Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139362e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3139362e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          fiHlz0EcIp92ADDe0p8XoJ8CPyyoU8A21zYEZLbiwAg=
Subject key identifier:   B0:1E:DE:59:28:01:FE:7E:CE:FB:92:39:7B:6A:7B:CF:FD:B7:73:34
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       7ACB0CED245227FAC0D2FE5F4E0AA75163172E3E
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139362e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:55 +0000
ROA not before:           Mon 28 Apr 2025 20:11:55 +0000
ROA not after:            Mon 27 Apr 2026 20:16:55 +0000
asID:                     22313
IP address blocks:        200.35.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cb:0c:ed:24:52:27:fa:c0:d2:fe:5f:4e:0a:a7:51:63:17:2e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:55 2025 GMT
            Not After : Apr 27 20:16:55 2026 GMT
        Subject: CN=B01EDE592801FE7ECEFB92397B6A7BCFFDB77334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:69:ce:ba:f5:59:a0:69:e4:36:d0:d4:6e:
                    e3:04:35:a3:5d:53:94:75:8a:c9:ff:12:59:5e:e2:
                    cb:92:f8:a4:c5:4f:fe:f4:f8:62:06:61:fd:2e:91:
                    a7:18:c4:6f:bf:d3:f5:af:92:fd:fb:de:1f:ba:94:
                    7a:1e:3e:d0:c2:59:04:73:5e:47:48:b5:84:05:73:
                    0c:cd:86:08:1c:e1:9e:8e:ea:dc:65:f3:b1:85:f9:
                    ec:b0:ae:76:66:e2:db:a2:49:b7:9a:85:57:32:2a:
                    c2:82:60:23:4e:83:1b:f6:7d:3f:6c:6f:97:b1:2f:
                    77:c2:d1:de:91:d7:ba:91:74:0f:7c:81:bc:c5:ad:
                    b0:02:67:99:1b:23:4d:1d:51:7a:36:4d:45:e9:05:
                    1f:83:f0:f0:43:48:ed:55:99:12:b2:f3:67:7d:82:
                    a4:ba:23:98:58:ec:93:da:51:57:5b:e5:68:f9:69:
                    33:40:ba:ec:5a:e3:a5:86:b6:55:7d:05:7f:f2:18:
                    18:f0:5b:93:72:db:31:4c:05:48:f8:21:60:f2:3a:
                    94:ff:75:26:0a:e4:80:01:14:a0:95:bd:c2:ed:3f:
                    bc:70:33:63:35:d4:ee:bf:ec:d3:5f:f6:ec:87:93:
                    97:d1:d4:f1:49:f8:4f:c5:80:7b:5f:35:5c:ef:64:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1E:DE:59:28:01:FE:7E:CE:FB:92:39:7B:6A:7B:CF:FD:B7:73:34
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139362e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:42:42:b6:04:e4:3d:29:29:ed:80:14:02:21:83:9a:6a:b7:
         f5:df:4c:fe:84:d7:d2:1a:9d:94:0b:0c:a7:11:56:db:5f:a0:
         86:90:38:77:20:2e:ca:43:b2:ce:0d:73:28:5d:4d:dc:79:4a:
         18:95:ae:ff:49:ea:47:54:92:55:11:4b:61:29:61:85:42:95:
         af:ef:36:e3:c9:fa:55:df:c8:8a:44:e9:79:c8:cc:ce:17:9a:
         ab:6f:3a:4f:b6:34:94:e0:6a:a6:79:39:1b:7f:f0:f4:06:ba:
         67:c1:12:ad:20:d1:c2:59:2f:06:8a:bc:8f:ee:3e:31:40:24:
         e4:95:27:e3:b0:7d:e1:2b:cd:20:c6:31:54:62:89:57:bc:0b:
         58:c7:d2:6f:c4:91:03:00:ba:de:c5:4a:73:ba:b2:d6:cd:17:
         24:ea:a0:82:5f:4c:02:a7:40:4f:f8:6f:5c:e9:26:49:5c:1b:
         69:f7:0c:e6:bf:f4:e0:aa:3c:82:0d:15:4b:03:c9:43:cc:20:
         e8:ad:1e:2d:32:f2:50:b8:43:39:27:0d:2d:45:f5:30:28:eb:
         31:b4:b8:36:37:fd:66:f5:1d:a7:5c:3a:72:64:e0:de:f4:90:
         33:98:da:c2:29:cc:6c:d4:73:2c:ef:37:5c:6f:a0:e6:53:6c:
         5f:7d:2e:44
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUessM7SRSJ/rA0v5fTgqnUWMXLj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NjI5QTY5NEVGNzIxN0VGM0RFNUUxMjgxMDRDMUUx
NEI0QkVCMzAeFw0yNTA0MjgyMDExNTVaFw0yNjA0MjcyMDE2NTVaMDMxMTAvBgNV
BAMTKEIwMUVERTU5MjgwMUZFN0VDRUZCOTIzOTdCNkE3QkNGRkRCNzczMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaymnOuvVZoGnkNtDUbuMENaNd
U5R1isn/Elle4suS+KTFT/70+GIGYf0ukacYxG+/0/Wvkv373h+6lHoePtDCWQRz
XkdItYQFcwzNhggc4Z6O6txl87GF+eywrnZm4tuiSbeahVcyKsKCYCNOgxv2fT9s
b5exL3fC0d6R17qRdA98gbzFrbACZ5kbI00dUXo2TUXpBR+D8PBDSO1VmRKy82d9
gqS6I5hY7JPaUVdb5Wj5aTNAuuxa46WGtlV9BX/yGBjwW5Ny2zFMBUj4IWDyOpT/
dSYK5IABFKCVvcLtP7xwM2M11O6/7NNf9uyHk5fR1PFJ+E/FgHtfNVzvZCm1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsB7eWSgB/n7O+5I5e2p7z/23czQwHwYDVR0j
BBgwFoAUs2YpppTvchfvPeXhKBBMHhS0vrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDc2ODMxMjlDQTNFODAwRDY5QUY1RjVCMjcxQjE3NkYw
OEE3MjkyQzZDRUFGQzExMDU4REY3RUU5MTMzMTRDLzAvQjM2NjI5QTY5NEVGNzIx
N0VGM0RFNUUxMjgxMDRDMUUxNEI0QkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzY2MjlBNjk0RUY3MjE3RUYz
REU1RTEyODEwNEMxRTE0QjRCRUIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA3NjgzMTI5Q0EzRTgwMEQ2OUFGNUY1QjI3MUIxNzZGMDhBNzI5MkM2
Q0VBRkMxMTA1OERGN0VFOTEzMzE0Qy8wLzMyMzAzMDJlMzMzNTJlMzEzOTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjMzMzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgjxDAN
BgkqhkiG9w0BAQsFAAOCAQEARUJCtgTkPSkp7YAUAiGDmmq39d9M/oTX0hqdlAsM
pxFW21+ghpA4dyAuykOyzg1zKF1N3HlKGJWu/0nqR1SSVRFLYSlhhUKVr+8248n6
Vd/IikTpecjMzheaq286T7Y0lOBqpnk5G3/w9Aa6Z8ESrSDRwlkvBoq8j+4+MUAk
5JUn47B94SvNIMYxVGKJV7wLWMfSb8SRAwC63sVKc7qy1s0XJOqggl9MAqdAT/hv
XOkmSVwbafcM5r/04Ko8gg0VSwPJQ8wg6K0eLTLyULhDOScNLUX1MCjrMbS4Njf9
ZvUdp1w6cmTg3vSQM5jawinMbNRzLO83XG+g5lNsX30uRA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net