Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e302e302f32302d3234203d3e203135333131.roa
File:                     3230302e3131332e302e302f32302d3234203d3e203135333131.roa (raw, json)
Hash identifier:          NU4qbssV5ubvHYHnUwHXJlY0O6bL8iZPLEgHf8ErwrE=
Subject key identifier:   8B:C6:D1:58:D0:FA:1C:A6:81:F4:9A:8D:E0:FB:5C:BC:D7:B1:36:6B
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       1B0A6E4A6B36CA10C10D5D56795ED46570B0728A
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e302e302f32302d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 18:16:44 +0000
ROA not before:           Tue 05 Mar 2024 18:11:44 +0000
ROA not after:            Tue 04 Mar 2025 18:16:44 +0000
asID:                     15311
IP address blocks:        200.113.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0a:6e:4a:6b:36:ca:10:c1:0d:5d:56:79:5e:d4:65:70:b0:72:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:44 2024 GMT
            Not After : Mar  4 18:16:44 2025 GMT
        Subject: CN=8BC6D158D0FA1CA681F49A8DE0FB5CBCD7B1366B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:2f:a8:f4:e4:a9:a0:7f:af:8c:1d:a7:35:
                    b2:a0:aa:c6:42:67:eb:aa:47:6c:49:e3:3a:11:4d:
                    c9:88:5e:77:20:05:30:d8:82:0a:f5:3c:fb:c8:39:
                    d0:ca:da:85:7e:5e:4a:34:85:8d:91:54:04:49:02:
                    b1:9c:90:ca:0a:96:93:6a:57:85:3e:62:7c:2c:2e:
                    e7:c6:25:3f:07:31:6e:17:d3:dd:49:f5:a4:a9:44:
                    c8:43:d5:44:af:0b:83:b8:31:00:3d:4f:80:dd:84:
                    5d:60:2f:2b:59:52:d4:4d:67:9e:f5:db:27:8a:99:
                    6a:81:30:44:aa:53:66:18:71:aa:8f:0d:39:6d:d6:
                    1f:9e:11:62:ea:e6:82:8b:2a:d9:72:9d:92:81:5b:
                    d4:00:cf:2b:c3:44:a4:08:ca:54:8c:63:a6:98:86:
                    80:47:31:bf:6a:72:a0:3e:47:7f:60:19:1c:27:49:
                    12:97:46:a5:15:90:c8:8a:d0:2b:91:4a:91:99:d0:
                    3f:43:1f:3e:fe:eb:98:2a:4a:ea:74:d2:c1:09:a2:
                    cd:44:3a:30:87:22:bf:5a:95:19:3a:42:70:78:74:
                    32:50:d3:38:58:c8:73:7c:9c:c8:40:6c:e6:3b:a9:
                    bc:32:9a:99:c4:0f:cb:04:b2:27:ad:82:d3:8b:0f:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C6:D1:58:D0:FA:1C:A6:81:F4:9A:8D:E0:FB:5C:BC:D7:B1:36:6B
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e302e302f32302d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:94:64:dd:d4:d6:c9:22:4e:12:10:c9:92:35:b1:06:66:73:
         44:3b:a3:c9:e5:9d:8b:2e:22:28:39:90:b5:a3:9d:83:7f:62:
         52:88:d7:d6:8f:28:a7:9e:6a:ef:dd:80:ea:61:0a:9a:bb:e2:
         98:9e:b4:76:11:a0:c3:d3:10:e5:21:f3:05:2a:1b:96:87:40:
         19:3d:8f:c5:90:ee:55:d5:b9:a3:9f:ab:4b:91:c2:87:3e:27:
         d0:6b:f1:25:d1:97:65:67:05:5b:98:4d:59:5b:31:ac:89:c4:
         23:25:99:66:a4:84:81:c8:4d:27:4b:23:61:41:20:5c:c8:2b:
         e2:54:ce:10:62:2c:86:2d:7c:bb:6c:a3:9b:dc:4a:ad:c7:95:
         e0:aa:e4:83:44:a7:33:b4:32:c0:7b:1c:b1:a3:25:33:e7:45:
         45:f3:10:71:03:e4:3d:cc:76:37:c5:20:47:00:6b:b4:6c:39:
         3f:06:06:64:40:9d:4d:92:27:82:55:3e:e2:b8:8f:7e:fa:5b:
         05:7e:51:14:c2:4a:8c:76:b8:d8:b2:81:1d:af:f9:08:47:dd:
         ca:df:d0:c4:2d:a3:de:26:52:f2:bf:93:9b:03:99:53:63:a8:
         37:e1:97:e7:4b:66:aa:4b:61:1e:d5:be:ec:e4:03:98:45:41:
         a1:db:4c:5b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUGwpuSms2yhDBDV1WeV7UZXCwcoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNDAzMDUxODExNDRaFw0yNTAzMDQxODE2NDRaMDMxMTAvBgNV
BAMTKDhCQzZEMTU4RDBGQTFDQTY4MUY0OUE4REUwRkI1Q0JDRDdCMTM2NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ui+o9OSpoH+vjB2nNbKgqsZC
Z+uqR2xJ4zoRTcmIXncgBTDYggr1PPvIOdDK2oV+Xko0hY2RVARJArGckMoKlpNq
V4U+YnwsLufGJT8HMW4X091J9aSpRMhD1USvC4O4MQA9T4DdhF1gLytZUtRNZ571
2yeKmWqBMESqU2YYcaqPDTlt1h+eEWLq5oKLKtlynZKBW9QAzyvDRKQIylSMY6aY
hoBHMb9qcqA+R39gGRwnSRKXRqUVkMiK0CuRSpGZ0D9DHz7+65gqSup00sEJos1E
OjCHIr9alRk6QnB4dDJQ0zhYyHN8nMhAbOY7qbwympnED8sEsietgtOLD2w9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUi8bRWND6HKaB9JqN4PtcvNexNmswHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzEzMTMzMmUzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIcQAwDQYJ
KoZIhvcNAQELBQADggEBADeUZN3U1skiThIQyZI1sQZmc0Q7o8nlnYsuIig5kLWj
nYN/YlKI19aPKKeeau/dgOphCpq74pietHYRoMPTEOUh8wUqG5aHQBk9j8WQ7lXV
uaOfq0uRwoc+J9Br8SXRl2VnBVuYTVlbMayJxCMlmWakhIHITSdLI2FBIFzIK+JU
zhBiLIYtfLtso5vcSq3HleCq5INEpzO0MsB7HLGjJTPnRUXzEHED5D3MdjfFIEcA
a7RsOT8GBmRAnU2SJ4JVPuK4j376WwV+URTCSox2uNiygR2v+QhH3crf0MQto94m
UvK/k5sDmVNjqDfhl+dLZqpLYR7VvuzkA5hFQaHbTFs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org