Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343534.roa
File:                     3230302e33352e3135342e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          nKqmdI3GuOb6lVIGe+6LTi7LDA3SVehVKMhBYwS0rco=
Subject key identifier:   24:A8:BF:79:53:A3:C8:90:15:2B:8F:2C:9D:51:B3:7C:AA:2B:8F:BD
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       59FF429FC55B9ABBA6E19C635C12F592AD24096B
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343534.roa
Signing time:             Wed 02 Apr 2025 18:50:00 +0000
ROA not before:           Wed 02 Apr 2025 18:45:00 +0000
ROA not after:            Wed 01 Apr 2026 18:50:00 +0000
asID:                     20454
IP address blocks:        200.35.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ff:42:9f:c5:5b:9a:bb:a6:e1:9c:63:5c:12:f5:92:ad:24:09:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Apr  2 18:45:00 2025 GMT
            Not After : Apr  1 18:50:00 2026 GMT
        Subject: CN=24A8BF7953A3C890152B8F2C9D51B37CAA2B8FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:99:ed:47:b6:85:16:56:25:5c:c0:2e:ff:
                    f8:b1:82:7b:94:8e:d4:d0:28:74:69:8e:f3:5b:5d:
                    44:f9:b7:9a:66:a4:a2:86:2b:63:1f:db:9b:6a:ae:
                    72:6c:a7:fa:7f:2a:1f:a2:e4:33:34:01:9c:7c:9d:
                    5f:a9:6d:5a:b5:99:59:f4:95:0b:18:51:3c:15:bd:
                    b7:89:76:87:da:f2:de:b8:4a:fd:a7:bc:8e:08:b1:
                    cc:f3:b1:57:ed:50:19:b8:e5:62:97:76:98:3e:02:
                    b2:48:98:cb:93:36:14:5f:0a:91:ae:8b:7e:fe:3d:
                    94:e1:3b:58:17:8e:51:b4:3b:9b:30:6a:2c:3f:34:
                    a3:6b:56:14:ad:68:46:3d:9b:a1:b9:d1:e4:82:2b:
                    86:de:47:8e:9f:85:d2:27:a2:b5:30:b3:b4:84:ee:
                    26:2f:01:ec:17:7e:3b:15:2e:91:fb:e1:f4:5a:86:
                    fe:c6:c6:79:5c:99:d1:41:75:0b:92:d8:64:d1:3d:
                    89:0a:0e:7e:80:c7:8b:59:93:30:de:03:62:99:0c:
                    c0:98:09:20:5c:49:aa:94:24:13:ed:aa:de:78:f0:
                    83:29:fb:c6:a6:08:8a:a4:4b:04:f4:a1:07:d4:53:
                    c6:1f:00:be:f6:91:62:d5:84:8d:72:09:e7:ff:d9:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A8:BF:79:53:A3:C8:90:15:2B:8F:2C:9D:51:B3:7C:AA:2B:8F:BD
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:67:24:06:1c:2e:80:a9:41:ce:61:b6:c7:03:e8:cb:c6:5d:
         83:82:7b:01:be:5d:79:b7:ae:00:14:ae:20:1b:7b:64:2d:b3:
         49:d5:23:0e:5d:d5:1d:9d:2f:4f:66:5b:24:3c:4d:83:a8:af:
         35:3e:5f:b5:f0:c2:b2:4b:3f:1e:45:0c:99:0d:8a:b7:d3:c5:
         a2:97:c6:97:8d:a1:dc:21:d8:93:a8:7f:c5:12:0c:1b:8d:14:
         99:53:56:81:9c:36:a1:d5:cb:43:38:83:9b:c5:11:2c:fc:3a:
         c4:7b:c5:f3:7f:98:43:7b:29:9d:45:f5:ca:68:e6:7a:70:43:
         0b:1b:ed:e2:c5:e6:12:4f:b9:d9:33:85:43:8e:d3:4b:ba:7e:
         51:04:8d:9a:9f:a3:63:a3:c1:fc:03:a3:93:ea:45:6f:af:2c:
         93:3a:94:ef:cc:2f:37:c2:e0:ce:1b:24:22:68:72:a2:a1:18:
         4f:2f:cd:6c:0a:ec:4c:43:8c:50:a4:01:af:ce:53:73:f3:b0:
         12:fb:fa:d3:95:17:de:be:c9:7f:0f:ae:82:da:16:8f:41:93:
         98:c5:fd:40:14:69:bc:f5:12:04:e3:26:82:4b:7f:1b:b4:aa:
         03:3d:69:0c:66:7e:ee:f5:4c:ca:e1:5c:66:02:0d:b2:d5:ad:
         95:0c:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net