Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e203136363239.roa
File:                     3230302e3131332e3132382e302f31392d3234203d3e203136363239.roa (raw, json)
Hash identifier:          QfxFPLHiNepnAP9VyDW5eJk3caFNEf7BxM7uNThs5As=
Subject key identifier:   6D:27:02:23:B8:32:0C:1E:78:62:82:D3:C3:63:6B:D5:E7:BC:54:E8
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       7D289FC7CF3AEC6359F28D4B742EE8F3463EF6C0
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:00:54 +0000
ROA not before:           Tue 04 Feb 2025 19:55:54 +0000
ROA not after:            Tue 03 Feb 2026 20:00:54 +0000
asID:                     16629
IP address blocks:        200.113.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:28:9f:c7:cf:3a:ec:63:59:f2:8d:4b:74:2e:e8:f3:46:3e:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:54 2025 GMT
            Not After : Feb  3 20:00:54 2026 GMT
        Subject: CN=6D270223B8320C1E786282D3C3636BD5E7BC54E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:dc:1f:26:58:88:fd:67:03:4c:f0:c8:c2:
                    3a:c4:db:91:b9:57:2a:45:e0:d4:df:49:30:2c:ef:
                    8d:07:60:be:b6:49:70:47:d6:d6:af:e0:89:67:a6:
                    cc:5b:4c:86:a2:30:94:ae:df:d8:f6:ea:ec:7f:1f:
                    b1:3f:bf:a3:8f:7c:84:c2:1b:7c:f5:6c:d7:71:5e:
                    c1:08:f0:49:a2:55:d0:0e:07:0b:4f:79:62:f7:4a:
                    24:77:6e:54:2d:a9:49:e9:70:99:ca:e1:24:e3:34:
                    a4:c1:b9:13:ad:e1:59:c2:c9:2e:bc:b9:94:54:2d:
                    7b:c8:d8:27:b8:2a:1f:c2:dd:60:3f:ad:7c:23:60:
                    c9:5b:92:55:6f:cf:e5:ea:42:5a:a8:0b:87:8f:ab:
                    b9:df:17:5f:d7:57:55:94:4c:92:3d:7e:5f:90:0d:
                    fd:4c:b7:11:27:eb:e9:10:94:31:be:ed:58:db:93:
                    5d:1d:9b:31:09:f1:7b:61:72:f3:af:3d:8d:09:61:
                    02:eb:95:2f:d2:98:1d:d8:c4:67:00:68:73:c7:d9:
                    43:99:5d:74:09:c0:bd:bb:75:25:c1:8c:77:a3:7f:
                    1c:71:51:50:3f:52:32:f4:df:ca:c4:cf:d2:af:d9:
                    70:df:21:df:c0:bb:3a:ab:15:ae:34:8f:41:1a:89:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:27:02:23:B8:32:0C:1E:78:62:82:D3:C3:63:6B:D5:E7:BC:54:E8
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:a7:4e:81:49:07:c8:e6:cf:f0:5f:c0:ef:2a:be:5c:9d:85:
         89:ff:3d:9a:dd:cb:31:37:15:b6:19:37:25:7f:5e:4e:8a:4e:
         f7:2d:91:ba:bd:fe:c2:1e:ce:85:ca:6d:ae:11:c7:d8:1c:1d:
         8f:3c:cd:1c:f4:d0:63:3b:d2:1a:5a:a3:b2:a8:59:c7:02:9e:
         6f:3f:55:7f:d1:43:c4:af:67:de:7d:3e:d2:dd:b3:76:7a:e6:
         76:39:6d:b1:5d:5b:e8:cb:8e:a0:4d:c7:d7:d9:c9:63:12:fd:
         47:14:e2:9a:bc:85:21:45:5d:d7:60:92:bd:b0:82:9e:7f:e2:
         df:8c:c4:c5:b9:5d:f7:f4:36:98:fb:e4:bd:e2:09:13:c7:10:
         8b:6e:18:7c:89:4b:13:14:2a:41:5a:9c:12:73:5e:1c:ae:e5:
         0c:47:4c:f4:4e:5c:8b:aa:a7:e7:a8:73:35:92:3b:d8:a5:a6:
         5b:ef:3e:f3:13:a2:3f:56:96:fc:a4:dd:71:f5:2d:69:29:9c:
         70:f2:b2:ee:66:5a:99:81:55:52:75:20:07:70:b7:3f:9e:48:
         49:b9:b4:54:66:d7:17:c2:59:31:81:f2:e2:d6:26:8e:a2:09:
         ab:9d:cc:11:90:02:30:7c:1e:2e:4c:06:3d:98:3e:8f:c0:01:
         e4:56:01:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:03 2025 by rpki-client