Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS13999.roa
File:                     AS13999.roa (raw, json)
Hash identifier:          Mr3zqd5R3+SBs3+J//PdCN8hLZapbDxZbjo01HTr9f4=
Subject key identifier:   F6:35:89:11:C9:6B:6F:7D:0C:D4:B2:19:06:F0:BF:B7:D0:13:C4:5E
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       26ED1900AE9ED01C1F841CAAE3DA7E818DAE77F5
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS13999.roa
Signing time:             Wed 29 May 2024 04:20:01 +0000
ROA not before:           Wed 29 May 2024 04:15:01 +0000
ROA not after:            Wed 28 May 2025 04:20:01 +0000
asID:                     13999
IP address blocks:        200.52.160.0/21 maxlen: 24
                          200.52.168.0/22 maxlen: 24
                          200.52.173.0/24 maxlen: 24
                          200.52.174.0/23 maxlen: 24
                          200.52.176.0/20 maxlen: 24
                          200.52.192.0/23 maxlen: 24
                          200.52.195.0/24 maxlen: 24
                          200.52.196.0/22 maxlen: 24
                          200.52.202.0/24 maxlen: 24
                          200.52.204.0/23 maxlen: 24
                          200.52.207.0/24 maxlen: 24
                          200.52.208.0/20 maxlen: 24
                          200.56.128.0/23 maxlen: 24
                          200.56.132.0/23 maxlen: 24
                          200.56.135.0/24 maxlen: 24
                          200.56.136.0/21 maxlen: 24
                          200.56.144.0/23 maxlen: 24
                          200.56.146.0/24 maxlen: 24
                          200.56.149.0/24 maxlen: 24
                          200.56.150.0/23 maxlen: 24
                          200.56.152.0/22 maxlen: 24
                          200.56.156.0/23 maxlen: 24
                          200.56.158.0/24 maxlen: 24
                          200.56.160.0/20 maxlen: 24
                          200.56.176.0/23 maxlen: 24
                          200.56.180.0/22 maxlen: 23
                          200.66.0.0/19 maxlen: 24
                          200.66.32.0/20 maxlen: 24
                          200.77.0.0/20 maxlen: 21
                          200.77.32.0/21 maxlen: 24
                          200.77.40.0/22 maxlen: 22
                          200.77.44.0/24 maxlen: 24
                          200.77.47.0/24 maxlen: 24
                          200.77.48.0/23 maxlen: 24
                          200.77.51.0/24 maxlen: 24
                          200.77.52.0/22 maxlen: 24
                          200.77.60.0/22 maxlen: 24
                          200.77.112.0/23 maxlen: 24
                          200.77.120.0/22 maxlen: 24
                          200.92.128.0/24 maxlen: 24
                          200.92.130.0/23 maxlen: 24
                          200.92.132.0/22 maxlen: 24
                          200.92.136.0/21 maxlen: 22
                          200.92.153.0/24 maxlen: 24
                          200.92.154.0/23 maxlen: 23
                          200.92.156.0/22 maxlen: 22
                          200.92.160.0/19 maxlen: 22
                          200.92.192.0/20 maxlen: 24
                          200.92.208.0/21 maxlen: 24
                          200.92.216.0/22 maxlen: 22
                          200.92.224.0/21 maxlen: 24
                          200.92.240.0/23 maxlen: 24
                          200.92.242.0/24 maxlen: 24
                          200.92.244.0/22 maxlen: 24
                          200.92.248.0/21 maxlen: 24
                          200.94.224.0/22 maxlen: 22
                          200.94.238.0/23 maxlen: 23
                          201.132.5.0/24 maxlen: 24
                          201.132.8.0/23 maxlen: 24
                          201.132.10.0/24 maxlen: 24
                          201.132.13.0/24 maxlen: 24
                          201.132.14.0/23 maxlen: 24
                          201.132.85.0/24 maxlen: 24
                          201.132.86.0/23 maxlen: 24
