Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e302e302f32302d3234203d3e2037343138.roa
File:                     3230302e3131332e302e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          PWVow2C+tKQgtAF0xtrydCy+44Tku/pAWWhqQKOiKRk=
Subject key identifier:   43:F0:6C:84:92:25:62:B9:84:09:F4:94:88:73:5F:70:E3:CF:8F:4C
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       29DB1768B3D0E008761B1A1A81A46F569012AEC4
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e302e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 18:16:50 +0000
ROA not before:           Tue 05 Mar 2024 18:11:50 +0000
ROA not after:            Tue 04 Mar 2025 18:16:50 +0000
asID:                     7418
IP address blocks:        200.113.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:db:17:68:b3:d0:e0:08:76:1b:1a:1a:81:a4:6f:56:90:12:ae:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:50 2024 GMT
            Not After : Mar  4 18:16:50 2025 GMT
        Subject: CN=43F06C84922562B98409F49488735F70E3CF8F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:5d:f4:f3:f6:69:84:6f:d7:4c:a3:c3:af:
                    b3:a8:17:94:19:2b:84:0c:5d:93:e3:78:05:98:38:
                    62:d1:f8:ba:30:85:2a:66:ac:01:ec:dc:9f:65:d8:
                    69:97:26:48:7c:34:32:e5:07:0a:61:84:f8:5f:4b:
                    d5:21:b3:21:de:fa:2f:63:f4:54:3c:79:4b:e2:18:
                    41:ee:d0:32:08:66:b8:12:5f:96:e3:70:b0:aa:48:
                    d7:c1:af:98:a8:35:b6:07:90:8a:05:5a:df:39:31:
                    f3:af:8a:ad:08:34:82:6e:40:8a:b1:e3:f4:d4:06:
                    e1:c6:fc:67:24:69:06:62:89:69:a4:5d:e9:78:3a:
                    fc:86:8c:9b:49:7f:ce:00:30:1b:a7:8d:54:c0:f3:
                    30:d7:3a:c0:df:c2:b8:8f:13:59:ed:70:6f:d3:fc:
                    8d:bd:01:c9:46:25:33:ec:25:d3:8e:81:ff:15:3a:
                    f2:71:8b:4b:e5:75:c5:42:5c:9e:51:31:c7:02:1d:
                    8b:0a:1a:b3:1d:e4:90:38:eb:d8:29:99:af:c5:39:
                    bc:b0:94:aa:42:f9:f7:c2:1c:8e:fd:fa:a5:7f:85:
                    3e:5b:26:81:5f:03:f3:f2:14:82:38:d5:a0:ac:8e:
                    cb:65:56:10:c2:75:95:fd:99:bf:b8:b6:7a:e0:8c:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F0:6C:84:92:25:62:B9:84:09:F4:94:88:73:5F:70:E3:CF:8F:4C
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e302e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:63:8e:4d:92:41:52:a8:45:c0:0e:92:4c:a9:66:58:ce:
         b1:c5:18:f1:98:8f:0a:9e:e2:6c:f5:80:bf:31:6a:0e:75:a8:
         a9:28:66:40:fb:21:60:6f:b5:b7:20:58:a6:83:50:56:a5:fb:
         52:7a:c4:cc:c9:4a:d2:ee:c9:35:29:91:f5:f7:4c:2a:5f:eb:
         36:4c:ab:20:a0:03:bd:71:a5:dd:78:97:fc:18:90:93:c8:0a:
         ff:56:38:ed:b1:58:e7:cc:a1:8d:77:c2:c1:fa:02:fe:b2:aa:
         ed:d8:06:fd:8b:c7:08:57:87:50:b7:f2:f0:c3:72:c5:ff:1a:
         60:c7:fd:38:59:d1:53:c9:62:05:e3:b8:83:ee:ac:db:b0:06:
         9d:1e:bb:e4:7a:a7:b5:7a:f4:93:93:28:13:95:ea:92:d8:47:
         43:4c:0c:67:d0:76:d9:89:a4:f8:84:f2:5a:d9:e9:8e:15:fa:
         9a:5d:e4:27:c4:fe:33:02:da:82:98:e9:b3:9d:0b:16:32:a2:
         ec:42:98:d4:fc:93:4d:7a:7c:c1:62:25:ae:fa:11:e8:68:a0:
         1d:fc:6d:c1:a9:2e:fb:59:74:4f:bc:96:2f:ad:56:48:d6:6d:
         c5:b5:fb:fd:6c:f5:79:93:e8:35:6c:01:a8:f9:5b:a8:3f:f0:
         09:ec:53:79
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUKdsXaLPQ4Ah2GxoagaRvVpASrsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNDAzMDUxODExNTBaFw0yNTAzMDQxODE2NTBaMDMxMTAvBgNV
BAMTKDQzRjA2Qzg0OTIyNTYyQjk4NDA5RjQ5NDg4NzM1RjcwRTNDRjhGNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRfF308/ZphG/XTKPDr7OoF5QZ
K4QMXZPjeAWYOGLR+LowhSpmrAHs3J9l2GmXJkh8NDLlBwphhPhfS9UhsyHe+i9j
9FQ8eUviGEHu0DIIZrgSX5bjcLCqSNfBr5ioNbYHkIoFWt85MfOviq0INIJuQIqx
4/TUBuHG/GckaQZiiWmkXel4OvyGjJtJf84AMBunjVTA8zDXOsDfwriPE1ntcG/T
/I29AclGJTPsJdOOgf8VOvJxi0vldcVCXJ5RMccCHYsKGrMd5JA469gpma/FObyw
lKpC+ffCHI79+qV/hT5bJoFfA/PyFII41aCsjstlVhDCdZX9mb+4tnrgjHLlAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUQ/BshJIlYrmECfSUiHNfcOPPj0wwHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzEzMTMzMmUzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDM3MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyHEAMA0GCSqG
SIb3DQEBCwUAA4IBAQCsmmOOTZJBUqhFwA6STKlmWM6xxRjxmI8KnuJs9YC/MWoO
daipKGZA+yFgb7W3IFimg1BWpftSesTMyUrS7sk1KZH190wqX+s2TKsgoAO9caXd
eJf8GJCTyAr/VjjtsVjnzKGNd8LB+gL+sqrt2Ab9i8cIV4dQt/Lww3LF/xpgx/04
WdFTyWIF47iD7qzbsAadHrvkeqe1evSTkygTleqS2EdDTAxn0HbZiaT4hPJa2emO
FfqaXeQnxP4zAtqCmOmznQsWMqLsQpjU/JNNenzBYiWu+hHoaKAd/G3BqS77WXRP
vJYvrVZI1m3Ftfv9bPV5k+g1bAGo+VuoP/AJ7FN5
-----END CERTIFICATE-----
Generated at Sun May 5 16:43:20 2024 by rpki-client on console-ams.rpki-client.org