Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e31362e302f32302d3234203d3e203136363239.roa
File:                     3230302e3131332e31362e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          FOxUV0vZRtp3xIkBlzteTipUZCVlWpheeCfp2yxpKNE=
Subject key identifier:   4A:F0:EE:DB:9B:0D:34:AB:96:84:E2:1A:34:6D:CC:27:9B:86:07:90
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       609912ED27C8D4CCFB51DC6A8B9171A786622CBA
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e31362e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 18:17:02 +0000
ROA not before:           Tue 05 Mar 2024 18:12:02 +0000
ROA not after:            Tue 04 Mar 2025 18:17:02 +0000
asID:                     16629
IP address blocks:        200.113.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:99:12:ed:27:c8:d4:cc:fb:51:dc:6a:8b:91:71:a7:86:62:2c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:12:02 2024 GMT
            Not After : Mar  4 18:17:02 2025 GMT
        Subject: CN=4AF0EEDB9B0D34AB9684E21A346DCC279B860790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:6c:ad:ef:32:25:f8:64:83:41:aa:57:5f:
                    48:c4:2e:c6:4f:2d:66:b5:ce:60:cd:44:e5:b6:1d:
                    16:4c:87:2d:f2:af:0c:6e:83:34:3f:ea:a9:25:c3:
                    d4:1f:33:20:29:ec:3b:da:2e:e7:12:50:2f:9f:06:
                    8b:c9:13:0e:3d:80:2e:de:28:28:9b:79:75:83:81:
                    bc:7c:11:aa:a2:99:cc:a2:71:63:48:52:03:d6:6f:
                    e2:79:13:d4:99:66:19:02:c9:54:03:71:85:21:4c:
                    a8:a2:a3:38:78:ed:a3:4b:2a:d4:18:c6:23:28:d1:
                    0e:b5:3e:7b:87:8a:1a:20:cb:cf:be:29:8b:bd:68:
                    2b:f6:dd:0e:fb:61:79:13:34:a7:b5:51:72:99:57:
                    05:0d:69:95:4d:97:25:72:8f:2c:4b:e9:97:10:75:
                    5a:da:56:02:9c:ea:24:e6:c6:bf:d0:6c:10:ad:00:
                    7f:9e:d9:3f:2c:37:b0:09:fb:25:64:d6:9e:ad:9a:
                    44:cc:d6:33:4d:65:9e:df:52:ec:19:bf:33:7e:50:
                    0b:11:5f:e9:11:d9:64:24:04:84:09:3b:48:2a:17:
                    86:df:3d:45:86:5e:fa:dd:64:32:5e:83:0a:59:01:
                    d2:9b:4d:38:1d:b4:99:e3:aa:93:ec:3c:e9:31:b7:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:EE:DB:9B:0D:34:AB:96:84:E2:1A:34:6D:CC:27:9B:86:07:90
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e31362e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:73:71:6a:81:74:28:26:9a:d6:95:53:88:92:ba:65:5b:84:
         58:b9:26:5b:56:34:c9:ee:fc:c9:46:51:c5:3e:85:7c:c9:be:
         60:51:26:b9:b5:16:5d:17:02:dd:0f:12:21:47:96:83:77:39:
         01:1a:f7:7d:f9:a3:fb:e8:a6:25:26:0e:1d:e4:74:54:5d:00:
         fe:62:fd:54:d5:b9:e5:4d:1a:4c:22:5b:04:7d:dc:35:7f:1e:
         a5:fc:ad:46:f3:5b:22:8a:ae:13:b3:1d:b1:2d:4a:8f:08:20:
         6b:f9:75:38:45:fb:4e:f5:0a:ad:21:9d:a4:12:69:21:3d:6c:
         09:8a:62:e5:70:39:93:2e:ef:8a:1b:fb:e1:97:c0:17:ff:fc:
         fa:f8:29:e7:ad:f6:f0:8b:7e:5a:fb:65:d6:29:5f:d9:92:e6:
         32:22:3f:b5:f3:43:65:2d:5c:1a:7c:c1:9a:63:10:4a:32:16:
         09:56:44:0c:66:33:6e:b2:ad:62:a4:f3:0f:ee:c7:aa:5e:fb:
         c7:28:bf:2e:45:9e:8b:c8:8f:b7:9b:c0:ea:5c:e4:47:72:83:
         06:c5:e5:94:15:64:7c:7b:36:8e:eb:2f:e7:67:97:c0:e0:7f:
         a3:ac:e9:3b:1b:cb:c2:93:43:ee:60:39:bf:e3:3e:64:5f:97:
         08:24:11:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org