Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139382e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3139382e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          Bf3FUy0aDaszp3UEyxcASF6PKXXlq9Oy1Z5hb2VJdAk=
Subject key identifier:   A7:5B:70:D9:2B:4C:DB:08:6E:48:83:26:E3:F1:A6:59:D0:F8:34:2A
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       4EE2ED14E187CAD975F92932968FF0D9CFEF05C9
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139382e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:41 +0000
ROA not before:           Mon 28 Apr 2025 20:11:41 +0000
ROA not after:            Mon 27 Apr 2026 20:16:41 +0000
asID:                     22313
IP address blocks:        200.35.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e2:ed:14:e1:87:ca:d9:75:f9:29:32:96:8f:f0:d9:cf:ef:05:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:41 2025 GMT
            Not After : Apr 27 20:16:41 2026 GMT
        Subject: CN=A75B70D92B4CDB086E488326E3F1A659D0F8342A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:25:5d:1e:ee:00:33:c9:a9:53:af:b0:4e:
                    3b:03:cc:22:92:fb:6c:f7:97:ca:9c:77:4b:04:79:
                    2e:20:c6:75:a7:35:52:a8:05:73:c3:97:38:82:78:
                    59:e7:40:e0:db:c3:81:68:03:15:98:40:81:7d:12:
                    32:ee:a5:15:88:e5:4b:39:71:a9:ac:8e:46:5a:21:
                    af:99:6f:97:96:fe:3b:1f:e7:d3:3f:06:52:24:e1:
                    9b:99:2a:ef:b1:e3:03:ba:c8:d5:95:42:dd:dd:8d:
                    bc:cc:19:0b:47:16:20:43:1a:9e:9c:a5:d3:07:8c:
                    06:89:16:98:00:09:f7:d8:ec:89:1b:39:4d:a0:ed:
                    d5:61:d2:16:a9:61:34:c7:a3:94:28:54:f2:c8:92:
                    7d:d6:f5:37:74:95:05:ba:65:33:52:49:b4:a5:5c:
                    9f:d6:0b:a8:03:34:a0:36:96:0e:9d:90:34:b2:30:
                    65:05:c4:15:aa:eb:39:35:68:0b:21:a7:22:ae:8d:
                    3e:ba:40:30:d9:5d:f8:f0:00:bb:91:33:63:63:9f:
                    31:92:09:9a:fd:9c:f4:78:6f:fc:65:f3:ed:70:f7:
                    09:fa:6b:0e:9e:79:9e:74:6a:c1:ef:ec:ab:15:30:
                    f4:00:c9:11:dc:99:37:0c:70:74:79:66:e7:18:ec:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5B:70:D9:2B:4C:DB:08:6E:48:83:26:E3:F1:A6:59:D0:F8:34:2A
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3139382e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:f2:53:ef:50:7f:2e:c6:a1:49:7c:ac:0f:0a:57:f7:69:85:
         4a:c8:97:1c:ae:77:9c:94:1b:86:9e:86:22:20:e4:ad:c0:30:
         04:1d:82:8c:0d:82:e0:3e:0d:0f:9b:68:ed:e2:1b:d8:16:85:
         83:39:55:ba:3b:9d:97:4c:72:31:b1:94:a0:6c:ba:af:ca:5b:
         08:38:ee:da:e7:4b:e8:f0:12:39:5e:d3:5e:fa:bd:76:2c:4c:
         76:7f:c5:88:42:ee:da:1f:64:b6:64:82:77:6a:c9:e0:74:ac:
         83:5c:4e:a9:d7:1e:82:51:59:ee:04:4b:5c:96:84:8d:03:56:
         0b:68:00:cd:70:71:85:be:44:7b:c4:95:97:2d:d1:cf:bf:0f:
         c8:6d:a0:f5:66:bf:cf:9b:1e:50:1d:e6:ea:5b:ba:9c:1b:1c:
         ea:81:ce:ee:2c:f5:6e:74:22:58:35:b5:f1:9c:d1:ed:f3:fd:
         f2:20:e4:d3:b7:b3:96:4e:31:40:6f:c6:32:45:70:91:39:f2:
         9f:b3:bf:eb:5b:e5:ad:1f:03:51:8b:6c:dd:3a:27:bd:8c:06:
         70:1a:81:a4:23:43:f0:3c:da:91:b6:67:3d:fd:f5:15:8e:15:
         d1:d9:09:63:cb:83:e1:c0:41:10:2e:43:94:aa:82:f4:97:c1:
         ec:f6:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net