Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203132313839.roa
File:                     3230302e33352e3135322e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier:          AD/bsvJPHP0EkIea0kqdxPTtB5LKoF7NIL0ISG5psbI=
Subject key identifier:   C0:5F:A5:80:87:FE:16:1D:60:C6:85:06:88:54:F2:58:33:A8:DF:D2
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       04C21D0E00C41A8A7864EF87197149EDA67A6F4B
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203132313839.roa
Signing time:             Wed 02 Apr 2025 18:50:04 +0000
ROA not before:           Wed 02 Apr 2025 18:45:04 +0000
ROA not after:            Wed 01 Apr 2026 18:50:04 +0000
asID:                     12189
IP address blocks:        200.35.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c2:1d:0e:00:c4:1a:8a:78:64:ef:87:19:71:49:ed:a6:7a:6f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:04 2025 GMT
            Not After : Apr  1 18:50:04 2026 GMT
        Subject: CN=C05FA58087FE161D60C685068854F25833A8DFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:d9:f8:8c:5d:2c:13:5f:b9:60:c3:ae:3f:
                    fd:dc:c7:e0:66:d4:25:ea:98:15:4d:98:02:87:d9:
                    7a:3a:03:8c:96:f8:1f:90:5f:82:9c:c3:c1:3e:3c:
                    17:05:3c:03:06:18:79:65:07:cd:8d:4e:f5:a0:e7:
                    c8:ad:b6:6d:95:cb:19:99:6c:9b:b5:ed:7b:30:d0:
                    57:05:63:5a:a6:8d:60:07:25:51:3a:79:66:f2:f0:
                    fc:02:a0:89:fb:6c:0b:2f:fb:57:5c:1f:09:96:7d:
                    38:3f:1a:25:3f:2f:35:98:b2:86:b8:4b:49:f3:41:
                    42:fc:96:7c:b9:8b:db:9a:0f:e3:22:e5:0b:93:39:
                    40:02:eb:ba:ee:88:7f:b2:87:f9:e3:f9:da:b1:39:
                    cf:24:17:06:70:5a:48:12:a4:5c:b4:7a:ab:71:76:
                    4f:56:aa:fb:de:30:36:d8:a2:ea:50:d0:d6:9b:fe:
                    de:6a:e6:dd:38:cb:ae:5c:68:83:1e:38:fa:fa:53:
                    60:22:03:a5:aa:63:81:f4:05:40:12:be:53:8c:21:
                    70:a3:c7:bb:95:66:a5:17:c3:6c:31:b7:48:33:3c:
                    b4:e3:e6:f6:63:10:dc:49:62:dd:72:03:38:b8:b3:
                    7e:12:bd:36:00:0d:e2:9e:7a:8f:11:81:0b:c9:a9:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5F:A5:80:87:FE:16:1D:60:C6:85:06:88:54:F2:58:33:A8:DF:D2
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135322e302f32342d3234203d3e203132313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:c9:cc:8b:e3:aa:6e:6a:ef:4e:1e:9b:19:8c:82:4c:94:
         4b:8c:61:6f:22:72:f1:16:3c:f5:e2:b4:2a:43:fa:da:4e:d0:
         2a:fb:b4:e4:b1:72:61:c5:9a:b3:b5:79:f4:50:80:31:ad:e4:
         7a:3f:ff:96:cf:d5:52:b2:cc:c3:bd:41:4b:31:9d:8f:09:b2:
         71:90:7e:2c:20:38:ff:ed:48:be:80:1c:b9:98:23:4c:e9:fb:
         ac:9f:ea:c7:c3:e5:45:15:e6:35:46:e6:fd:f7:f5:02:c7:66:
         3a:c0:64:2d:db:b7:d1:7e:e5:b7:e9:46:d9:f9:33:49:9f:2e:
         25:d8:6f:c6:f8:69:38:4d:53:f7:d3:66:0b:fc:d3:12:ff:ee:
         01:65:f6:30:8c:b3:99:24:e8:e1:b0:63:3e:97:fe:48:72:18:
         1e:ce:7d:fc:c8:18:d1:ea:7e:2e:1a:6f:31:f5:dc:b4:f6:6d:
         48:4b:c1:98:26:23:6e:76:e2:4f:82:28:68:c4:3c:c9:97:08:
         66:99:26:19:af:13:4c:65:63:3c:00:fd:d5:5e:58:7b:65:42:
         c3:3d:85:27:eb:22:a6:45:d5:c0:34:00:48:10:01:82:30:85:
         69:73:5b:25:89:4c:9a:18:b2:29:85:af:27:43:b9:9c:6a:91:
         eb:6f:84:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net