                          201.132.88.0/21 maxlen: 24
                          201.132.96.0/21 maxlen: 24
                          201.132.105.0/24 maxlen: 24
                          201.132.106.0/23 maxlen: 24
                          201.132.108.0/22 maxlen: 22
                          201.132.112.0/22 maxlen: 24
                          201.132.116.0/23 maxlen: 24
                          201.132.118.0/24 maxlen: 24
                          201.132.120.0/21 maxlen: 24
                          201.132.128.0/22 maxlen: 24
                          201.132.152.0/23 maxlen: 23
                          201.132.161.0/24 maxlen: 24
                          201.132.162.0/23 maxlen: 23
                          201.132.164.0/22 maxlen: 24
                          201.132.168.0/22 maxlen: 24
                          201.132.172.0/23 maxlen: 24
                          201.132.176.0/20 maxlen: 24
                          201.132.192.0/18 maxlen: 24
                          201.159.200.0/21 maxlen: 21
                          201.159.200.0/24 maxlen: 24
                          201.159.202.0/23 maxlen: 23
                          201.159.204.0/23 maxlen: 23
                          201.159.206.0/24 maxlen: 24
                          201.159.208.0/21 maxlen: 21
                          201.164.0.0/19 maxlen: 21
                          201.164.32.0/21 maxlen: 21
                          201.164.40.0/22 maxlen: 22
                          201.164.44.0/24 maxlen: 24
                          201.164.46.0/24 maxlen: 24
                          201.164.60.0/24 maxlen: 24
                          201.164.63.0/24 maxlen: 24
                          201.164.64.0/23 maxlen: 24
                          201.164.67.0/24 maxlen: 24
                          201.164.68.0/22 maxlen: 24
                          201.164.80.0/20 maxlen: 24
                          201.164.96.0/19 maxlen: 22
                          201.164.144.0/20 maxlen: 24
                          201.164.160.0/22 maxlen: 23
                          201.164.164.0/23 maxlen: 24
                          201.164.166.0/24 maxlen: 24
                          201.164.168.0/21 maxlen: 24
                          201.164.178.0/23 maxlen: 24
                          201.164.184.0/24 maxlen: 24
                          201.165.0.0/19 maxlen: 24
                          201.165.52.0/23 maxlen: 23
                          201.165.54.0/24 maxlen: 24
                          201.165.60.0/22 maxlen: 22
                          201.165.80.0/21 maxlen: 24
                          201.165.88.0/22 maxlen: 22
                          201.165.96.0/19 maxlen: 24
                          201.165.208.0/21 maxlen: 24
                          201.165.216.0/23 maxlen: 24
                          201.165.218.0/24 maxlen: 24
                          201.165.221.0/24 maxlen: 24
                          201.165.224.0/20 maxlen: 24
                          201.165.248.0/22 maxlen: 22
                          201.165.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ed:19:00:ae:9e:d0:1c:1f:84:1c:aa:e3:da:7e:81:8d:ae:77:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 29 04:15:01 2024 GMT
            Not After : May 28 04:20:01 2025 GMT
        Subject: CN=F6358911C96B6F7D0CD4B21906F0BFB7D013C45E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:fd:5c:98:b4:87:5c:ab:77:e8:8c:51:5d:
                    f6:89:27:1d:b6:2f:aa:bc:79:7e:9e:e0:34:b1:6f:
                    fa:0a:02:32:a4:9f:98:f8:e0:d4:ea:06:a0:37:ab:
                    3e:bb:c4:4f:da:9c:0c:22:d2:1a:18:f9:64:43:fd:
                    23:29:d6:c7:3e:54:9e:59:0f:3d:5d:15:2e:01:e3:
                    75:aa:63:0a:1a:5c:bb:08:3b:5f:86:ca:3c:40:6d:
                    45:33:aa:c9:69:45:cb:ee:d1:5d:26:57:77:0a:84:
                    7e:79:45:15:1f:4c:72:fa:9e:b5:ef:9f:05:50:d1:
                    f8:b1:ef:8e:5b:0a:93:fc:6b:a4:16:95:7c:07:29:
                    11:c8:8d:f2:8e:09:07:14:29:67:cf:b7:bd:f8:a5:
                    1f:60:e4:f8:72:70:da:b1:5f:56:78:21:c6:6c:77:
