Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e203136363239.roa
File:                     3230302e3131332e33322e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          n0gRu7xJGcFslhsBlA4kVZrWMF1uxRArcqmAvopCRmU=
Subject key identifier:   9B:20:5F:87:47:B4:69:95:2E:DB:E9:6B:11:93:09:B6:FE:BA:58:F9
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       203DE17DE1FD5303F9771E96E5A65FD8B54F0636
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 18:17:02 +0000
ROA not before:           Tue 05 Mar 2024 18:12:02 +0000
ROA not after:            Tue 04 Mar 2025 18:17:02 +0000
asID:                     16629
IP address blocks:        200.113.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3d:e1:7d:e1:fd:53:03:f9:77:1e:96:e5:a6:5f:d8:b5:4f:06:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:12:02 2024 GMT
            Not After : Mar  4 18:17:02 2025 GMT
        Subject: CN=9B205F8747B469952EDBE96B119309B6FEBA58F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:99:0e:9f:55:ac:41:6b:f5:be:69:bd:5b:
                    02:00:41:b9:5e:3f:7e:6c:33:6a:b4:f2:0a:4a:86:
                    33:7b:54:a1:f2:7f:dc:e3:78:ab:dd:bd:6e:7c:27:
                    f2:af:85:0d:64:83:7f:24:f5:70:69:3a:ec:71:c2:
                    6b:aa:60:09:e1:2a:f8:b7:91:1c:42:6c:0f:f1:a1:
                    fa:16:7e:6e:17:fd:48:a4:7a:8c:0d:f7:7d:8d:3e:
                    fe:96:36:c4:5b:3e:e2:34:d9:3c:ca:ac:a2:f3:3c:
                    1e:8a:6b:29:54:d4:4a:96:11:fc:21:a8:20:61:80:
                    5a:f4:cc:d3:35:de:52:8c:ff:d4:d0:da:96:fb:57:
                    9a:7c:85:f9:a0:11:07:2b:fa:0f:36:ed:fb:bf:27:
                    9a:ba:bb:f7:1b:cf:b1:09:51:db:ca:6e:7e:6a:41:
                    f0:6d:52:dd:17:16:17:0f:1d:28:01:98:83:ba:16:
                    ed:42:15:33:26:03:48:43:f5:b7:fc:c1:24:3e:0e:
                    52:e3:fa:21:b1:bd:b2:be:04:f2:08:fb:75:54:a9:
                    f7:14:6f:93:f8:8b:f0:ed:43:61:be:34:d0:c2:83:
                    fa:18:d0:b9:3f:a3:a6:88:bb:4c:19:56:80:d1:31:
                    79:d4:83:c1:26:6a:68:71:70:1b:a0:5d:60:53:fc:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:20:5F:87:47:B4:69:95:2E:DB:E9:6B:11:93:09:B6:FE:BA:58:F9
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e33322e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:14:09:54:59:29:6f:3b:de:f4:dc:15:03:16:22:b8:56:ba:
         34:16:be:3a:c4:eb:07:12:e0:d1:4e:8b:fb:5f:cd:30:f3:ae:
         aa:c6:00:88:b3:db:96:dd:5a:72:dd:74:29:43:a0:bf:b1:3a:
         fe:a9:ae:9e:d9:eb:06:b1:c5:64:0b:9f:80:71:8b:d8:7b:58:
         b6:e4:4d:aa:40:4f:9c:9e:2f:f3:39:b5:0f:de:c0:5c:0e:74:
         98:dc:d4:44:7a:6f:f9:28:05:2f:6b:f9:b5:14:19:09:74:fa:
         d2:c8:a1:09:3c:7d:37:ec:a2:27:53:11:d2:2d:66:ea:5e:33:
         4f:95:06:76:a9:c7:a3:a9:90:49:97:84:75:4a:d7:8f:d1:e7:
         92:07:66:75:88:52:e5:00:e2:1f:6f:f5:69:8c:56:b0:57:3d:
         ee:84:a2:b8:bb:b0:15:28:29:fd:00:65:e7:5e:6c:c0:ee:12:
         69:5f:13:ee:51:a5:62:43:31:05:56:7d:77:48:74:17:00:aa:
         d6:f8:9e:bf:c6:3c:eb:76:49:2b:3f:5a:fe:0f:0c:cd:00:75:
         3b:dc:ed:c2:89:dd:a5:c9:fd:ff:1d:d5:c3:22:0f:be:25:e5:
         7e:70:91:3a:de:34:cb:bb:9e:ea:64:9d:4d:c5:4e:2f:27:59:
         b1:fe:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:02:04 2024 by rpki-client on console-fra.rpki-client.org