb
pe9wxu4p9pcu++h4e8hiWxt5+lx5RBgGAGC/UEc8XETinH1H9Bxg2FlPLQSdw1uC
Vciw6mazTbtrboIx5v5/G4dYmtMAf+oWTkLw24SPyjP1GxGkoDs0jSuGLwmVzKAz
4D1oINtkI/KQGFmVaF9FzTv9FXQApJs/5IEq5GCheHRo+Ax9Fidvyn8qN3O9TKcc
4rco4l4N7wbJnduJ8CnugIMmPo2OZizsloudf4NEDF7HwhcLFeQlkjpblG+nKWMw
H1sO9tS+6tb1bT1E5ebsWquUIeu0JQNaD4bnUuuk6YettUlVjGlKXObPZLfzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUB36gobH9Zg5QFME+jos7s0acm0EwHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMyMzAzMDJlMzMzNTJlMzEzNTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgjmDAN
BgkqhkiG9w0BAQsFAAOCAQEASVasTHjAWwWDAr5hgFU2gt3nfVHGmCA0wQht/VA3
to9TYalDA8uNBLv86WE98FsccnsqpOkRMs6pog6jdNAawwirCCCu9Ut3qb5sdfs3
OAMG3E3YiVZ7qcc9k8AZ9p6HUiQ/tzpm7wGuuZRd8mAd/4imoqLf/16Lwd+jLpHV
zDrvJmnCjfhM0cvYs1RWcRTnDSVXtjMKmJb1FZEy7aTwPM1sYlzF3q68DioOrtWZ
rmugFke5m6UMxh/4OQ4am5+iTB8t0AyDdQx/5e28m3FjUJTP/Yi7/5h/0tAsIlWM
eSUuGuWynP70I1/7V3vu8FqKN6oCELUKomnNqb7o6unmTw==
-----END CERTIFICATE-----
Generated at Sun May 18 03:43:31 2025 by rpki-client