Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343733.roa
File:                     3230302e33352e3135342e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          2SbnHVuoMkquIjfcjVlEwQSay4DiwD8r5olG5In6vUU=
Subject key identifier:   6A:0A:F6:FA:C1:4D:55:D0:4F:55:0F:EC:B2:FC:5B:DF:71:E7:5B:86
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       2017B02189B3AF9353E894247381514D0ECAA95C
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343733.roa
Signing time:             Fri 09 May 2025 10:50:01 +0000
ROA not before:           Fri 09 May 2025 10:45:01 +0000
ROA not after:            Fri 08 May 2026 10:50:01 +0000
asID:                     20473
IP address blocks:        200.35.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:17:b0:21:89:b3:af:93:53:e8:94:24:73:81:51:4d:0e:ca:a9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 10:45:01 2025 GMT
            Not After : May  8 10:50:01 2026 GMT
        Subject: CN=6A0AF6FAC14D55D04F550FECB2FC5BDF71E75B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:d7:b1:23:49:bc:02:ef:0f:40:7a:70:3d:
                    a1:d2:f0:38:62:b5:5b:b6:2c:f1:69:7d:60:5a:25:
                    ea:c5:fb:71:4c:63:74:ad:da:28:7d:d8:35:f2:4f:
                    7c:9b:49:0e:4b:cb:38:39:aa:c9:2e:a4:99:22:b4:
                    54:62:04:e3:70:b1:88:2f:f6:b1:e8:13:ce:f7:d6:
                    8d:a2:43:e1:11:d0:86:4a:66:28:d4:07:20:8d:4c:
                    c0:06:0a:e2:cf:88:17:b9:5f:b9:53:36:69:77:4d:
                    bc:c2:55:2b:8b:5a:b2:4d:92:de:97:4a:f7:74:4b:
                    c3:77:fd:fb:58:33:16:bd:e0:d1:48:cb:21:df:b8:
                    b8:a8:5f:af:43:f3:fd:c6:84:98:b5:b5:a1:78:00:
                    a7:3a:be:15:ad:a9:bf:ae:f6:c9:48:2d:98:4b:7b:
                    95:81:c0:78:4c:38:d8:49:04:c3:d2:35:43:d2:6f:
                    5e:91:b3:c9:45:da:0b:e5:1e:89:87:6a:b5:ef:57:
                    ec:1f:3e:e1:12:e4:f7:c8:6f:eb:22:69:a7:f8:0e:
                    43:68:c5:7d:8e:a0:04:b8:f1:91:f6:4a:69:9a:da:
                    80:75:59:dc:f4:9e:2d:af:d0:f0:b8:8e:8d:af:6a:
                    9d:27:fc:d2:66:a1:cf:22:d0:c8:1a:f4:e6:da:a4:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0A:F6:FA:C1:4D:55:D0:4F:55:0F:EC:B2:FC:5B:DF:71:E7:5B:86
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:17:e1:ae:ca:6b:ba:26:2f:5b:af:74:97:d8:a6:7f:89:8d:
         8a:93:82:a8:a6:0a:6a:cd:8a:bd:04:10:94:06:51:c3:87:17:
         0f:74:82:c8:83:17:09:74:1c:0b:97:31:40:d4:64:5f:84:4c:
         85:16:72:33:0e:81:e7:dd:5b:8e:5d:a7:ce:cb:05:66:ad:01:
         49:2b:e4:7f:2f:b7:55:27:f1:5d:6c:a0:2a:a3:ec:eb:0d:1d:
         07:da:95:cb:cc:08:bd:ed:4a:41:db:de:95:ac:8f:d0:af:82:
         e9:76:8c:f6:10:62:62:4d:0d:bc:19:cc:d6:b1:28:ba:38:5a:
         59:ae:93:4a:be:41:a1:b5:dd:85:19:40:ae:79:a4:d1:34:96:
         a3:b8:97:5e:3d:fa:ad:8d:d9:da:1d:04:cd:19:e8:49:16:52:
         90:2c:8b:d9:d2:68:04:21:47:93:37:6c:32:39:92:a2:7e:7c:
         39:d6:59:b2:f9:41:51:e8:12:0d:38:5b:3b:a4:1c:12:dd:d5:
         9d:b5:a5:b4:94:45:7f:0c:82:53:6c:53:d6:9b:52:4e:d5:08:
         16:30:07:40:9f:f0:df:d3:0f:61:a5:6a:fb:c1:ff:2c:5d:9d:
         bb:bb:14:5f:59:f3:6d:ed:7e:e9:27:fa:6b:a3:f8:31:0c:be:
         52:43:5c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:19:13 2025 by rpki-client