Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e203136363239.roa
File:                     3230302e3131332e33322e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          jrYSQ5difJO2EbPQf8HGda2pRayGmuE89PXesNA/fng=
Subject key identifier:   32:8D:98:AC:E1:12:A8:7E:DD:55:51:05:53:07:32:58:20:C1:54:9C
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       5FC69AB4ECC0992E18BB31D5FC95317763A6528A
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:00:45 +0000
ROA not before:           Tue 04 Feb 2025 19:55:45 +0000
ROA not after:            Tue 03 Feb 2026 20:00:45 +0000
asID:                     16629
IP address blocks:        200.113.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c6:9a:b4:ec:c0:99:2e:18:bb:31:d5:fc:95:31:77:63:a6:52:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:45 2025 GMT
            Not After : Feb  3 20:00:45 2026 GMT
        Subject: CN=328D98ACE112A87EDD5551055307325820C1549C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:76:dd:a0:1a:17:ae:12:ef:16:72:eb:df:
                    f6:81:96:ed:3f:f5:c5:c3:92:ce:86:60:dd:bc:a6:
                    86:0d:2c:52:e4:0f:26:2f:58:e5:cc:8f:60:9b:8c:
                    ec:fc:6c:c4:db:19:41:df:99:12:b2:16:66:a0:a3:
                    6f:0a:84:de:e7:54:42:9c:b0:69:e6:81:1e:b4:ba:
                    17:d4:e1:e2:16:bc:84:61:f9:4d:60:98:66:4c:d7:
                    af:85:42:5f:fa:ad:81:63:95:d8:34:fe:7a:2a:bb:
                    84:ed:fc:41:23:fa:68:88:85:3f:75:b4:0b:4c:67:
                    64:48:cd:e7:83:2a:80:6a:86:23:fb:25:4f:67:68:
                    ad:33:51:09:d9:d1:37:86:d6:e4:c1:bd:b7:12:13:
                    00:bc:0b:35:91:18:18:3a:62:c1:81:51:1d:ab:28:
                    bc:b0:54:d5:f9:ec:46:0e:aa:e5:8f:8d:9a:fe:6f:
                    a1:83:9b:77:6b:d5:ff:03:78:7e:a6:fe:a6:43:5d:
                    a4:63:a3:0d:82:6b:7a:8a:8b:d5:e9:34:44:3a:37:
                    1c:82:62:d3:1a:8a:d9:66:3f:51:2d:79:85:1f:62:
                    77:4b:6a:74:6c:ad:bf:a9:3f:5b:37:7c:d8:2a:da:
                    23:73:39:b9:0d:4f:db:5b:83:f5:5f:33:76:d6:97:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:98:AC:E1:12:A8:7E:DD:55:51:05:53:07:32:58:20:C1:54:9C
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:b1:b3:32:a3:2b:d9:68:5d:83:3b:e1:23:ac:88:20:9e:98:
         b0:c3:b3:94:dd:c0:83:f2:fe:b5:a7:8a:7e:a1:55:53:71:c8:
         b2:f2:ab:51:10:89:f4:60:55:41:83:ba:5c:0e:93:4a:9c:d3:
         1f:54:1c:d9:20:d5:fa:1e:81:a5:23:e6:d6:31:77:ab:03:f7:
         e4:95:fc:12:16:25:24:50:9b:32:17:3c:a0:b4:95:f1:5b:76:
         08:c0:b7:7d:49:57:11:cc:ca:73:47:a8:a7:3b:0a:8c:39:20:
         b2:b6:20:95:c2:f0:5d:ec:d8:67:42:14:68:cc:0b:83:17:9d:
         4c:dd:61:30:6a:a6:ea:d0:78:47:5a:ef:62:08:73:f6:f0:3b:
         9f:aa:f6:64:be:e5:a4:fa:06:09:e9:b1:de:ca:f6:74:16:f1:
         fc:58:27:ee:50:95:58:d8:7c:7d:95:0f:49:dc:b1:70:9f:87:
         c0:0c:8d:c7:fd:fa:15:24:04:8f:87:36:99:c1:db:02:31:81:
         ce:0a:0f:f0:da:8d:7f:c7:25:1e:3b:42:05:0a:6b:15:21:04:
         f6:d2:9a:6c:dc:d5:de:69:ab:e1:e1:0e:21:b2:dc:28:d1:cc:
         1e:18:0b:2d:4e:c0:6b:41:1e:cc:ed:cb:b6:ff:24:5b:c5:da:
         47:bb:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:54 2025 by rpki-client