                    e6:53:34:88:ea:75:c9:ba:78:9a:2a:e4:1a:81:10:
                    e1:92:22:15:ae:9a:83:2c:79:6c:20:70:0e:93:78:
                    5d:c1:09:9c:8c:57:dd:2a:e9:2c:d4:2b:6b:bd:7d:
                    7d:f3:9a:5f:f7:2f:cf:e6:5e:d8:9a:15:a7:89:a4:
                    fe:35:40:b5:5a:47:88:97:3b:d4:89:15:d8:2c:e9:
                    cf:ed:e9:bb:91:44:95:dc:87:a4:b5:56:9c:78:3c:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:35:89:11:C9:6B:6F:7D:0C:D4:B2:19:06:F0:BF:B7:D0:13:C4:5E
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS13999.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.160.0-200.52.171.255
                  200.52.173.0-200.52.193.255
                  200.52.195.0-200.52.199.255
                  200.52.202.0/24
                  200.52.204.0/23
                  200.52.207.0-200.52.223.255
                  200.56.128.0/23
                  200.56.132.0/23
                  200.56.135.0-200.56.146.255
                  200.56.149.0-200.56.158.255
                  200.56.160.0-200.56.177.255
                  200.56.180.0/22
                  200.66.0.0-200.66.47.255
                  200.77.0.0/20
                  200.77.32.0-200.77.44.255
                  200.77.47.0-200.77.49.255
                  200.77.51.0-200.77.55.255
                  200.77.60.0/22
                  200.77.112.0/23
                  200.77.120.0/22
                  200.92.128.0/24
                  200.92.130.0-200.92.143.255
                  200.92.153.0-200.92.219.255
                  200.92.224.0/21
                  200.92.240.0-200.92.242.255
                  200.92.244.0-200.92.255.255
                  200.94.224.0/22
                  200.94.238.0/23
                  201.132.5.0/24
                  201.132.8.0-201.132.10.255
                  201.132.13.0-201.132.15.255
                  201.132.85.0-201.132.103.255
                  201.132.105.0-201.132.118.255
                  201.132.120.0-201.132.131.255
                  201.132.152.0/23
                  201.132.161.0-201.132.173.255
                  201.132.176.0-201.132.255.255
                  201.159.200.0-201.159.215.255
                  201.164.0.0-201.164.44.255
                  201.164.46.0/24
                  201.164.60.0/24
                  201.164.63.0-201.164.65.255
                  201.164.67.0-201.164.71.255
                  201.164.80.0-201.164.127.255
                  201.164.144.0-201.164.166.255
                  201.164.168.0/21
                  201.164.178.0/23
                  201.164.184.0/24
                  201.165.0.0/19
                  201.165.52.0-201.165.54.255
                  201.165.60.0/22
                  201.165.80.0-201.165.91.255
                  201.165.96.0/19
                  201.165.208.0-201.165.218.255
                  201.165.221.0/24
                  201.165.224.0/20
                  201.165.248.0/22
                  201.165.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:6f:4a:29:03:26:8f:25:37:e1:a1:d3:18:53:18:07:a9:a7:
         ba:87:79:82:9e:8c:e4:8d:94:e1:50:5e:05:59:79:1f:1c:d2:
         2c:f7:51:b5:e6:b0:4b:c4:13:e2:e9:9e:03:d8:f1:45:85:a0:
         23:ba:4f:67:a6:af:7c:4f:4a:d8:10:e8:8d:37:03:f0:53:e6:
         48:82:2e:a2:ca:5d:9d:7b:30:99:2a:a8:86:19:39:64:bd:6b:
         aa:6a:b6:70:d4:e7:64:48:10:ce:e3:56:6e:8f:27:f6:d3:8b:
         0d:07:ec:a1:4d:03:3c:05:55:39:15:d3:a7:4a:cb:ff:86:66:
         33:9c:9b:79:88:49:e9:ac:54:c2:97:d2:d9:0c:a6:82:08:a6:
         68:7b:80:89:e3:99:04:51:b6:7b:08:b8:21:23:1e:d8:0e:4c:
         0d:51:12:e7:6f:14:1c:00:76:f2:4e:20:99:cc:10:24:65:96:
         3c:89:f9:93:da:8a:67:2a:9e:60:56:85:d0:ba:70:d4:c0:60:
         e9:7a:16:a8:db:0f:fe:3b:65:c1:59:d7:36:cf:2d:e2:4a:f2:
         54:93:48:b0:02:d2:cf:65:2e:a8:01:ce:3d:19:24:48:ce:e1:
         cd:b7:1c:f0:a1:5b:ef:8a:80:bb:0f:92:d2:32:c9:2d:f0:da:
         ed:1d:fe:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 17:42:34 2024 by rpki-client on console-ams.rpki-client.org