Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203230343733.roa
File:                     3230302e33352e3135352e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          xebPLJil24CtBndtS1GkVKl8oW0MJ2IEPZ8KO9/WaQM=
Subject key identifier:   13:D8:56:DB:C0:B0:52:6D:A6:BA:64:D7:0E:98:F0:75:DB:98:1B:17
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       31618B16786225276EBB63C16EB72C96AC941774
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203230343733.roa
Signing time:             Fri 09 May 2025 10:50:01 +0000
ROA not before:           Fri 09 May 2025 10:45:01 +0000
ROA not after:            Fri 08 May 2026 10:50:01 +0000
asID:                     20473
IP address blocks:        200.35.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:61:8b:16:78:62:25:27:6e:bb:63:c1:6e:b7:2c:96:ac:94:17:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: May  9 10:45:01 2025 GMT
            Not After : May  8 10:50:01 2026 GMT
        Subject: CN=13D856DBC0B0526DA6BA64D70E98F075DB981B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0c:dd:16:db:17:ec:ba:1f:f2:12:d7:69:b5:
                    2a:59:78:51:50:fa:94:0e:59:f1:bc:42:d8:ef:84:
                    9f:04:8b:14:42:93:27:2d:22:cf:e6:ea:44:7b:d6:
                    c2:9e:05:ae:87:ff:da:06:80:d4:00:a1:a7:37:3f:
                    ce:86:a8:cb:0a:0a:9f:eb:71:a7:e7:6f:11:2a:3f:
                    f7:96:88:e7:5c:17:41:a6:e0:c8:c1:b2:97:36:ac:
                    62:46:99:bb:92:04:7c:e7:ea:02:4a:cb:21:0d:d2:
                    40:1e:5a:21:cf:5d:8d:52:91:e0:76:ea:aa:49:df:
                    6a:fb:97:d4:36:ae:84:10:4c:03:2b:67:32:5e:a1:
                    cc:06:2c:00:4f:91:e6:42:ae:4c:f4:e3:e8:8a:d2:
                    2d:c3:ae:11:a0:4e:01:75:c9:69:74:ca:6f:e3:cd:
                    94:55:c8:6e:2b:2a:78:5d:d6:fb:95:7c:b5:97:5c:
                    b9:b3:5c:1a:9d:cb:9e:48:a5:81:2f:5e:5d:2b:34:
                    34:7c:27:e1:cd:70:9b:4a:35:7c:3e:53:da:b8:17:
                    64:2d:18:ab:0e:31:7c:67:db:33:fa:ee:15:a2:87:
                    fd:7b:19:5b:49:49:f9:06:e3:0b:c6:16:af:fb:93:
                    52:fe:35:08:76:30:29:ea:de:10:aa:1d:70:9d:ae:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D8:56:DB:C0:B0:52:6D:A6:BA:64:D7:0E:98:F0:75:DB:98:1B:17
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:20:85:d3:11:35:9c:97:77:d5:7c:99:0c:7c:17:37:5c:a6:
         60:82:80:17:e7:ce:ea:9e:0c:11:b3:ad:b8:9b:ce:b2:1b:93:
         51:53:d4:50:43:ef:ed:1d:ef:6c:45:8e:b0:33:ca:44:e7:2f:
         62:58:c0:38:38:9d:d6:f5:dc:ef:de:18:77:b8:6f:7f:78:dd:
         c1:9d:72:5b:aa:94:76:01:2d:f5:39:5b:2f:7a:36:55:5e:e8:
         9c:fa:c4:10:29:72:d8:05:8d:b0:e9:13:b0:c9:5c:37:d1:93:
         57:3d:2e:90:25:7f:90:8f:3b:3a:1f:ec:4c:78:ca:65:c3:1a:
         dd:2e:f3:1b:e5:49:40:c6:b4:6b:b1:aa:de:c1:38:fd:4b:fa:
         37:5a:52:de:0e:c6:7c:aa:03:e3:ea:fb:46:1c:26:0f:59:2b:
         f2:ae:c5:1e:3e:77:d0:fe:52:9e:ed:3f:2b:d3:8e:2e:da:8a:
         9c:fb:5d:89:c2:14:f8:cd:36:37:52:73:50:fa:8e:53:22:8c:
         c3:06:68:0f:b6:a8:0e:59:3e:cc:39:5c:9a:ec:ed:ff:65:53:
         46:82:a7:17:f7:67:42:fe:4c:91:d8:44:d4:c3:18:c4:be:b8:
         70:78:1f:fe:fe:2b:3f:fc:19:25:5c:0c:9b:ee:f7:fa:0e:d9:
         65:07:c3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:05:15 2025 by rpki-client