Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3233362e302f32322d3234203d3e203232333133.roa
File:                     3230302e33352e3233362e302f32322d3234203d3e203232333133.roa (raw, json)
Hash identifier:          x1wvZCYoxcRNKJ57v5wUQDm67SZ8wC0cP9bx2aXNFzI=
Subject key identifier:   62:5F:BA:A7:D4:62:72:49:E5:E4:49:5C:C8:F6:E4:58:A8:5F:60:8B
Certificate issuer:       /CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
Certificate serial:       7FAFD24BF9B29C033F66938672EFBA224977C178
Authority key identifier: B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3233362e302f32322d3234203d3e203232333133.roa
Signing time:             Mon 28 Apr 2025 20:16:36 +0000
ROA not before:           Mon 28 Apr 2025 20:11:36 +0000
ROA not after:            Mon 27 Apr 2026 20:16:36 +0000
asID:                     22313
IP address blocks:        200.35.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:af:d2:4b:f9:b2:9c:03:3f:66:93:86:72:ef:ba:22:49:77:c1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36629A694EF7217EF3DE5E128104C1E14B4BEB3
        Validity
            Not Before: Apr 28 20:11:36 2025 GMT
            Not After : Apr 27 20:16:36 2026 GMT
        Subject: CN=625FBAA7D4627249E5E4495CC8F6E458A85F608B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:be:cd:ab:55:bb:40:0e:45:77:2f:f2:af:
                    04:cc:04:85:0b:1e:f8:dd:9c:c5:2f:45:93:b0:e4:
                    29:32:0d:e1:0b:d2:77:d3:f0:b7:86:d8:1d:35:51:
                    82:02:50:3e:a8:aa:8a:ae:ec:36:f0:68:94:69:2f:
                    b9:1b:ec:f9:6e:98:c8:a4:6d:e8:59:c0:df:46:fd:
                    d4:48:08:8f:66:a6:7d:27:5f:d3:ee:21:3d:1a:e2:
                    2f:c5:4c:82:2c:d9:65:a1:15:5f:fb:5b:85:84:43:
                    45:fd:4c:fd:37:64:9c:13:28:94:c8:ce:4a:02:c4:
                    05:88:18:96:17:8c:c6:6e:6f:30:7d:24:f0:8a:c3:
                    fc:35:e4:61:2c:4e:df:4b:d7:e6:4e:91:b4:b2:11:
                    b3:28:b9:b8:46:39:96:04:c3:c8:55:82:28:76:12:
                    eb:01:39:ce:fb:1e:26:d9:46:06:b1:27:60:68:46:
                    5a:8c:c8:cc:58:fa:ba:27:ea:07:d7:da:b5:0e:9e:
                    1e:c5:5f:29:5a:a0:26:b1:f6:0b:38:cd:6b:4b:f2:
                    06:3f:46:4d:e8:11:71:2b:73:c5:36:7a:0b:ac:97:
                    16:a9:f7:33:f3:b2:41:f7:2f:12:79:05:dd:ff:5a:
                    f3:b0:dd:9a:d0:36:1a:e8:51:b7:d2:e1:98:94:46:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5F:BA:A7:D4:62:72:49:E5:E4:49:5C:C8:F6:E4:58:A8:5F:60:8B
            X509v3 Authority Key Identifier:
                keyid:B3:66:29:A6:94:EF:72:17:EF:3D:E5:E1:28:10:4C:1E:14:B4:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36629A694EF7217EF3DE5E128104C1E14B4BEB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F07683129CA3E800D69AF5F5B271B176F08A7292C6CEAFC11058DF7EE913314C/0/3230302e33352e3233362e302f32322d3234203d3e203232333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:6a:8a:da:2e:d1:87:cd:c8:3b:f6:c4:4d:b3:f2:fb:04:40:
         8f:ac:cd:d1:f9:31:5d:de:01:75:2d:8a:18:08:7f:cf:75:4c:
         92:89:87:26:41:99:cd:fa:20:90:a1:58:df:e1:3c:d4:da:35:
         ad:eb:36:de:7e:67:09:cf:5d:38:82:f4:3b:a8:8c:f3:ea:5f:
         89:29:13:28:13:44:9a:6a:b8:9e:2d:fb:3d:db:1c:f2:b7:c6:
         a1:d3:df:13:9f:89:f4:25:ea:d6:95:c1:f7:c9:2f:e8:9e:fe:
         7a:4e:21:43:9f:b0:19:d4:6d:35:8e:24:5f:c1:82:80:56:5c:
         cb:b3:7d:f3:63:3d:d2:77:a6:0b:26:2d:6a:1d:8a:f0:db:17:
         5a:5b:5a:84:9e:0f:a9:37:e4:70:c6:0b:fc:f8:af:6e:ea:89:
         69:f0:53:27:78:25:c9:98:e4:17:3d:cd:76:ed:d0:11:27:d4:
         49:97:46:54:8a:6c:fd:d4:ec:70:b4:37:16:62:86:15:0f:71:
         2c:3c:60:10:c5:a9:4e:be:42:3c:4c:24:53:2d:57:53:19:9d:
         4c:61:a9:c2:b9:a9:ea:c3:42:7c:31:d8:d0:76:3e:60:f4:be:
         8b:8a:66:11:25:ac:b7:b0:06:44:25:5d:3a:67:fe:81:6f:ff:
         ab:29:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:41 2025 by rpki-client on console.sobornost.net