Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e203135333131.roa
File:                     3230302e3131332e3132382e302f31392d3234203d3e203135333131.roa (raw, json)
Hash identifier:          uyIB1K1aLKqBv/a71aitKhrxOrVit/umVphMgy1QgTs=
Subject key identifier:   15:DC:4E:86:FA:F3:C3:CE:B0:33:6E:DF:AE:AF:39:97:0A:B8:11:71
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       0DB815891DF9D082D2BADAD1A2CAFE1D3B027FCE
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 18:17:02 +0000
ROA not before:           Tue 05 Mar 2024 18:12:02 +0000
ROA not after:            Tue 04 Mar 2025 18:17:02 +0000
asID:                     15311
IP address blocks:        200.113.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b8:15:89:1d:f9:d0:82:d2:ba:da:d1:a2:ca:fe:1d:3b:02:7f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:12:02 2024 GMT
            Not After : Mar  4 18:17:02 2025 GMT
        Subject: CN=15DC4E86FAF3C3CEB0336EDFAEAF39970AB81171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:84:21:d7:12:56:63:08:eb:98:b6:9b:49:c6:
                    08:8d:69:ef:7b:a3:e5:08:70:ab:2f:b9:5d:2d:40:
                    54:c0:25:52:ca:79:d4:18:15:d5:33:f7:3d:c1:9a:
                    0f:11:9a:e9:4c:a7:e4:8a:07:2b:e2:84:1a:ea:63:
                    5c:5f:7f:df:17:92:82:23:69:e9:8b:47:6f:33:c1:
                    8a:ca:67:82:20:c5:37:e3:34:93:00:49:73:e4:97:
                    e4:62:04:4c:37:5f:b8:3d:91:b9:78:da:1d:4a:03:
                    e7:ce:99:29:97:62:de:55:1a:88:9f:b3:49:ab:49:
                    96:68:77:f0:34:2d:c4:e6:a5:46:34:3e:e2:4e:6d:
                    fa:f1:11:28:db:41:48:48:c1:ae:f2:8e:26:da:91:
                    6c:27:6f:99:a4:d4:02:a6:d3:ab:03:25:40:98:7a:
                    41:81:7b:88:2c:cf:84:fc:7e:36:1b:aa:53:da:4f:
                    c7:c6:4f:ca:c6:8a:01:dd:59:3c:09:07:27:e0:ff:
                    2c:99:94:f6:af:01:75:7d:d5:47:7d:c8:11:72:03:
                    57:9c:f2:8f:ae:7c:de:b8:36:66:88:06:3a:99:a1:
                    71:37:a2:d3:2d:5f:17:a8:f5:e1:c2:84:22:f1:83:
                    5a:62:55:a5:e1:b4:4e:6c:f4:63:58:c3:ee:e5:b4:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DC:4E:86:FA:F3:C3:CE:B0:33:6E:DF:AE:AF:39:97:0A:B8:11:71
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:5e:03:21:bc:e0:d1:25:69:64:f5:7e:e2:b0:a7:84:12:54:
         02:b8:fe:dc:bc:1f:b1:16:18:bf:89:a8:56:a7:b8:11:5c:3a:
         f3:0a:d3:31:52:0a:aa:c3:eb:9a:1d:03:2b:12:19:82:85:57:
         c6:f9:9b:af:f2:4a:60:6b:e7:1c:75:89:50:b1:10:9e:fc:15:
         d0:90:1d:fe:c8:d3:30:21:65:2a:ad:8d:82:9d:7b:87:1e:c8:
         86:79:05:70:70:ff:c4:b8:2d:ea:c8:00:72:58:a6:c4:5a:5b:
         92:5e:86:43:5c:13:e1:fe:47:c6:bb:74:d3:34:ed:de:e3:fc:
         24:6d:30:3f:90:37:11:f6:12:4f:f9:2b:96:bd:d8:33:39:ac:
         be:6a:26:77:b9:6e:34:db:d5:6e:89:98:e5:2a:30:29:6a:4a:
         26:91:7e:42:a5:f2:06:93:94:b2:12:7f:ec:0e:db:cb:c0:b3:
         7c:a2:99:03:a9:1b:69:8a:ef:58:87:ad:54:23:4e:11:51:ae:
         b4:7e:11:19:ad:1f:e0:5e:d9:ed:75:8e:a7:af:be:f2:20:2e:
         39:57:05:21:28:1a:41:40:46:6b:bd:6b:3d:76:54:8b:37:ff:
         8a:e3:f9:f7:68:22:6b:e6:54:a6:aa:56:63:36:89:b6:b1:d7:
         ee:27:fa:fa
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDbgViR350ILSutrRosr+HTsCf84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNDAzMDUxODEyMDJaFw0yNTAzMDQxODE3MDJaMDMxMTAvBgNV
BAMTKDE1REM0RTg2RkFGM0MzQ0VCMDMzNkVERkFFQUYzOTk3MEFCODExNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhCHXElZjCOuYtptJxgiNae97
o+UIcKsvuV0tQFTAJVLKedQYFdUz9z3Bmg8RmulMp+SKByvihBrqY1xff98XkoIj
aemLR28zwYrKZ4IgxTfjNJMASXPkl+RiBEw3X7g9kbl42h1KA+fOmSmXYt5VGoif
s0mrSZZod/A0LcTmpUY0PuJObfrxESjbQUhIwa7yjibakWwnb5mk1AKm06sDJUCY
ekGBe4gsz4T8fjYbqlPaT8fGT8rGigHdWTwJByfg/yyZlPavAXV91Ud9yBFyA1ec
8o+ufN64NmaIBjqZoXE3otMtXxeo9eHChCLxg1piVaXhtE5s9GNYw+7ltKjRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUFdxOhvrzw86wM27frq85lwq4EXEwHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzEzMTMzMmUzMTMyMzgy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyHGA
MA0GCSqGSIb3DQEBCwUAA4IBAQAKXgMhvODRJWlk9X7isKeEElQCuP7cvB+xFhi/
iahWp7gRXDrzCtMxUgqqw+uaHQMrEhmChVfG+Zuv8kpga+ccdYlQsRCe/BXQkB3+
yNMwIWUqrY2CnXuHHsiGeQVwcP/EuC3qyAByWKbEWluSXoZDXBPh/kfGu3TTNO3e
4/wkbTA/kDcR9hJP+SuWvdgzOay+aiZ3uW4029VuiZjlKjApakomkX5CpfIGk5Sy
En/sDtvLwLN8opkDqRtpiu9Yh61UI04RUa60fhEZrR/gXtntdY6nr77yIC45VwUh
KBpBQEZrvWs9dlSLN/+K4/n3aCJr5lSmqlZjNom2sdfuJ/r6
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org