Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134332e302f32342d3234203d3e203238303839.roa
File:                     3230302e33352e3134332e302f32342d3234203d3e203238303839.roa (raw, json)
Hash identifier:          stVEivIn7omEQn6AxiNkRc3JnW94LlaJ4fmFy3Bo864=
Subject key identifier:   1E:C8:8D:FE:20:41:0C:6D:5F:16:88:45:B6:6B:49:C6:C4:CC:39:BD
Certificate issuer:       /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial:       0CC5B9EF256433AE07C9FE844F714EDE30354CAF
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134332e302f32342d3234203d3e203238303839.roa
Signing time:             Mon 11 Aug 2025 20:35:28 +0000
ROA not before:           Mon 11 Aug 2025 20:30:28 +0000
ROA not after:            Mon 10 Aug 2026 20:35:28 +0000
asID:                     28089
IP address blocks:        200.35.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c5:b9:ef:25:64:33:ae:07:c9:fe:84:4f:71:4e:de:30:35:4c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
        Validity
            Not Before: Aug 11 20:30:28 2025 GMT
            Not After : Aug 10 20:35:28 2026 GMT
        Subject: CN=1EC88DFE20410C6D5F168845B66B49C6C4CC39BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ea:ca:25:7c:b4:e6:a3:9d:36:39:17:b6:ac:
                    ef:cd:8d:00:09:fb:ea:05:ae:7b:3c:24:44:61:bf:
                    8b:e7:19:33:8f:f5:1e:73:ab:e1:e5:67:4a:d7:24:
                    a4:80:39:d8:59:a4:59:ea:25:fc:e0:43:a8:8f:c1:
                    e5:53:1f:75:e4:85:13:38:b9:d2:58:45:ac:4c:3d:
                    14:fa:dc:25:b0:29:ac:67:54:bb:35:c6:54:26:f9:
                    48:80:b2:0c:c3:14:3c:dc:a8:1a:65:80:eb:19:08:
                    6b:27:6c:f5:6b:22:8e:fe:c3:5f:b2:12:83:bd:1d:
                    e0:93:9d:33:bc:db:31:98:be:0b:95:15:8c:15:b8:
                    21:e6:f4:2d:37:f9:cd:85:40:88:ef:4c:d9:64:a6:
                    90:08:db:1d:55:be:cb:8d:14:df:8c:cf:2a:ec:27:
                    ad:3d:38:37:9f:12:7d:fe:9b:3e:64:43:5c:e4:86:
                    3d:27:b8:6b:99:f8:f0:46:03:7f:a7:ff:5b:27:23:
                    86:2c:df:b1:b0:d5:2b:62:02:4f:cb:e9:8e:2e:d7:
                    a2:4e:9d:be:5b:6c:c9:2c:9a:19:0e:9b:42:a4:d5:
                    e2:5d:c9:2d:ec:d3:a7:07:98:2e:f6:43:fc:2c:26:
                    46:7d:63:35:5f:a7:42:ff:09:74:41:30:d2:e8:bc:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C8:8D:FE:20:41:0C:6D:5F:16:88:45:B6:6B:49:C6:C4:CC:39:BD
            X509v3 Authority Key Identifier:
                keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134332e302f32342d3234203d3e203238303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:8e:9e:43:7d:92:4a:0e:70:99:0a:5d:b1:3f:cc:bf:63:a9:
         ab:f2:ad:f3:a4:30:9e:a9:cd:c8:ad:19:76:fc:d4:1e:f6:11:
         d4:37:78:d1:78:32:a4:3e:19:59:33:bf:b7:98:3b:05:27:04:
         b7:5d:6e:b7:1a:fc:59:26:31:c2:e7:a8:78:52:76:b7:57:9d:
         b1:f9:fc:1d:71:98:9d:b5:e0:ea:de:68:2b:8b:fc:3e:6b:c5:
         e8:11:5e:61:2c:27:e6:00:10:f5:ae:54:c6:6a:fb:db:5d:ec:
         19:db:30:57:37:15:41:28:59:2d:93:46:5c:b9:fd:1f:de:2b:
         4b:be:b3:8e:42:04:74:c0:2b:94:c1:f0:6f:11:35:6f:4a:47:
         1b:58:31:b0:52:da:58:a0:d9:cb:bf:00:38:f1:a4:ed:bf:35:
         c4:ca:97:7b:4e:b8:dc:0e:33:19:45:12:ed:74:c7:f4:d8:b2:
         28:c1:4e:32:86:04:15:ca:09:3e:a7:28:1b:a3:d8:2a:7a:ba:
         ec:ce:08:e3:19:e9:73:d7:cc:7e:75:b8:8d:f3:95:6c:81:35:
         6f:7e:fa:0c:54:78:28:6f:a2:bc:ce:1b:62:24:ae:80:79:15:
         67:9e:d8:fb:3e:84:36:55:f8:8e:c7:11:41:af:fa:6a:89:78:
         7b:f8:22:a0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDMW57yVkM64Hyf6ET3FO3jA1TK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI5Q0E3QkI0MzgyQTY0ODMzMkZEMzc3Njg5RTA0MDE2
NkM1MDVCNTAeFw0yNTA4MTEyMDMwMjhaFw0yNjA4MTAyMDM1MjhaMDMxMTAvBgNV
BAMTKDFFQzg4REZFMjA0MTBDNkQ1RjE2ODg0NUI2NkI0OUM2QzRDQzM5QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt6solfLTmo502ORe2rO/NjQAJ
++oFrns8JERhv4vnGTOP9R5zq+HlZ0rXJKSAOdhZpFnqJfzgQ6iPweVTH3XkhRM4
udJYRaxMPRT63CWwKaxnVLs1xlQm+UiAsgzDFDzcqBplgOsZCGsnbPVrIo7+w1+y
EoO9HeCTnTO82zGYvguVFYwVuCHm9C03+c2FQIjvTNlkppAI2x1VvsuNFN+Mzyrs
J609ODefEn3+mz5kQ1zkhj0nuGuZ+PBGA3+n/1snI4Ys37Gw1StiAk/L6Y4u16JO
nb5bbMksmhkOm0Kk1eJdyS3s06cHmC72Q/wsJkZ9YzVfp0L/CXRBMNLovBzFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHsiN/iBBDG1fFohFtmtJxsTMOb0wHwYDVR0j
BBgwFoAUgpynu0OCpkgzL9N3aJ4EAWbFBbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTIwMjlGNjM3NDUwNjc4NUYzOTExMTFGMTA0RTY1NjA3
MDFBOUE0RDI3QkQzNkZDRkZGODE2QzBGRTYyNkQ4LzAvODI5Q0E3QkI0MzgyQTY0
ODMzMkZEMzc3Njg5RTA0MDE2NkM1MDVCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjlDQTdCQjQzODJBNjQ4MzMy
RkQzNzc2ODlFMDQwMTY2QzUwNUI1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDEyMDI5RjYzNzQ1MDY3ODVGMzkxMTExRjEwNEU2NTYwNzAxQTlBNEQy
N0JEMzZGQ0ZGRjgxNkMwRkU2MjZEOC8wLzMyMzAzMDJlMzMzNTJlMzEzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgjjzAN
BgkqhkiG9w0BAQsFAAOCAQEAVY6eQ32SSg5wmQpdsT/Mv2Opq/Kt86QwnqnNyK0Z
dvzUHvYR1Dd40XgypD4ZWTO/t5g7BScEt11utxr8WSYxwueoeFJ2t1edsfn8HXGY
nbXg6t5oK4v8PmvF6BFeYSwn5gAQ9a5Uxmr7213sGdswVzcVQShZLZNGXLn9H94r
S76zjkIEdMArlMHwbxE1b0pHG1gxsFLaWKDZy78AOPGk7b81xMqXe0643A4zGUUS
7XTH9NiyKMFOMoYEFcoJPqcoG6PYKnq67M4I4xnpc9fMfnW4jfOVbIE1b376DFR4
KG+ivM4bYiSugHkVZ57Y+z6ENlX4jscRQa/6aol4e/gioA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:28:50 2025 by rpki-client