Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e31362e302f32302d3234203d3e2037343138.roa
File:                     3230302e3131332e31362e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          edbQ2ArN5UId+wMWBHj3+e+MYt/KMZxHM6Y5AzU6DrY=
Subject key identifier:   DC:B6:3D:E0:64:A5:F3:6C:EE:69:AC:77:04:FA:85:77:F6:CD:1F:EE
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       293112808D5AB9DE36807D711DBAFECDDD4F7D75
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e31362e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 18:16:55 +0000
ROA not before:           Tue 05 Mar 2024 18:11:55 +0000
ROA not after:            Tue 04 Mar 2025 18:16:55 +0000
asID:                     7418
IP address blocks:        200.113.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:31:12:80:8d:5a:b9:de:36:80:7d:71:1d:ba:fe:cd:dd:4f:7d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:55 2024 GMT
            Not After : Mar  4 18:16:55 2025 GMT
        Subject: CN=DCB63DE064A5F36CEE69AC7704FA8577F6CD1FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:df:92:ce:69:5f:16:a6:4e:13:3b:28:84:6a:
                    11:3b:fe:ae:26:86:96:5a:fd:14:df:17:1c:12:3e:
                    67:60:00:de:08:09:53:e1:a8:cb:d5:a0:a9:51:30:
                    9c:fc:80:1b:d0:69:5b:d1:78:cf:e3:d0:17:42:f4:
                    fe:52:ec:9a:e0:3b:2e:1d:d4:65:c5:bf:51:2c:ad:
                    a2:b0:d5:bc:78:52:9c:c0:ed:14:28:14:4b:2e:65:
                    d4:1c:f0:8a:4b:84:0d:97:02:91:c7:f9:12:e2:6c:
                    60:60:36:e1:1e:1f:ba:7f:2e:9b:ea:20:d3:23:5c:
                    97:0b:41:25:dd:af:0f:34:ea:8a:4e:a8:ab:54:51:
                    ef:3b:c3:3a:57:db:42:89:de:54:13:3f:19:71:0c:
                    44:6f:7d:25:be:04:39:af:2b:d5:73:c9:00:61:a3:
                    ec:7e:8e:46:27:88:ea:88:3c:e3:79:c5:03:27:93:
                    fe:d8:87:9a:53:1f:96:4f:21:e6:52:f0:39:32:66:
                    c8:d1:61:d3:85:fa:c3:d1:3f:b1:2c:8d:4c:11:a4:
                    aa:b0:a8:8a:d6:bd:f4:a3:c1:7d:97:c4:35:9f:50:
                    a1:37:be:ce:ab:60:88:ca:0c:66:45:ce:24:1f:ed:
                    b3:66:83:72:f5:db:11:d8:57:09:eb:49:2e:79:85:
                    53:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B6:3D:E0:64:A5:F3:6C:EE:69:AC:77:04:FA:85:77:F6:CD:1F:EE
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e31362e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:0d:42:e8:72:55:fd:52:8a:b5:7a:a2:ff:93:6b:07:9b:34:
         f4:04:88:9d:b5:4e:1f:be:76:90:5a:6a:d5:a5:e1:53:26:bd:
         00:1c:26:82:34:c9:96:de:63:af:03:3c:cf:06:b1:f9:a6:ce:
         e5:73:3c:2a:4f:cb:70:b7:c6:f3:09:a1:f4:60:f2:ad:5e:66:
         06:5f:f5:c4:86:cc:2c:47:2a:e1:a5:cf:4f:eb:c7:0f:7d:35:
         00:17:53:8d:99:70:7a:ea:69:93:84:fb:24:86:95:ac:9f:f6:
         97:92:12:c9:ef:70:5d:74:9b:37:60:7f:bb:88:10:ac:68:35:
         09:dc:2e:41:97:33:74:2e:35:24:17:fc:78:e4:f7:87:45:25:
         30:12:65:5f:49:27:c0:fb:34:76:d9:8d:8e:30:04:b9:ed:12:
         28:6a:9e:8b:64:a6:8a:d1:1d:12:2b:0d:63:16:01:11:73:66:
         3b:7e:43:bb:e4:b6:04:7e:c4:5a:a2:37:d0:f8:fc:97:8c:10:
         6c:d7:df:8d:a3:ce:28:ce:3a:3e:b8:db:b1:9f:c3:fc:d3:22:
         96:30:91:d3:8d:d3:45:d2:c8:0d:0b:d1:3f:d9:4f:6c:57:0d:
         8e:ed:7d:4a:74:c2:d4:5c:43:ad:60:84:b8:6b:be:e6:eb:10:
         2e:b9:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org