Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3233312e302f32342d3234203d3e203232333133.roa
File:                     3230302e33352e3233312e302f32342d3234203d3e203232333133.roa (raw, json)
Hash identifier:          mTks6SQSiIGxtUxRrPfL9mnjLXJ5efxCaUcnbesD2ls=
Subject key identifier:   DC:AD:03:0C:E5:D6:5F:90:20:68:F6:99:B1:EC:48:40:11:F6:29:79
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       73E1DE7EF4641573B45D7ECDFD729BA05C979925
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3233312e302f32342d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:50 +0000
ROA not before:           Mon 28 Apr 2025 20:11:50 +0000
ROA not after:            Mon 27 Apr 2026 20:16:50 +0000
asID:                     22313
IP address blocks:        200.35.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e1:de:7e:f4:64:15:73:b4:5d:7e:cd:fd:72:9b:a0:5c:97:99:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:50 2025 GMT
            Not After : Apr 27 20:16:50 2026 GMT
        Subject: CN=DCAD030CE5D65F902068F699B1EC484011F62979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:79:07:e1:22:4f:b3:34:0b:f0:36:33:4b:
                    29:0f:90:be:9f:32:74:4c:75:58:f6:1c:94:ec:1b:
                    23:a1:58:ec:04:d0:63:8f:79:c7:51:2e:2e:29:93:
                    dc:7d:b5:62:9b:28:26:92:d7:25:1e:6f:05:fd:b3:
                    10:07:50:bc:9d:4e:21:aa:1c:9b:f0:cf:f9:12:e2:
                    b3:c6:43:2c:c4:bf:2c:74:32:2f:ca:8b:cd:12:69:
                    c1:66:38:b6:a9:14:4a:a8:f7:db:5d:e0:12:4d:ba:
                    ad:9f:21:06:6e:99:c0:29:a8:18:f2:53:8d:a9:2d:
                    b5:f8:ee:df:58:31:49:fd:ed:56:59:4d:9b:11:a8:
                    97:40:b3:bf:df:11:1c:39:c7:3d:ef:81:80:c7:51:
                    1a:c4:f2:b3:0e:2d:09:01:95:98:35:80:63:c2:a8:
                    70:11:c8:73:20:e5:5a:be:45:3e:43:32:b1:16:8c:
                    f1:95:b2:58:03:ae:f7:c3:20:31:1b:d2:2e:0c:0c:
                    6a:40:35:4e:c2:74:8e:b8:cc:88:b4:1e:ae:5f:6d:
                    6b:0b:a3:bc:3f:cc:c6:ec:dd:9a:63:9a:b1:32:6e:
                    6f:a4:ad:f5:cc:e9:06:e1:5c:c4:7b:93:a4:89:09:
                    e5:f6:e7:52:d1:b8:01:2a:3a:92:bc:89:07:c1:6f:
                    6d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AD:03:0C:E5:D6:5F:90:20:68:F6:99:B1:EC:48:40:11:F6:29:79
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3233312e302f32342d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c5:57:19:65:38:8f:b8:76:8a:3c:15:25:42:70:b5:d7:65:
         b3:f1:d4:02:70:bd:18:41:39:b7:9d:00:1b:f2:f1:84:f5:89:
         3f:bc:c0:07:18:9c:6a:ce:74:5d:21:b3:09:ae:e7:31:a6:04:
         f7:32:a1:5c:ab:34:9c:65:5c:06:c6:16:32:94:37:f1:14:65:
         15:64:64:e3:eb:b9:72:25:e9:53:cf:c5:37:f5:e1:ef:06:d7:
         8c:80:35:4b:a9:ca:87:b8:33:60:5f:4b:9e:93:36:6f:56:f8:
         ef:3a:4d:bc:a5:02:a4:9f:a8:24:62:09:82:50:26:36:d5:1f:
         4a:83:a5:fd:59:41:3d:4f:05:bc:55:c8:08:11:43:43:97:e1:
         f8:c9:a7:a6:1a:f4:47:b9:d5:35:40:f0:06:f5:da:63:d7:87:
         d2:ed:52:60:42:c2:9c:b1:5e:ce:a8:79:0e:fe:7b:57:4d:d4:
         6a:18:c0:c1:33:70:39:e0:4d:8d:47:92:e6:4b:21:6a:df:13:
         f4:d5:da:12:85:1f:96:b2:72:78:88:cc:42:e4:bc:e1:96:1c:
         e2:31:93:87:d2:4c:40:71:c9:63:23:48:70:93:39:df:13:9d:
         2f:4a:b4:77:fb:9e:ac:24:9b:f5:c9:cb:65:f4:b4:92:4d:76:
         fc:32:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:41 2025 by rpki-client on console.sobornost.net