Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3136302e302f31392d3234203d3e203136363239.roa
File:                     3230302e3131332e3136302e302f31392d3234203d3e203136363239.roa (raw, json)
Hash identifier:          +i508cg2ceWprXAtmtrAk9ABPnj6f+M0P3wzOlwuU8Y=
Subject key identifier:   82:0F:6B:1F:A0:13:36:A9:16:E7:22:59:2D:4A:BA:D9:57:CA:F6:25
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       329A014487A45274A44C1B978E91AE610807ECF5
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3136302e302f31392d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:00:52 +0000
ROA not before:           Tue 04 Feb 2025 19:55:52 +0000
ROA not after:            Tue 03 Feb 2026 20:00:52 +0000
asID:                     16629
IP address blocks:        200.113.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9a:01:44:87:a4:52:74:a4:4c:1b:97:8e:91:ae:61:08:07:ec:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:52 2025 GMT
            Not After : Feb  3 20:00:52 2026 GMT
        Subject: CN=820F6B1FA01336A916E722592D4ABAD957CAF625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:41:ac:92:30:45:0e:27:e1:bd:bd:24:7d:
                    5d:2e:be:38:4c:67:17:bc:b1:92:20:c4:df:15:6f:
                    5e:fa:a8:0e:77:5a:29:59:d2:db:9d:92:f1:1f:3d:
                    3e:76:bd:26:c8:3f:17:83:71:59:70:d5:91:f7:06:
                    6d:d2:84:b6:06:af:36:55:73:bf:44:cf:6a:86:80:
                    98:71:3e:71:ed:d4:fc:a5:63:78:7b:f8:05:42:23:
                    f8:81:34:56:c9:35:95:3c:de:2c:1b:f5:e8:40:98:
                    7a:2a:6e:38:00:a1:eb:73:30:ad:e4:2e:12:45:df:
                    7a:05:51:bd:58:2c:00:70:69:fd:30:9d:ff:bc:11:
                    06:f3:f2:be:a2:48:5c:ef:67:b3:0b:b9:36:93:51:
                    f7:8a:79:85:d5:5c:b2:6f:87:34:f0:3b:2c:fb:cf:
                    e2:af:11:b5:7f:68:c7:3b:61:fb:84:9f:99:c7:39:
                    14:99:18:95:44:06:90:86:54:7d:50:3b:21:1e:ad:
                    8e:79:e7:c0:64:5d:d1:a0:0b:be:34:e1:b7:df:81:
                    9d:28:37:8e:94:d4:6e:bb:18:7f:b9:39:db:73:27:
                    07:84:b2:04:81:f7:ef:6d:2a:07:f8:ed:40:e0:b4:
                    51:cb:f8:7e:3a:50:f5:3e:d9:e0:52:f7:a9:b2:2e:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0F:6B:1F:A0:13:36:A9:16:E7:22:59:2D:4A:BA:D9:57:CA:F6:25
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3136302e302f31392d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:e0:a2:9f:78:c8:ca:c2:fa:dc:e6:17:e8:1f:26:02:c7:76:
         9c:84:af:b3:f1:ec:12:4b:71:fb:b5:3f:db:da:de:29:4a:52:
         22:fa:0a:07:2c:fd:f1:40:f8:f6:7f:ee:a1:46:5f:88:3a:6e:
         a8:db:3f:00:07:3e:6a:00:34:e4:b3:b8:e3:41:4f:7e:3f:2d:
         c0:4f:8b:4a:7b:b9:82:40:be:59:92:0a:45:39:61:be:17:74:
         17:9d:ba:fa:25:43:18:34:3e:fb:f3:90:e5:0e:57:0c:ed:19:
         9c:f4:ac:0f:52:c8:69:12:d0:fd:78:de:52:3e:ab:77:70:2d:
         14:c5:c6:54:bc:2a:84:92:73:6b:8f:84:78:68:dc:41:b6:b1:
         a7:4c:46:d7:9d:42:61:01:5f:ba:6e:9b:ca:49:79:b4:f4:59:
         ac:54:b9:1f:5c:0d:79:a6:d2:a1:eb:f5:d8:ff:5e:6e:be:5e:
         0b:0b:88:73:c8:36:1b:d5:2d:37:34:d8:3b:f8:fa:f3:06:b1:
         4e:29:cf:54:67:1b:c2:6b:b1:90:76:32:dd:23:11:19:3c:0a:
         f0:d9:e0:83:05:e6:cf:01:84:68:07:fa:9a:9b:35:fc:a3:d4:
         17:9b:90:a0:f2:de:31:ea:f3:0e:5d:e3:bf:8f:4d:ea:c8:38:
         48:84:e2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:11:08 2025 by rpki-client