Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3136302e302f31392d3234203d3e203136363239.roa
File:                     3230302e3131332e3136302e302f31392d3234203d3e203136363239.roa (raw, json)
Hash identifier:          GH18o6k7YdNypF7oZojY3xLP8gnBQlF/5T6TSGG+J38=
Subject key identifier:   FC:F5:0B:0A:C0:7C:B0:12:CF:FA:C3:28:AF:9E:EC:2A:BA:29:45:A8
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       2AD5C3DA571B0BA498312FACD51E123515BA6EBC
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3136302e302f31392d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 18:17:03 +0000
ROA not before:           Tue 05 Mar 2024 18:12:03 +0000
ROA not after:            Tue 04 Mar 2025 18:17:03 +0000
asID:                     16629
IP address blocks:        200.113.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d5:c3:da:57:1b:0b:a4:98:31:2f:ac:d5:1e:12:35:15:ba:6e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:12:03 2024 GMT
            Not After : Mar  4 18:17:03 2025 GMT
        Subject: CN=FCF50B0AC07CB012CFFAC328AF9EEC2ABA2945A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f1:5d:1e:76:76:d2:72:31:0a:b1:95:3f:03:
                    50:99:f2:79:92:53:48:ec:de:b0:79:0c:eb:04:82:
                    18:64:d3:2d:95:d5:a3:c3:6a:36:06:a2:d1:b3:2b:
                    06:1a:94:d8:39:3d:82:e5:c8:21:dc:36:1e:db:1f:
                    62:7a:d8:15:34:df:2b:fd:2a:da:01:ee:42:07:5e:
                    b3:7f:47:e4:d7:04:1f:38:3b:dc:a1:48:61:c0:66:
                    cf:19:90:2a:a1:c1:ed:8f:9b:db:af:8c:1f:3f:aa:
                    d9:65:a0:80:cc:b6:44:b8:3a:2c:22:f2:bf:eb:ba:
                    b8:f5:45:cb:51:e5:f0:ff:6b:4c:29:67:2d:b5:16:
                    c0:c4:9f:47:48:bd:8c:1b:b4:21:a0:e8:09:de:52:
                    09:07:37:d5:da:8d:8f:b5:f3:af:d8:92:3d:3f:91:
                    e5:77:33:64:60:9b:ba:f4:6d:b0:29:7b:b2:6d:aa:
                    d7:0a:a4:7a:3a:ab:60:43:a4:06:78:ad:ec:5d:c9:
                    5e:14:0e:8c:bf:dd:6f:c2:f4:2d:51:1a:f4:d1:60:
                    32:30:f1:1b:70:7e:c3:35:00:ed:72:89:62:b9:0d:
                    84:20:39:1a:39:7d:d1:43:98:b5:e9:64:8e:8e:45:
                    49:77:78:2b:ae:08:1b:49:61:53:73:ba:b9:a9:bd:
                    31:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F5:0B:0A:C0:7C:B0:12:CF:FA:C3:28:AF:9E:EC:2A:BA:29:45:A8
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3136302e302f31392d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:ad:17:54:40:d7:e2:ca:3e:2c:a7:48:1f:23:50:5f:6d:99:
         94:22:3f:2c:10:7a:ae:23:5c:1c:54:e3:8d:8a:9e:0e:a6:0c:
         6b:e2:03:2e:6a:1a:5a:6d:71:a0:25:68:e3:1e:3d:8f:49:7b:
         3d:9f:3d:e6:0e:75:27:21:90:cf:98:e9:b5:4f:5b:1b:f8:69:
         9d:e4:0a:99:e2:c0:b1:36:ad:ce:48:7e:13:87:be:f0:b6:16:
         0e:71:bd:11:ee:db:0d:70:0a:1b:42:cb:b9:cd:f0:fa:b4:19:
         4a:48:7d:9a:de:1f:70:6d:2a:b1:01:b2:f2:f0:72:5c:57:e6:
         1a:cc:fe:05:40:8e:c8:91:71:5a:86:94:2d:ea:41:a8:8e:eb:
         71:2c:e3:4f:d0:0b:5c:19:57:6b:db:db:3b:48:ce:4a:3b:70:
         60:e6:86:02:cf:83:43:7b:d2:24:19:50:d8:4d:06:eb:a1:b6:
         eb:65:83:cf:69:8c:05:72:34:81:f0:af:5e:5c:67:cf:d2:93:
         67:90:23:5b:ee:66:4e:c5:e5:b3:80:33:90:26:d2:f9:ce:99:
         f0:17:59:5a:1d:cf:27:e8:f9:e7:15:57:03:3e:14:74:a4:b9:
         90:af:a4:0d:cb:b2:48:da:77:39:33:7e:0f:b8:c0:0a:24:7e:
         47:6a:db:67
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKtXD2lcbC6SYMS+s1R4SNRW6brwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNDAzMDUxODEyMDNaFw0yNTAzMDQxODE3MDNaMDMxMTAvBgNV
BAMTKEZDRjUwQjBBQzA3Q0IwMTJDRkZBQzMyOEFGOUVFQzJBQkEyOTQ1QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ8V0ednbScjEKsZU/A1CZ8nmS
U0js3rB5DOsEghhk0y2V1aPDajYGotGzKwYalNg5PYLlyCHcNh7bH2J62BU03yv9
KtoB7kIHXrN/R+TXBB84O9yhSGHAZs8ZkCqhwe2Pm9uvjB8/qtlloIDMtkS4Oiwi
8r/rurj1RctR5fD/a0wpZy21FsDEn0dIvYwbtCGg6AneUgkHN9XajY+186/Ykj0/
keV3M2Rgm7r0bbApe7JtqtcKpHo6q2BDpAZ4rexdyV4UDoy/3W/C9C1RGvTRYDIw
8RtwfsM1AO1yiWK5DYQgORo5fdFDmLXpZI6ORUl3eCuuCBtJYVNzurmpvTEXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/PULCsB8sBLP+sMor57sKropRagwHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzEzMTMzMmUzMTM2MzAy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTM2MzYzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyHGg
MA0GCSqGSIb3DQEBCwUAA4IBAQCKrRdUQNfiyj4sp0gfI1BfbZmUIj8sEHquI1wc
VOONip4Opgxr4gMuahpabXGgJWjjHj2PSXs9nz3mDnUnIZDPmOm1T1sb+Gmd5AqZ
4sCxNq3OSH4Th77wthYOcb0R7tsNcAobQsu5zfD6tBlKSH2a3h9wbSqxAbLy8HJc
V+YazP4FQI7IkXFahpQt6kGojutxLONP0AtcGVdr29s7SM5KO3Bg5oYCz4NDe9Ik
GVDYTQbrobbrZYPPaYwFcjSB8K9eXGfP0pNnkCNb7mZOxeWzgDOQJtL5zpnwF1la
Hc8n6PnnFVcDPhR0pLmQr6QNy7JI2nc5M34PuMAKJH5Hattn
-----END CERTIFICATE-----
Generated at Thu Sep 26 23:04:45 2024 by rpki-client on console-ams.rpki-client.org