Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e203135333131.roa
File:                     3230302e3131332e33322e302f32302d3234203d3e203135333131.roa (raw, json)
Hash identifier:          2QCN4KZYtD0OYcNn45WkAPQ4/bg/0cQHTOx7Nk8kIHY=
Subject key identifier:   48:D9:AB:1A:E1:3F:CA:11:7F:FD:05:47:AC:F0:72:69:EC:B7:F4:E3
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       32651F9B0ED76709E11FF0ED699280A55BA251C1
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e203135333131.roa
Signing time:             Tue 05 Mar 2024 18:16:49 +0000
ROA not before:           Tue 05 Mar 2024 18:11:49 +0000
ROA not after:            Tue 04 Mar 2025 18:16:49 +0000
asID:                     15311
IP address blocks:        200.113.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:65:1f:9b:0e:d7:67:09:e1:1f:f0:ed:69:92:80:a5:5b:a2:51:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:11:49 2024 GMT
            Not After : Mar  4 18:16:49 2025 GMT
        Subject: CN=48D9AB1AE13FCA117FFD0547ACF07269ECB7F4E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:01:a1:2d:dd:00:63:56:76:ad:8f:39:97:59:
                    77:6b:12:13:e8:d6:35:5d:c3:bb:65:a8:7a:c4:3e:
                    e5:12:aa:58:c4:88:f4:96:11:6c:5c:8e:19:cd:d8:
                    58:2b:fa:bb:53:bd:21:09:46:48:bf:0c:d2:db:99:
                    5f:94:a0:22:5a:9b:ef:c8:8b:1e:30:fe:00:7a:d7:
                    b8:ce:20:2c:6a:c2:08:97:05:86:7e:1c:6c:67:d9:
                    f6:47:ea:43:0c:ef:0d:80:f0:7e:88:c3:31:a8:d7:
                    97:d4:ce:ea:dd:b2:22:98:b7:f7:1f:97:2e:82:25:
                    43:18:fc:95:af:0c:76:73:6b:23:b9:6e:47:84:44:
                    40:d8:d2:d8:01:48:ae:ad:db:f5:dd:da:c2:c9:ba:
                    28:ab:eb:df:61:28:3d:44:4a:e5:b8:e7:ab:91:8c:
                    68:cc:2f:b7:97:a3:76:38:da:af:56:f9:8f:14:00:
                    e7:10:70:db:f2:6a:36:d7:25:77:cf:7d:64:56:7d:
                    87:b2:06:7a:17:b2:62:b8:dc:4c:ad:bd:39:2b:e2:
                    69:dc:62:29:f5:4b:20:d2:d4:93:35:31:e0:f1:97:
                    76:53:76:8f:34:bb:a9:f7:3e:77:70:11:20:e5:db:
                    e9:a6:cc:7f:05:96:28:68:68:9d:d0:e4:74:4e:7f:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D9:AB:1A:E1:3F:CA:11:7F:FD:05:47:AC:F0:72:69:EC:B7:F4:E3
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:92:3c:7c:e2:c5:0c:1b:f7:b6:9d:7e:35:84:a1:4d:9d:0b:
         ec:52:d6:ad:2e:8e:64:c7:0d:ad:a7:6f:49:03:c8:95:e4:28:
         2a:de:45:1b:56:8c:9a:5f:b2:05:d8:74:75:d7:a7:e7:1c:5c:
         c7:00:06:24:13:b3:ac:d7:b2:b6:41:e0:de:ff:87:15:b7:56:
         b8:b8:22:1f:d9:a6:04:b0:91:0b:24:be:d0:45:20:27:98:b9:
         ea:08:2b:24:ed:13:55:46:fb:f1:05:8f:a4:09:44:90:d3:e7:
         42:47:a3:70:c4:dc:f0:5f:fb:7f:e1:07:b6:0d:c7:da:16:10:
         28:93:13:23:c1:76:92:57:db:1c:7d:9b:f9:52:2b:33:3e:38:
         9d:02:58:65:ce:21:09:62:36:4c:df:bb:f9:08:94:d6:d0:79:
         d2:5e:f6:69:20:6f:4e:8c:bf:8c:e3:5d:ad:3d:4f:be:06:af:
         c7:5d:01:3f:d8:a6:07:e6:b6:2d:49:9f:27:c4:b1:74:ee:df:
         32:9f:e7:cf:5e:45:a2:98:df:be:b3:1a:ce:de:ae:e6:65:88:
         6e:8f:2a:3f:00:a6:2d:f7:12:78:c6:c1:8a:a0:70:51:ff:8e:
         02:89:2c:c2:03:62:7b:f3:52:e6:6d:6e:d7:87:00:1f:6d:9a:
         fe:9b:14:0f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMmUfmw7XZwnhH/DtaZKApVuiUcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNDAzMDUxODExNDlaFw0yNTAzMDQxODE2NDlaMDMxMTAvBgNV
BAMTKDQ4RDlBQjFBRTEzRkNBMTE3RkZEMDU0N0FDRjA3MjY5RUNCN0Y0RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpAaEt3QBjVnatjzmXWXdrEhPo
1jVdw7tlqHrEPuUSqljEiPSWEWxcjhnN2Fgr+rtTvSEJRki/DNLbmV+UoCJam+/I
ix4w/gB617jOICxqwgiXBYZ+HGxn2fZH6kMM7w2A8H6IwzGo15fUzurdsiKYt/cf
ly6CJUMY/JWvDHZzayO5bkeEREDY0tgBSK6t2/Xd2sLJuiir699hKD1ESuW456uR
jGjML7eXo3Y42q9W+Y8UAOcQcNvyajbXJXfPfWRWfYeyBnoXsmK43EytvTkr4mnc
Yin1SyDS1JM1MeDxl3ZTdo80u6n3PndwESDl2+mmzH8FlihoaJ3Q5HROf0mlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUSNmrGuE/yhF//QVHrPByaey39OMwHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzEzMTMzMmUzMzMyMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMhxIDAN
BgkqhkiG9w0BAQsFAAOCAQEAtpI8fOLFDBv3tp1+NYShTZ0L7FLWrS6OZMcNradv
SQPIleQoKt5FG1aMml+yBdh0dden5xxcxwAGJBOzrNeytkHg3v+HFbdWuLgiH9mm
BLCRCyS+0EUgJ5i56ggrJO0TVUb78QWPpAlEkNPnQkejcMTc8F/7f+EHtg3H2hYQ
KJMTI8F2klfbHH2b+VIrMz44nQJYZc4hCWI2TN+7+QiU1tB50l72aSBvToy/jONd
rT1Pvgavx10BP9imB+a2LUmfJ8SxdO7fMp/nz15FopjfvrMazt6u5mWIbo8qPwCm
LfcSeMbBiqBwUf+OAokswgNie/NS5m1u14cAH22a/psUDw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org